Exterminate It! Antimalware


Known threats:700,085 Last Update:March 01, 12:55


exterminate it remove the agent.nbo files without restart. i let it scan again, nothing found! great job!

now i surf since 5 minutes, no popups, it looks like the problem is solved!

big thanks to you and your team, you are the only company that give me response and realy help to remove this bad worm/malware!

i will place now links to our network to your homepage and email my friends and business partners that they know that there is a realy good company with a great tool and good programmers.



m. s.

File: http_cap1.conduit-apps.com_0.localstorage-journal

Location of http_cap1.conduit-apps.com_0.localstorage-journal and Associated Malware

Check whether http_cap1.conduit-apps.com_0.localstorage-journal is present in the following locations:

Windows 2000, Windows XP, Windows Server 2003 specific http_cap1.conduit-apps.com_0.localstorage-journal file locations:

  • C:\Documents And Settings\USER_NAME\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_cap1.conduit-apps.com_0.localstorage-journal

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific http_cap1.conduit-apps.com_0.localstorage-journal file locations:

  • C:\Users\USER_NAME\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_cap1.conduit-apps.com_0.localstorage-journal

If you find http_cap1.conduit-apps.com_0.localstorage-journal file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The http_cap1.conduit-apps.com_0.localstorage-journal file is associated with malware only if found in the locations listed above.


Different Variations of http_cap1.conduit-apps.com_0.localstorage-journal File^

File SizeFile Md5Last Seen
16384683B4640A7702815E1C54315B3A0D000Sep 7, 2014
1083287FBB43CAC9AAD253B60785887C3F11ASep 8, 2014
360804DB627CBD7FB58FDD07FA1A70FD3061Sep 8, 2014
163844D5862BB349FF59F4B373D0A82474E05Sep 12, 2014
46406FC958178D5BFCFCC891F6D5309A785FSep 15, 2014
163846C5E45F6E3D26433E6D00423D1F79641Sep 15, 2014
36081E8A6F496DF4335BF1550B23C049722FSep 15, 2014
1638459D83B81E630E5ADD69A61AB76E74DE4Sep 16, 2014
163843223DB7A37158DD1021B1C3A54EDD336Sep 19, 2014
16384DBAFB5C7BA6DDA4352772058FC2D2C5BSep 20, 2014
163842C59512D934E24CB722DD2F3549192C9Sep 23, 2014
16384B32A208642770B1697B0FBA7511A3653Oct 20, 2014
360805EEA2CD8982FC2E99D328D51D4B4EF5Oct 21, 2014
4640D27DB75152EC7E330ABACE93E51C8652Oct 26, 2014
4640170600C98390869700A3D8485E123A5AOct 30, 2014
3608F5368805F5A0BB565BE3341CD572AFB2Oct 30, 2014
1638466D2DBEDD5772F07378A48FD55691315Nov 3, 2014
163849B66B32A34923AEAB4368DC81DC4BDDDNov 5, 2014
36081523B10621C7779EDA0238C04B4C2F9FNov 9, 2014
360867ABB9D4649AA6DF8BBA94AE1DDA152ANov 10, 2014
360873233AC911CF4A34331175A2DE4D8592Nov 13, 2014
464028811E2121229A61BB78070796635C5DJan 3, 2015
4640A5F388969B146ADB435F170DBCF7D83FJan 11, 2015
13928D77BF603A4A0506AEB1E047633972D2CJan 18, 2015
11864F0BB879EDF2FE22722FD6729173C1FE2Jan 25, 2015
46404DA504C6129AE55A48F0208950179308Feb 6, 2015
9800F26EBE78A2DF835D33C55EA39AE03613Feb 20, 2015
16384F77B8025CD701EDE39EFA8D8F6F10095Mar 7, 2015
118641B8444226BA31286F0B2BB1B95084A69Mar 19, 2015
464017A9665FF7BB2AEB29C1981A449B95E1May 1, 2015
11864389D1479CCF506F6C92B29A65279B8E3May 16, 2015
163845971E00C5D850E27695EDC73906CD26EAug 4, 2015
3608AE752D11D592DABBD5A6D66C8E7A621AAug 11, 2015
46407B2FBD3A1F9A09324BDBC834733C7748Aug 31, 2015
360885DC6A769815EE7B39B94C7C0F476C1DSep 2, 2015
10832FDEAE4F857379270E816B8B08C59FD49Sep 27, 2015
16384C94DF16BC936BFCD1CF6765A7A5F0709Oct 8, 2015
3608B9086BF6394EE8FABFCFE3C0A787552FOct 29, 2015
464047E419E3E57A0FF87620AC1BB1097918Nov 24, 2015
16384D100C44B9C001B85E6E3BFB5C87BC78ADec 13, 2015
16384ED1409724F4A58281D950412E12F6005Dec 19, 2015
4640A225496436D945775CDC4F02864D5801Dec 27, 2015
163846859C7EF38492052F08566F9828EC2BEJan 3, 2016
163845968DDBDC0B4CD14B824FA748198F265Jan 15, 2016
128969205FD7A75C4B2944B591DBCEEFB9EA2Jan 27, 2016
11864B2ADAFBDBE34F9847FD73963F9956E1CFeb 18, 2016
98004870F3410881B7E268348FE0CC3ACDF5Feb 22, 2016
1638446F58443FF60DB40B6AAFAEC084FC4FDMar 14, 2016
163846EE1AB732459038B00FF0837DBEB78E6Apr 18, 2016
360817CA8CC8D8BFFBD6017EB7C707795711Apr 28, 2016
464052819D099151DC7D556BFE7875241B7DMay 18, 2016
67049B10CEECFE719B723789EF2E7848B831Jun 4, 2016
4640EAA9783ABB5CD1F6D94B0E033D7E1EB3Jun 21, 2016
128961B77E0AD510DC8E4BD072B25BF5BACF0Jul 31, 2016
3608599B26D0ECC32C9EF49BBBBE4CA92859Aug 10, 2016
163845A2E6F3C6226FABB1FF2FB971ED72745Aug 31, 2016
4640ADEA93551658BC4E2CC9E7ED3EE2D5EDOct 29, 2016
16384B9EC99958B7086BAE20E7B5C8859E743Nov 27, 2016
8768E075749F8DE65F02F52FAEB595854E9BJan 23, 2017
56728E7C3B432107AB25F3B54D02FFC67F60Jan 30, 2017
464087B793C9C12304DABF796FB8C55D6505May 29, 2017

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove http_cap1.conduit-apps.com_0.localstorage-journal^

  1. To enable deleting the http_cap1.conduit-apps.com_0.localstorage-journal file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select http_cap1.conduit-apps.com_0.localstorage-journal and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of http_cap1.conduit-apps.com_0.localstorage-journal and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of http_cap1.conduit-apps.com_0.localstorage-journal and Associated Malware.
  6. Notes:

    • The deletion of http_cap1.conduit-apps.com_0.localstorage-journal will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of http_cap1.conduit-apps.com_0.localstorage-journal will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a http_cap1.conduit-apps.com_0.localstorage-journal malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type http_cap1.conduit-apps.com_0.localstorage-journal. The name of the first found registry value referencing http_cap1.conduit-apps.com_0.localstorage-journal is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to http_cap1.conduit-apps.com_0.localstorage-journal, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of http_cap1.conduit-apps.com_0.localstorage-journal and Associated Malware.