Exterminate It! Antimalware

malpedia

Known threats:688,080 Last Update:December 14, 08:29

Testimonials

I have had major computer issues in the last week. I was infected with the Darksma and Vundo downloader trojans. After researching the net for possible solutions, i found they are extremely difficult to remove. I tried a variety of spyware removal tools to no avail. To do it manually is near on impossible.
The symptoms are, computer runs slow, constant ad pop ups, hijacking of emails, theft of information and locking of a variety of functions.
I then found buried deep in a google search a link to Exterminate It. After reading it, I downloaded to do a free scan and a lot of stuff no other spyware had found showed up. So i went searching the locations and sure enough the files where there on my system. I tried removing them with no luck. So i spent the $25 usa to activate.
http://www.exterminate-it.com/
It removed all but 4. I was disappointed that the Trojans once again reloaded and my problems continued. So, i used the SUBMIT STATE service. I supplied all the info i could gather, pop up addys and what they were for , what others programs had found and Exterminate had missed etc. Within 24 hours i received and email telling me they had updated there system and to download it. I rescanned the system and it deleted all the previous locked files.
Darksma and Vundo downloader trojans have not done their re appearing act since and my comp is running normal again.

It's worth remembering the addy or downloading it to see what it finds. I had no problems doing so in anyway with this program. They done what they said they would on there web site in under the time frame.

Source

Administrator of Horse Racing Forums

File: http_gamingwonderland.dl.myway.com_0.localstorage

Location of http_gamingwonderland.dl.myway.com_0.localstorage and Associated Malware

Check whether http_gamingwonderland.dl.myway.com_0.localstorage is present in the following locations:

Windows 2000, Windows XP, Windows Server 2003 specific http_gamingwonderland.dl.myway.com_0.localstorage file locations:

  • C:\Documents And Settings\USER_NAME\Local Settings\Application Data\Google\Chrome\User Data\Profile 3\Local Storage\http_gamingwonderland.dl.myway.com_0.localstorage
  • C:\Documents And Settings\USER_NAME\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_gamingwonderland.dl.myway.com_0.localstorage
  • C:\Documents And Settings\USER_NAME\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Local Storage\http_gamingwonderland.dl.myway.com_0.localstorage
  • C:\Documents And Settings\USER_NAME\Local Settings\Application Data\Google\Chrome\User Data\Profile 2\Local Storage\http_gamingwonderland.dl.myway.com_0.localstorage
  • C:\Documents And Settings\USER_NAME\Local Settings\Application Data\Google\Chrome\User Data\ChromeDefaultData\Local Storage\http_gamingwonderland.dl.myway.com_0.localstorage
  • C:\Documents And Settings\USER_NAME\Local Settings\Application Data\Google\Chrome\User Data\Profile 15\Local Storage\http_gamingwonderland.dl.myway.com_0.localstorage

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific http_gamingwonderland.dl.myway.com_0.localstorage file locations:

  • C:\Users\USER_NAME\AppData\Local\Google\Chrome\User Data\Profile 3\Local Storage\http_gamingwonderland.dl.myway.com_0.localstorage
  • C:\Users\USER_NAME\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_gamingwonderland.dl.myway.com_0.localstorage
  • C:\Users\USER_NAME\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\http_gamingwonderland.dl.myway.com_0.localstorage
  • C:\Users\USER_NAME\AppData\Local\Google\Chrome\User Data\Profile 2\Local Storage\http_gamingwonderland.dl.myway.com_0.localstorage
  • C:\Users\USER_NAME\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Local Storage\http_gamingwonderland.dl.myway.com_0.localstorage
  • C:\Users\USER_NAME\AppData\Local\Google\Chrome\User Data\Profile 15\Local Storage\http_gamingwonderland.dl.myway.com_0.localstorage

If you find http_gamingwonderland.dl.myway.com_0.localstorage file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The http_gamingwonderland.dl.myway.com_0.localstorage file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of http_gamingwonderland.dl.myway.com_0.localstorage File^

File SizeFile Md5Last Seen
5120754BC4386C42302D4EAC955B143C4223May 23, 2015
5120A12E755237AF05C8D7AFA45B1F9F2A98Jun 17, 2015
51205CD76FC20FA24931A37A8965A7786674Jun 21, 2015
5120C77155039573E38AC60EB6AD5739420AJul 23, 2015
5120C81D44C1C619E19F130F226418BA08F0Sep 9, 2015
5120F8B156E03DDFD217546375698A61F83CSep 22, 2015
51200446615D52A34F9F9F3AD79411B63A7ASep 26, 2015
51209AAD8A6CD11A99B25CB8793EE0E85F5CNov 1, 2015
512083C72ECD4DB92B98FA07276C1743B2C1Dec 20, 2015
5120CB2799D2166938A9195B32ED1E027337Jan 1, 2016
512065ED2D045EFF651DF0B87EB5A7C7AD3DJan 10, 2016
5120AA1A2A680713EF6CCDD350CD8D2D34C0Jan 13, 2016
7168150A7976C07C2959BEE690F0F78FE0D7Jan 28, 2016
51201A5A82AC74DC27590396235606731F7BFeb 2, 2016
614457371DB7CABB8EB1B3944211999D73B0Feb 3, 2016
5120D9A8F60C36BE8DD63BCF75A29CFDEB37Feb 3, 2016
5120452BC47F9E38D88BB1D384E057C83C00Feb 13, 2016
5120759DB7084D401FD63A509A08DFC6E923Feb 16, 2016
512070D4ED7FF100ECDBACDD1E918CC993FAFeb 18, 2016
5120D0CAB51BED7D442E8EB9DACC427C31C4Feb 22, 2016
5120C930B1E9626C2D2DF2638BA38A7AB38AMar 14, 2016
5120B6CC5E223A232F4CD7C3F420FC82F3FAMar 23, 2016
5120FF4E6B87F48774334DCE81CAEBE4F4AEMar 27, 2016
512083873F54A3E45B8BADCE5320308FD86CApr 11, 2016
51207C2F07E33EF192586BA4A7B864B3604CApr 26, 2016
6144483B2CBE70C81CDFA6654A80EE694FACMay 1, 2016
61440026CD2A4C13149440CE739B1D8038D2May 12, 2016
614450B83FC4E32E195CF9447486B3AC6A90May 23, 2016
614411C98F074687F86AEED1B24E8D36769BJun 1, 2016
51205F744A1E326EC4F44B4978DBD434FF60Jun 1, 2016
512085B018AD34296010CF5EC6CC6D43DC74Jun 4, 2016
6144A96106781F3E97F960C24D20DF7990A0Jun 8, 2016
5120E6328915D8EFC1FC3FE96D89E0E7F432Jun 12, 2016
5120D26FC2C0A0077E07B371929AE5F3D379Jun 14, 2016
7168EB5B4DEE8655D720CA3490DF333C3273Jun 15, 2016
61446F9E5032F8733E59616F7925A189A89CJun 29, 2016
71682E901B8A5FE49BFBBC51C70E7751C86AJul 19, 2016
7168F967B406EA5E9C48F12159911CC1A545Jul 19, 2016
7168C2E3AF24DA9D21A26B1F10D55F6EE26CJul 24, 2016
61448DC04EE33751636605075BEE61C8F885Sep 6, 2016
71688E5AF2FAC3E9727B85FE486E02C751FESep 15, 2016
3072E95DE133C30CE39DE87CF3069F4D9DC4Sep 23, 2016
614476AF4BBAC938191C36F76C7804EDEC6CNov 10, 2016
61445CB1EFF578670E5DF7A46631798515DDNov 18, 2016
6144737EE8CDD9C1D095C91D06DC7F44D872Nov 21, 2016
3072926CF94D99E7B8704D8854FDB79BEBB4Dec 7, 2016
5120D46E43BBC8415CEFC6B98F3690E53BC6Dec 11, 2016
71685CD22518B608778263C40BA33E5F7751Dec 21, 2016
6144B3FE50055723A58D113595320703921ADec 21, 2016
6144B58D6A41191985466C7434AC9E574519Dec 22, 2016
6144035CCAC959FEE3EBBBAC539EA85664BEJan 15, 2017
6144A48932C5B71B66C57F8D4D41379150C0Jan 16, 2017
61446C2B8F5D3DD73E4663FB67920FBC0D94Jan 17, 2017
71689F60CDC8F8EE1F47DC7D0982B041437EJan 27, 2017
5120E6D084E64373AD0FB6A5BB5D3C3241F3Feb 1, 2017
30728300177C7D7713502EC0C90CEBD7D3CEFeb 21, 2017
5120547D630902088CE423C94826FEE6F2FDFeb 24, 2017
61443EFBB92CCA8E3EA835EFF0FFFEBB7852Mar 27, 2017
614421FEC24DFD3CDEF7EA8F28C4BDDDF0F0Mar 29, 2017
614469869EE625C3B3351CC5028499B10ADCApr 4, 2017
30721FA0C9476FFC96E5E0185D8369241650Apr 5, 2017
6144B9C3462419EFD1487D063169DE543C95Apr 20, 2017
716840084FB49845BC2D0DF7D815E08C7E5AApr 24, 2017
3072C2F287AD2BF573B5D2DF27FDAC2DE504Apr 24, 2017
61448F19DBB5A8512C2205217C7B8FFCE016Apr 27, 2017
71682DEE772D45BB29BCC015FD690E39BE05Apr 29, 2017
71686CB6213A112AA04535A403876A1AC463May 4, 2017
30720B2FDDAECB7C3028A40207FBBB8C263EMay 6, 2017
6144B0340B1B0B11442ED7BA926B9BA04615May 12, 2017
614459F0072F5C53922B9FE4CB3530984152May 15, 2017
30728C9DEE54FF6D70BCD690E749852FB626May 17, 2017
7168735AFA2459FF01D254DF9F02B149D061May 23, 2017
6144CA82BA23CCC882153A019F69581A315FMay 24, 2017
307286162ECB111B44323696E3A1378413E1Oct 8, 2017
512055BFF8D8A95E43366C8B043D92812BB7Jun 3, 2017
614424764436708FD22A152C4AFBD4D44EE3Jun 5, 2017
6144926AD51CA4B694D423EC062D668AFF4CJun 5, 2017
61442C7A8378F475281AB186CDF01214F986Jun 8, 2017
61445AF58B813481FDC579ADBFAC3F5DD3CBJun 14, 2017
614428A67374847FE5A3E17C2BEF60900010Jun 16, 2017
307282685B1F20BEC0A79816776EE5BD2F63Jun 18, 2017
30729D73523F290421395D65C7B2D8E3ACBBJun 5, 2018
614432522B9AECABADA52DB9D1A78CBD86C5Oct 23, 2017
1228833D0CAC56068CD4FDBC49A9E80D02B84Feb 28, 2018

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove http_gamingwonderland.dl.myway.com_0.localstorage^

  1. To enable deleting the http_gamingwonderland.dl.myway.com_0.localstorage file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select http_gamingwonderland.dl.myway.com_0.localstorage and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of http_gamingwonderland.dl.myway.com_0.localstorage and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of http_gamingwonderland.dl.myway.com_0.localstorage and Associated Malware.
  6. Notes:

    • The deletion of http_gamingwonderland.dl.myway.com_0.localstorage will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of http_gamingwonderland.dl.myway.com_0.localstorage will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a http_gamingwonderland.dl.myway.com_0.localstorage malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type http_gamingwonderland.dl.myway.com_0.localstorage. The name of the first found registry value referencing http_gamingwonderland.dl.myway.com_0.localstorage is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to http_gamingwonderland.dl.myway.com_0.localstorage, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of http_gamingwonderland.dl.myway.com_0.localstorage and Associated Malware.