Exterminate It! Antimalware

malpedia

Known threats:699,742 Last Update:November 20, 22:46

Testimonials

Matt,

Thanks so much for your help. For now, this seemed to have solved the problem and found all the infected files. I'll keep you updated, as I know this virus can be very hard to kill.

Thanks a million.

Jason

File: eAPI.fne

Location of eAPI.fne and Associated Malware

Check whether eAPI.fne is present in the following locations:

eAPI.fne file locations that are Windows version independent:

  • C:\Windows\System32\eAPI.fne
  • C:\Windows\System32\16580D\eAPI.fne
  • C:\Windows\System32\8FD01E\eAPI.fne
  • C:\Windows\System32\0B30C6\eAPI.fne

Windows 2000, Windows XP, Windows Server 2003 specific eAPI.fne file locations:

  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\E_4\eAPI.fne
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\E_N4\eAPI.fne

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific eAPI.fne file locations:

  • C:\Users\USER_NAME\AppData\Local\Temp\E_4\eAPI.fne
  • C:\Users\USER_NAME\AppData\Local\Temp\E_N4\eAPI.fne

If you find eAPI.fne file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The eAPI.fne file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of eAPI.fne File^

File SizeFile Md5Last Seen
323584289D7B6F7D1862E8E715062A90DCEFB4Apr 5, 2010
32358448EEBC2732D1A8F646BD40BBF7E2BAE4Apr 30, 2010
33587269AB84990AB251EB5A62E7EDDD705997May 7, 2010
3235849CA280FED015AF8EB2BA85BC76B039AAMay 10, 2010
3358727BCB58659E959D65514C45CD01BFC8E4Nov 28, 2010
323584ED5CC9EA44C70C12A83FD3DC94B3475AJan 12, 2011
335872A9CC5AC8AF486090335A7E6B184CA79BJan 26, 2011
323584A618D8926BF6362C48752DC8000E2ED2Feb 9, 2011
323584AD609B79F694E41DCDD6297FF6CD4E13Feb 16, 2011
3235842AA1223B17795654AD399C1103A91F23Mar 5, 2011
323584F5FD122565C20E88D371483C20AF4CCCApr 9, 2011
3235847B644D08053DADC91DF62F345508A29EMay 19, 2011
323584145C0F9EA2ECE08F03D284800D4ECC59Jun 15, 2011
3235843D2AA98173E8F12F403AB5069107B705Jul 26, 2011
32358444812AA049D28BD7F4BDED08F73E31FCAug 20, 2011
3235846A0A5E28BBB547B6BB09162362A734D7Aug 29, 2011
323584BC22AA0166F6DF91A56FDC03EB850F6FOct 8, 2011
32358401E6F367EDAC8BB01A822713B4DC3B76Oct 28, 2011
3235845ACBB745E915C0FCF3BB21237748D2FFNov 23, 2011
323584FE6B115010DD86ED361F2E6B7597EE50Nov 30, 2011
32358401A05BFF3002E953B7F08DEAB833FE0ADec 7, 2011
323584D9EC3524F526DE6F4300FDBE03CD3113Dec 22, 2011
323584F84C58B0E24429155FDD1B2E5BBD92A2Feb 20, 2012
323584BA7FE797498E16D61F9FD0DD57244FF4Feb 22, 2012
32358400E876E3CD989BF5D4FC20578310E3D8May 2, 2012
323584C26B701D8E1911135EB2418E0F31129FJul 17, 2012
32358484D2E5A92B9701BA60153DF514D9E915Dec 21, 2012
323584E0225B4AD23C539FA3CF1B27E4EF627CFeb 5, 2013
3235843B42049D434F3DC3BD3E7EC8C4D99F9BMar 22, 2014
323584C23C63A788D8CA38D955F5BAEBEF719FApr 17, 2014
323584C1E7CD90E8556D1DCE3811AB1DF14F71Dec 23, 2014
3235846CBE30BFAEF46BCE0EAE201F368FB815May 5, 2015
32358451C5C8D1354F49688EDF5D38BDFBE810Oct 22, 2015
323584DD4A034D27CAE558E2A9C1B13C047AA0Dec 14, 2015
3235848659A79D81222D6C5BD177448ECF2ED5Mar 3, 2016
32358425B794B18BD8D03DC9530111CBCE4173Feb 18, 2017
3235843BF9186E17B8BD593FD6F325B5B56DF9Feb 15, 2017
3235840FEF68127B6F78E47EE5D6F375A16199Mar 31, 2012

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove eAPI.fne^

  1. To enable deleting the eAPI.fne file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select eAPI.fne and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of eAPI.fne and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of eAPI.fne and Associated Malware.
  6. Notes:

    • The deletion of eAPI.fne will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of eAPI.fne will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a eAPI.fne malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type eAPI.fne. The name of the first found registry value referencing eAPI.fne is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to eAPI.fne, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of eAPI.fne and Associated Malware.