Exterminate It! Antimalware

malpedia

Known threats:699,443 Last Update:July 17, 22:52

Testimonials

I have had major computer issues in the last week. I was infected with the Darksma and Vundo downloader trojans. After researching the net for possible solutions, i found they are extremely difficult to remove. I tried a variety of spyware removal tools to no avail. To do it manually is near on impossible.
The symptoms are, computer runs slow, constant ad pop ups, hijacking of emails, theft of information and locking of a variety of functions.
I then found buried deep in a google search a link to Exterminate It. After reading it, I downloaded to do a free scan and a lot of stuff no other spyware had found showed up. So i went searching the locations and sure enough the files where there on my system. I tried removing them with no luck. So i spent the $25 usa to activate.
http://www.exterminate-it.com/
It removed all but 4. I was disappointed that the Trojans once again reloaded and my problems continued. So, i used the SUBMIT STATE service. I supplied all the info i could gather, pop up addys and what they were for , what others programs had found and Exterminate had missed etc. Within 24 hours i received and email telling me they had updated there system and to download it. I rescanned the system and it deleted all the previous locked files.
Darksma and Vundo downloader trojans have not done their re appearing act since and my comp is running normal again.

It's worth remembering the addy or downloading it to see what it finds. I had no problems doing so in anyway with this program. They done what they said they would on there web site in under the time frame.

Source

Administrator of Horse Racing Forums

File: http_myfuncards.dl.myway.com_0.localstorage

Location of http_myfuncards.dl.myway.com_0.localstorage and Associated Malware

Check whether http_myfuncards.dl.myway.com_0.localstorage is present in the following locations:

Windows 2000, Windows XP, Windows Server 2003 specific http_myfuncards.dl.myway.com_0.localstorage file locations:

  • C:\Documents And Settings\USER_NAME\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_myfuncards.dl.myway.com_0.localstorage

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific http_myfuncards.dl.myway.com_0.localstorage file locations:

  • C:\Users\USER_NAME\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_myfuncards.dl.myway.com_0.localstorage

If you find http_myfuncards.dl.myway.com_0.localstorage file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The http_myfuncards.dl.myway.com_0.localstorage file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of http_myfuncards.dl.myway.com_0.localstorage File^

File SizeFile Md5Last Seen
5120882805C3A1AF6AF90C5FD748E4644A35May 15, 2015
5120A742569B83412506564FA13381F94BA5Sep 16, 2015
512010FD9045D638A5ABAD2460FE19F23F38Oct 22, 2015
512075136B612613339615BEF72FE502C3FEOct 25, 2015
5120A0C0E7DB9E13A917E6D6F9DEDDF52496Dec 15, 2015
51207B0733C27845C7E653FD13175F317EADDec 24, 2015
4096D17999792F712CE113F5654C38F77860Feb 18, 2016
61446D3F3F669949378D5A9A50FE9BC154B8May 2, 2016
5120DC77CCEF5D7246164969407CA0A44E3FMay 25, 2016
6144B643A946B01FC7DC0CE4D9AB577C8769Jun 8, 2016
51209634E44FA47A20035EE32794DD92D6FEJul 10, 2016
5120D7AFE2BF39B4C30B63055D6A76247217Jul 14, 2016
614498CBE799FCC3C445AAB224099A1A4F28Aug 31, 2016
7168172DCE07D73F4A85EADF01A4485F2303Sep 12, 2016
5120F7681662B8C4AAD6483B75F0D87F1055Sep 18, 2016
614431E61FDA028B1A3674DCEA57EA406943Oct 2, 2016
61442152A959EAF06182BBBC6197E61D352EOct 10, 2016
5120C46C71DDB2E71D35BE3470BB5C3857E5Oct 11, 2016
61444E7EBD071ADDF10A3157C69A5DBAEA75Oct 19, 2016
5120562533D6FDBC6D5C88D4866085FB7A15Oct 30, 2016
40960A48B0049BE63A132B01AF6B716FEFAAOct 30, 2016
71682B18CC9541849BE28735FBDB27330850Dec 6, 2016
71680C7449A99E54E1D18D9A216A4FD34D8CJan 30, 2017
51208A0AF575C3465D18ADA5190C853FDCF3Feb 3, 2017
614491F55854804C24F28FA9FD396C7B2F7CMar 6, 2017
7168852921A14E3BDDEC3852FBB17AF23D5BMar 18, 2017
6144CF2B53D9032AA8309DC9A44C4B0D7528May 26, 2017

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove http_myfuncards.dl.myway.com_0.localstorage^

  1. To enable deleting the http_myfuncards.dl.myway.com_0.localstorage file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select http_myfuncards.dl.myway.com_0.localstorage and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of http_myfuncards.dl.myway.com_0.localstorage and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of http_myfuncards.dl.myway.com_0.localstorage and Associated Malware.
  6. Notes:

    • The deletion of http_myfuncards.dl.myway.com_0.localstorage will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of http_myfuncards.dl.myway.com_0.localstorage will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a http_myfuncards.dl.myway.com_0.localstorage malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type http_myfuncards.dl.myway.com_0.localstorage. The name of the first found registry value referencing http_myfuncards.dl.myway.com_0.localstorage is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to http_myfuncards.dl.myway.com_0.localstorage, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of http_myfuncards.dl.myway.com_0.localstorage and Associated Malware.