Exterminate It! Antimalware

malpedia

Known threats:685,730 Last Update:November 03, 14:34

Testimonials

I have had major computer issues in the last week. I was infected with the Darksma and Vundo downloader trojans. After researching the net for possible solutions, i found they are extremely difficult to remove. I tried a variety of spyware removal tools to no avail. To do it manually is near on impossible.
The symptoms are, computer runs slow, constant ad pop ups, hijacking of emails, theft of information and locking of a variety of functions.
I then found buried deep in a google search a link to Exterminate It. After reading it, I downloaded to do a free scan and a lot of stuff no other spyware had found showed up. So i went searching the locations and sure enough the files where there on my system. I tried removing them with no luck. So i spent the $25 usa to activate.
http://www.exterminate-it.com/
It removed all but 4. I was disappointed that the Trojans once again reloaded and my problems continued. So, i used the SUBMIT STATE service. I supplied all the info i could gather, pop up addys and what they were for , what others programs had found and Exterminate had missed etc. Within 24 hours i received and email telling me they had updated there system and to download it. I rescanned the system and it deleted all the previous locked files.
Darksma and Vundo downloader trojans have not done their re appearing act since and my comp is running normal again.

It's worth remembering the addy or downloading it to see what it finds. I had no problems doing so in anyway with this program. They done what they said they would on there web site in under the time frame.

Source

Administrator of Horse Racing Forums

File: http_audiotoaudio.dl.tb.ask.com_0.localstorage

Location of http_audiotoaudio.dl.tb.ask.com_0.localstorage and Associated Malware

Check whether http_audiotoaudio.dl.tb.ask.com_0.localstorage is present in the following locations:

Windows 2000, Windows XP, Windows Server 2003 specific http_audiotoaudio.dl.tb.ask.com_0.localstorage file locations:

  • C:\Documents And Settings\USER_NAME\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_audiotoaudio.dl.tb.ask.com_0.localstorage

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific http_audiotoaudio.dl.tb.ask.com_0.localstorage file locations:

  • C:\Users\USER_NAME\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_audiotoaudio.dl.tb.ask.com_0.localstorage

If you find http_audiotoaudio.dl.tb.ask.com_0.localstorage file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The http_audiotoaudio.dl.tb.ask.com_0.localstorage file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of http_audiotoaudio.dl.tb.ask.com_0.localstorage File^

File SizeFile Md5Last Seen
512081F4C9C44BAE1210BD373A65722D8BC0May 7, 2015
5120E504C56042A2FA042FA7EF818DCC71F7Jun 15, 2015
512077D531B5772D8DDA92792A84A21F839BJul 15, 2015
4096F0ED7FFE79F12C7777EF9497B043CCEEAug 11, 2015
409642D0981D4634348B4F5C3AE64C00823BOct 18, 2015
40960E5ABDDE536AE5F318ACC5B2CF2B30AFNov 28, 2015
5120EA3934A246CE8837DD6FB4891D8C5135Feb 3, 2016
40965662A8F4864B1BFE13C49336E88D8D38Feb 5, 2016
4096EFA0A3D302F75C2C1BB1A9BFE1C818FFFeb 8, 2016
5120D8B40350ACBA4E7C536495929F63A34EFeb 17, 2016
512092E7A5500C995AB595B014B9DB877AE1Mar 24, 2016
409638DA78F7E935E7A933F7DB2E80789E59May 14, 2016
512077AAE0C40B359BCEF67147480EBEE68BJun 5, 2016
51208164A383378DE9BAC97D3E697F9C0F0DJun 14, 2016
4096DED0F6906F232ACC358BA94F74A2EF30Jun 24, 2016
5120B288F21BAE959B61BA243B36B26F9DEDSep 2, 2016
5120E11C31A39A38D8BDDCA9C877C1E20707Sep 19, 2016
51208349A3198A064AC79E29D91B17B446F3Oct 26, 2016
5120D0CC9AEECC309A5A86ED8C82E5EE70EANov 25, 2016
5120DABE1866BC0CB4F931C342A48CEB1A29Dec 2, 2016
512083C42AB2B163B37FE0845CB23A2C84E7Dec 6, 2016
51202FFABA30C1613380E7692B6080446AB2Dec 13, 2016
5120919D8F28D4A4F51FF75C3094CE88CB81Dec 31, 2016
4096D2416F1011C161F2B3FE9886B15856A7Jan 26, 2017
61445FD0243309E4687B9E0E5FE735E133FEFeb 9, 2017
512026C569130D944AC08C5B2ECCBA66B5EFMar 13, 2017
5120A7B7D8E4A36FEC7DC21326666127C211Mar 28, 2017
614445DA09688F099F9320DF5D9C5E458C58Apr 28, 2017
512022302EA411F9F7C04531A504F2D34525May 3, 2017
5120ADF047D99DD9FDDC547DB396539AEEA6May 4, 2017
5120D055A14DFDFE0711FB4CAA5C22A30330May 19, 2017
51202C56FF7198C6A3FE2C8C1AACBCEB1F45May 25, 2017
6144D8C1949999A5CB1E872EECB70BAACB0BMay 31, 2017
30729D73523F290421395D65C7B2D8E3ACBBJun 19, 2017
5120CAE3A8E19590B13DBEF7900AB0A2D411Jun 21, 2017
1228833D0CAC56068CD4FDBC49A9E80D02B84Dec 15, 2017

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove http_audiotoaudio.dl.tb.ask.com_0.localstorage^

  1. To enable deleting the http_audiotoaudio.dl.tb.ask.com_0.localstorage file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select http_audiotoaudio.dl.tb.ask.com_0.localstorage and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of http_audiotoaudio.dl.tb.ask.com_0.localstorage and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of http_audiotoaudio.dl.tb.ask.com_0.localstorage and Associated Malware.
  6. Notes:

    • The deletion of http_audiotoaudio.dl.tb.ask.com_0.localstorage will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of http_audiotoaudio.dl.tb.ask.com_0.localstorage will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a http_audiotoaudio.dl.tb.ask.com_0.localstorage malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type http_audiotoaudio.dl.tb.ask.com_0.localstorage. The name of the first found registry value referencing http_audiotoaudio.dl.tb.ask.com_0.localstorage is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to http_audiotoaudio.dl.tb.ask.com_0.localstorage, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of http_audiotoaudio.dl.tb.ask.com_0.localstorage and Associated Malware.