Exterminate It! Antimalware


Known threats:700,085 Last Update:March 01, 12:55


I have had major computer issues in the last week. I was infected with the Darksma and Vundo downloader trojans. After researching the net for possible solutions, i found they are extremely difficult to remove. I tried a variety of spyware removal tools to no avail. To do it manually is near on impossible.
The symptoms are, computer runs slow, constant ad pop ups, hijacking of emails, theft of information and locking of a variety of functions.
I then found buried deep in a google search a link to Exterminate It. After reading it, I downloaded to do a free scan and a lot of stuff no other spyware had found showed up. So i went searching the locations and sure enough the files where there on my system. I tried removing them with no luck. So i spent the $25 usa to activate.
It removed all but 4. I was disappointed that the Trojans once again reloaded and my problems continued. So, i used the SUBMIT STATE service. I supplied all the info i could gather, pop up addys and what they were for , what others programs had found and Exterminate had missed etc. Within 24 hours i received and email telling me they had updated there system and to download it. I rescanned the system and it deleted all the previous locked files.
Darksma and Vundo downloader trojans have not done their re appearing act since and my comp is running normal again.

It's worth remembering the addy or downloading it to see what it finds. I had no problems doing so in anyway with this program. They done what they said they would on there web site in under the time frame.


Administrator of Horse Racing Forums

File: GoforFilesUpdate

Location of GoforFilesUpdate and Associated Malware

Check whether GoforFilesUpdate is present in the following locations:

GoforFilesUpdate file locations that are Windows version independent:

  • C:\Windows\System32\Tasks\GoforFilesUpdate

If you find GoforFilesUpdate file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The GoforFilesUpdate file is associated with malware only if found in the locations listed above.


Different Variations of GoforFilesUpdate File^

File SizeFile Md5Last Seen
306446C80D33F620CACAC771DE4E74C0EA42Mar 26, 2015
30701F7E0270DBB7BC34CCAEB54253FAE89FMar 27, 2015
3050850CE8B0DFF2627F04F03E9DE79B5274Mar 29, 2015
307204132858289A3C19D5D06393A3A30238Apr 22, 2015
3058A15EA4C2CF771AF3345A25CA368CFAFFApr 23, 2015
3074312CB718131A6664755BC767DF38D676May 4, 2015
3058C74896EE95CA060DE022AD69CC162D05May 12, 2015
306216EE71DA5C05DE4E632255342BD9E3B9Jun 10, 2015
3076B2A3681163C7E5A488DA1F9A29E1B9ADJul 4, 2015
30687C96FEA725A35552F33B1F0C24EFC62EJul 20, 2015
3054C7A3D38A241C5A93FDC6C04241190795Aug 3, 2015
3062DAE878EBDBBD459D24AFA8483E2ED5EBAug 8, 2015
308897F929A4C9D5D2140F475063506CFDB1Aug 19, 2015
3054C1077EF15E3863C87F105C6834765197Sep 4, 2015
30681633A0EED3AFC54B8BEB0D02A65DD3D0Sep 6, 2015
30684D7F4FCD9AAC08F93152BACB291C393ASep 14, 2015
30782F198210C8B4BC134D88383912100547Oct 17, 2015
30705F79BF9950E41ED850DB0C2FF2F55013Oct 22, 2015
306213E075EEF3693201994DA5B9941AC309Nov 18, 2015
30666A749C96089484D1A4B9DFBB1FF1ECDBNov 24, 2015
3078BF6CC08F5BD2F3B749BBFF238968F765Dec 14, 2015
3068AE2C7EBCCA5F7455D34BF9FEBB79E869Dec 21, 2015
30782C05C931C4E741902455CAB075FA909ADec 30, 2015
30747FA289E70E24EA62B514D456521156F6Jan 11, 2016
30685A99A9786B20F3DE81A29951A6115A98Jan 28, 2016
3070A40FC0AA707E0972ECBFE86FDAE68DA2Feb 2, 2016
306456025BA56F179AE07E0F48078AE0DD78Feb 5, 2016
308263C535F83C6F284E2434AC0D4712DE2BFeb 11, 2016
30828B775C5B6F12F02D47563D48262D76CFFeb 16, 2016
30649EEF58263D1254487129F48414A883B1Mar 16, 2016
31804A6BF554DC526FB4441C5A69C228102AMar 30, 2016
30545230BD69202CC0F37ABEC14360155B01Apr 13, 2016
3100D3734C5434B57D8AD81478EB697F4EECApr 19, 2016
3060D97905AE26FA81687DB4288CA87B6629May 6, 2016
30661F15C479845D4C2384C8920B982FEC6FMay 7, 2016
3070E79BD5F2591D11A8608EE83CA8376CCBMay 19, 2016
30708BEBFDA007CF8BFB338C70786AB684D2May 26, 2016
307405CB46E5A1482258EF65366BFE97185DJun 2, 2016
3066244E18C52B368D4B76820F6C7FAABEBBJun 7, 2016
30729451051A6C62CBA61F2ED446629E6D93Jun 28, 2016
3064AA206D8A7059D221161AAC963E36B544Jul 4, 2016
30740D96231047DE41EC92418DF43FBF60D6Jul 12, 2016
3064B25E937AC3038CB20055F4ACC8DA246BJul 19, 2016
3054A49699EAF46ED510E1072A8232FF6DDCAug 2, 2016
3058761DA4E7E9FFAEDBAD45E9F07667BDF1Aug 17, 2016
3050DED5399311C88BA9253AB607AD5DBB68Sep 11, 2016
3178E1259F09E6DCBCD8EB7653DDBB141405Nov 1, 2016
30589DB241B0E9580B2F8F1612255CF24164Nov 11, 2016
2390A13109AB11B67CFAF4A6733608BDB3F3Nov 22, 2016
3058C18F0AA9E9EDF5FE6F2E6D57C89CD6EANov 23, 2016
3058F59A07C981C98C91BF4AA41F660FFCEBDec 1, 2016
3062B878D3BB6B90C27C8E9A231C6DE1B0C5Dec 1, 2016
3076A947F7602693CC8A63AAC4C07F5377CDJan 2, 2017
30747EDE9C991904630E3619401038C8AE28Jan 11, 2017
305465FAE82EF92C890FCAC9D2470B449DBCJan 29, 2017
237409641DC9BD5F2ED03B82EC38329E4A85Feb 2, 2017
3084EF97752B8F17F3BA58A639A5AD64F124Feb 3, 2017
3076FE53E562BFE9BFE45BD5773B72AFFC63Feb 5, 2017
3062166FF3DF34219F1F3DA5E98A2CE4EBDCFeb 11, 2017
309453EB3050FED245220393A6900BC9DBE6Feb 20, 2017
3070C30F85627205AECC153B0B89EA29B15AFeb 26, 2017
30784BFCECC1EFA9A2BE573E41AC91705D09Feb 28, 2017
3070CAA99AEFEB8B2B32D7DFD7EFD654B987Apr 3, 2017
306217C9015582B643452FA5A948E9B45A00Apr 7, 2017
3092036DEE66D3364DDCFACA622865158016Apr 25, 2017
31620363209B0ACEFD2A01CA387F6D1547A4Apr 29, 2017
3078E0AC6F7AEAFEFB7F760B0435D027F6CFMay 2, 2017
30586C3D1F93A4120B4694F1712A44A894B2May 12, 2017
3058DA880882F680F39DE94DE57879BDA295May 14, 2017
3054C701B285FDB66407C25A682D59E786FFMay 17, 2017
307651063A97247562078EF16B55DA9B895DMay 20, 2017
30588A4894B628713F99942AD0EEADB47580May 21, 2017
3060C0A204AD7D1088DBD08FF3D5C9723C45Jun 8, 2017

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove GoforFilesUpdate^

  1. To enable deleting the GoforFilesUpdate file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select GoforFilesUpdate and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of GoforFilesUpdate and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of GoforFilesUpdate and Associated Malware.
  6. Notes:

    • The deletion of GoforFilesUpdate will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of GoforFilesUpdate will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a GoforFilesUpdate malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type GoforFilesUpdate. The name of the first found registry value referencing GoforFilesUpdate is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to GoforFilesUpdate, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of GoforFilesUpdate and Associated Malware.