Exterminate It! Antimalware

malpedia

Known threats:696,754 Last Update:April 09, 23:37

Testimonials

After scanning my computer many times using big name anti-virus and malware programs I still had several problems. Finally Exterminate It found multiple infections from NetSky. I sent Exterminate It a sample and the next day I received an e-mail instructing me to update and rescan. After following the instructions ZAP the worm/trojan was gone. My computer seems to be completly back to normal now. Good Job Exterminate It!

Melvin

File: http_onclickads.net_0.localstorage

Location of http_onclickads.net_0.localstorage and Associated Malware

Check whether http_onclickads.net_0.localstorage is present in the following locations:

Windows 2000, Windows XP, Windows Server 2003 specific http_onclickads.net_0.localstorage file locations:

  • C:\Documents And Settings\USER_NAME\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_onclickads.net_0.localstorage
  • C:\Documents And Settings\USER_NAME\Local Settings\Application Data\Google\Chrome\User Data\Default1\Local Storage\http_onclickads.net_0.localstorage
  • C:\Documents And Settings\USER_NAME\Local Settings\Application Data\Google\Chrome\User Data\Profile 1\Local Storage\http_onclickads.net_0.localstorage

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific http_onclickads.net_0.localstorage file locations:

  • C:\Users\USER_NAME\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_onclickads.net_0.localstorage
  • C:\Users\USER_NAME\AppData\Local\Google\Chrome\User Data\Default1\Local Storage\http_onclickads.net_0.localstorage
  • C:\Users\USER_NAME\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\http_onclickads.net_0.localstorage

If you find http_onclickads.net_0.localstorage file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The http_onclickads.net_0.localstorage file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of http_onclickads.net_0.localstorage File^

File SizeFile Md5Last Seen
307287B9FFCA8381094DBAC94FD5C3FF5943Feb 1, 2016
307274402E5F8B34D07B846F6DDCB0AE8990Feb 2, 2016
7168A95B1A9C2F4990361FAD50B74D9C3982Feb 3, 2016
307293E9814EB558F721EF2722A71D5E8091Feb 3, 2016
30720F1DC71AA84BA8853F2776E412BA711FFeb 3, 2016
3072E028C255A105E05C6C258D80FBA493B1Feb 3, 2016
3072F8CBD8A23E51CB1F15CFFEA9B857FF22Feb 3, 2016
7168EE751DE945214C0AD8ECA53CDD322915Feb 6, 2016
71689EC30FBDAA74D87AFA7EC6FD84525653Feb 12, 2016
30726C63BB27CB4F3AA5C935934D7FB6EE42Feb 13, 2016
716884DF4530D6FD0982224F97023F1990DFFeb 14, 2016
30729D5747381636B4255F5952855E6F8986Feb 14, 2016
3072DFB155161106A9931573CD637D07031FFeb 14, 2016
3072103445B16A017DEFAB67D312D397C958Feb 14, 2016
3072AB21663B5EAD43C3E137460649E22890Feb 15, 2016
51202B6E1676B24DA9093893651ED0DE3149Feb 16, 2016
71683647384A15FE93FCF754CF3F1A020E76Feb 16, 2016
3072506E2F976A850A266BF5643687B3E669Feb 16, 2016
307278857E9A8F69ED6D772E6FF0EBF8986EFeb 17, 2016
3072D52A2C4577C39692D4F4F2B8123DCA55Feb 17, 2016
3072EDA0630EDBFDF14C6A237D1FCFBDDF01Feb 26, 2016
71685AF3B71BB85062196291AB314E0E3B8EMar 3, 2016
6144E7CEF0FEE3EF56AD6D90FC43EC66F978Mar 10, 2016
3072BDCE29A1C988C94D7840286B715C3060Mar 11, 2016
30720A993A0837BC6D8DE61630BBA47633BBMar 14, 2016
3072B7540A2E33BF344C41AD94A0E6ACF6B6Mar 15, 2016
3072D2F52E0AB404619B0C80F36E890FB329Mar 19, 2016
3072AA5707A3938D1CD4D4C284F5B0CDB971Mar 23, 2016
30722A3934D8DDAE40D1C8BC5002BD22AA14Mar 23, 2016
307297386627CF2788CC9B8BAE430366B769Mar 25, 2016
30728D85F1730D5D7A8FA6940D757B4D9976Mar 31, 2016
3072EACAEEED6B982651640517B14A9559CBApr 5, 2016
307243C1D2023C19E28E45D461B73DB3B0D7Apr 10, 2016
307282386997A38D38701307B5498F4915A8Apr 14, 2016
307222DFED50BE624280BEC1569247EF02FCApr 17, 2016
716815381F0DFC819A37604C2526B5782532Apr 21, 2016
307299C3BC296B4853CBDD783B2946976976Apr 23, 2016
3072E6ECA451AE5EBDDE8B4AB6104FD7CA6BApr 24, 2016
3072C9B483731EC9F2302708D0A26ABDBBACApr 27, 2016
71681FF33BDE4A5BFD06EF619A8FDED00A57Apr 27, 2016
30721C6451EF263C69F999E4F8F332E69343Apr 28, 2016
3072A16D812991C90C84C96730A707632C3EMay 9, 2016
71683BEEF10D4B35925466CE35B5451B8A26May 9, 2016
71689734415F9816D77AC1E9D6165D00C52AMay 9, 2016
30722A94AD65EF826E760815FED1F34D363AMay 12, 2016
3072C4F5B73571217C87B80A4CAEEB2427A3May 13, 2016
71682F19136C7D2F8199A2D1EE1C503065A4May 13, 2016
30722CC968A83A38251EBB01F737411A69FDMay 14, 2016
30725CD0437DC6AD42ECE946CC97563A875EMay 15, 2016
30720394F27673D0DDF512BDD56559E4C66EMay 15, 2016
3072D94B2AEDBF7DDAE730DF70CA98F95D50May 20, 2016
307210782B4B9E3AFD88D6C6A48881968A02May 21, 2016
8192BEB76D954CB49077EF9FB320C2EE333BMay 22, 2016
30720976A707891FAE33CE5579026D73787AMay 23, 2016
71688F942E77DD013120D4712FD3960514B5May 25, 2016
30726114B4FF834453BFCAE03A5974D44451May 25, 2016
307295642F8B0B8C7B5CCE8590BF3B7E3A30May 25, 2016
3072F173F7419CD0A465D0813B7A46C9C52BMay 26, 2016
3072AA52E97594724F6E63BCDDD2EE1421A4May 29, 2016
71685B6F138F140AD6E172DD71125D46958EJun 1, 2016
30720E69A62BBCE0CB8B8C1E25C245EC9755Jun 1, 2016
6144A5D846E03A0BB4B7591A31BB4E680608Jun 1, 2016
716872B3DB2311C2A6E87780CCD1F63D34CBJun 3, 2016
30726D99F5F7DBEED669D26B356EE3CAD5F0Jun 3, 2016
307219A6363C4DDDBBD3206CD76684A11653Jun 6, 2016
30721CDF69FAF9E87CAEA1C8302046C35BEBJun 6, 2016
30721242A690B366BF382B7DCAB718C78F47Jun 8, 2016
7168B56A6B60D31A2C4561CE39FF0AAFFCF8Jun 8, 2016
3072B028A456CA6A256222457D77E1F4A607Jun 9, 2016
3072A82C622BD1A4D09DC640D0F23D7C0636Jun 9, 2016
30728076290E5377ED20068AF47F59F82EC3Jun 13, 2016
3072BDB0914B3B445D223CC93F75F9D87C95Jun 15, 2016
30729C60D9FCA40CE0933DBA98D200731C1DJun 15, 2016
7168EFF6F0F249169FE6764344E4C4AA4271Jun 18, 2016
30727B54B68BC671E52C27A8EAA8200363F3Jun 23, 2016
30729B63DBB2B81C1E6F1803C5F965B6A79DJun 23, 2016
30720708609958FC0361C81DC2D74A5FEBCEJun 24, 2016
3072DA1DE14CB8C7DB6BA448B8447F5FD35BJun 28, 2016
7168B21F3CED64DF65F3FF7721EE1B99B0F5Jul 5, 2016
112642723EFBB44EE0AB009D17450A26EA8C5Jul 9, 2016
3072DD486EE1C7DB469BD05B02DD939F5113Jul 9, 2016
7168AA85F2F3D55E993E7041FDB199B46FA9Jul 9, 2016
61446DEA63425A172655ADAE4D9A77D0EFC2Jul 9, 2016
3072BF757EC48E9EE4A7CC28582DE347547DJul 13, 2016
3072C6E943F914DA2E41A9313C92E8BA29DCJul 17, 2016
3072B1C1EEEF6C8FF3C3E274468B1F010E7EJul 20, 2016
30729F1E19412582AAFA28E405B135690C92Jul 21, 2016
307227451DA06AEF5D4C02B95ED90B33CB94Jul 21, 2016
7168A551F17E4978F8B60D1888D5C793CA96Jul 24, 2016
30722E6C4D0BCE88FF0A5195118E5BA413B8Jul 24, 2016
71688862086912D0E5908BAB889195979752Jul 31, 2016
7168D007FBD0C35996E23F9E0FE95CEFB590Aug 5, 2016
3072E7EF57FC4E57079AD3D9993D8763FC08Aug 6, 2016
30724AD8D0E8B44836D1D55BCA84F6B13014Aug 6, 2016
30724261CDD9C3FF2F7337EFA613250A1271Aug 7, 2016
30727C750442AE59901EC99543A7647EA4E6Aug 16, 2016
3072F095DE35A59883A99DB9D4B1853C1793Aug 27, 2016
30724D94512D7B772C3941F2B834BC5B8A15Aug 31, 2016
3072361010C18E8B61027D0EF28B20828933Sep 7, 2016
30726D957783A04C6F09C93B2C8FF0487992Sep 7, 2016
30728BD18288F881DA6488F28D69F95A68EASep 13, 2016
3072986276B4AB15B901826243937B013FB6Sep 13, 2016
307205FD8AE47A456E51FC02136B54C24C71Sep 13, 2016
307268F13FBE93CB0093DE842F01EAA3872ASep 14, 2016
7168BA97699DD17628D4D0CD0204D459F0B5Sep 14, 2016
30728EE1E87E33BF9A4C50E29448912CB9ADSep 15, 2016
71687B172A177B48E46B9204072C20C1A607Sep 15, 2016
307244017985D2353CF33D1C81E57B4B478ASep 20, 2016
3072870B9FCE4E7E75784611EBF5D6F73677Sep 25, 2016
716803BC4E57CC960AC14A617FF28442E1F0Sep 25, 2016
307297C13C3C03EDD604978BBDA8803C99AASep 25, 2016
3072534C3E0008038CE1CBD755328C6806FDSep 28, 2016
30720FD1BFB10E5A2880BB6698DA37CD423CSep 29, 2016
5120D7F3B5CDB3277627DB6B1E6F4EF117D3Sep 30, 2016
3072249A000C22355DC185590779DC2393E1Oct 4, 2016
3072DEA318DEF0EFC56ECBCF0E3506465614Oct 11, 2016
716873DE545EF28E7E97989C358E9E8BCA11Oct 12, 2016
3072331D8835E9BA3CF66F9B37262DF178CCNov 6, 2016
3072136ACFEBBD675B70A87B0984A3BF930DNov 9, 2016
307227BE5C6E9B7B95C0A0476C0803A47157Nov 16, 2016
30726A9CAF1D408EDCE37CB0E591D67B5BD2Nov 16, 2016
3072D1A02CCABDEB00AF0EE3B9A13960DCD0Nov 20, 2016
7168C2B9B88A837768E28E3F8EDC4D8BBD8CNov 20, 2016
3072DB8694F5CEBB8A20CEE86521CBE236DFNov 22, 2016
30724C26DD4E7DAE31FCCEA54F0BAFEBAC5CNov 22, 2016
3072DFD826AE8689CE32D27F8BA173F7CB0FNov 22, 2016
3072115F0D8AF9343E03AB09DFB388E8D744Nov 24, 2016
3072102BB0473EC7B847F100300BC73010ABNov 25, 2016
3072F9586DD4C235669D05F59A3FE72A8E6EDec 6, 2016
81923D3C3C2AE29648E0EDEF6AFA8061847EDec 6, 2016
3072226CE904A114DD22ECB8923C2E3B0812Dec 7, 2016
3072E307F43C4F3720AC921194631937E197Dec 8, 2016
30729F86140949D4BA5521F6F2534CFB2C2CDec 10, 2016
307236EA817DDF4E7F2BCE64783F6EE0FD00Dec 12, 2016
3072B4AC860DC445E4B25F13035C0B8329DEDec 13, 2016
61442847E69AF91A38AB283A30C0E4D9B663Dec 17, 2016
61441BEF5816920D47438608378B542608DADec 17, 2016
30728E7B02A9E2608F90A3918B3276E410CFDec 19, 2016
3072B98ADC2777D45A28B735E47349BB09D7Dec 19, 2016
307210021AEABD6321FC0BD7BA8C4642DDDCDec 20, 2016
716856E75E3096FBEC36BECF10B318694423Dec 21, 2016
3072F3B66C393ACDD12FB1E0453ED978A2B5Dec 22, 2016
307273AF4CA9AA021E3EEED806F03A3FD08CDec 28, 2016
30720E0971FFEB133DB4D82F3C79DE5CD050Jan 4, 2017
3072EDE47E361D926191E9318C8D1B715B74Jan 11, 2017
7168D4AB6DC858A1C3DBC7E8EEB587DFA76EJan 15, 2017
3072F88DF88DE18CD6BAA67EC031310D904CJan 16, 2017
3072E9267B52D43FEFCBFBF824749CDC2BC5Jan 16, 2017
307260031680816D9707504FF476D7C07A4EMar 13, 2019
3072307AF972816145A43A1115E8E2FA3887Jan 20, 2017
30723DD58820F406D9E36AC9A5E513D16273Jan 29, 2017
307277B27C1B875D0E1F836417E6729C6B74Jan 31, 2017
30725C0EA63A488D5FB6F4BB2AD0A32CF645Jan 31, 2017
307232D63EA3417E7C7086B4D503F41018A6Jan 31, 2017
30720A7BA83ADDE5735759BF78696D75249BFeb 2, 2017
3072F89884606FC1D7DCA48DB60B8686658DFeb 5, 2017
3072BC24D07D21F0B08AC01CB93DC895B1A1Feb 5, 2017
307254C858F4C6FFD31AC3035FBD1F631A72Feb 10, 2017
71683DC13E165B7828069EF0BF86290DFB2CFeb 13, 2017
3072A9D4F8940292F958449C435E65CA4274Feb 14, 2017
4096A68615A5592399857EDDF2005C9646B7Feb 15, 2017
3072ACA31E7A537EB629DAB30D128793F6BEFeb 21, 2017
3072AEDFFF38C64329CF6D9D0859A3FF48E0Feb 26, 2017
3072F961FC921D9B14ED8E9D60D13DE92099Mar 1, 2017
30722BC152A9C6E22BE0C3A9A18C09D79D22Mar 8, 2017
3072F1C303CF008C1D746D1FBAD220B10C52Mar 17, 2017
307276141883CD44FAA37CDB5DDB737A377BMar 24, 2017
30723F2516A1CFAFA36B820948AEA385E66BMar 24, 2017
307279C7A94A54C349ED60671A205EC557A3Mar 29, 2017
3072DF9080B8B54057F48279FF4B0FC6FE93Mar 30, 2017
307221175940DF6F65FD5FF45EB25D7517D9Mar 30, 2017
3072643FC7D90BC94297D59D428F78685069Mar 31, 2017
3072320B5E27B7E372CD2002B96605ACEB35Mar 31, 2017
30723DC7DD94D0ACE4A781B73A96CF8F088DApr 2, 2017
3072C995D5E54E6F09B74E53B8FB633ACADBApr 5, 2017
3072CCF7DAD6CD7E64940E392D2A5A0B88E2Apr 8, 2017
3072CDB14E6C7C4BA117FE3FCFF6E86CD6D8Apr 10, 2017
30724EEE88958617A51D58D0C3903C6E92A2Apr 12, 2017
30728C22B7FE44C9592495B0C5BB1F559F71Apr 13, 2017
307223CBFF22C53B49A527CD7F0253D93470Apr 14, 2017
3072000B80A3C87A34C1677828C9074B52E1Apr 19, 2017
3072DB90A1F0AFE6EC2513CDF864A3BA7AE8Apr 20, 2017
3072ADCBEF35C08AF030AA13CC08C39E9F44Apr 21, 2017
30729A19A288031D59C8409858D2666477F2Apr 21, 2017
30724209E8D15760F33E93DF431DF787AAA8Apr 21, 2017
3072C711A6A5A417D6298517019A0DB5EB59Apr 22, 2017
3072FCE4BB0584CF1EFE3C450504F63AAEB1Apr 24, 2017
71689B59B4B69011BA6577C5FD6311C2A80BApr 24, 2017
30729EF1321CA07D650356C0A70539D44DBBApr 26, 2017
3072FDB8D2B19AB0FFD34CE0EE16D496CEF9Apr 29, 2017
307270155AF93CCBA002F37671D7A09DD646May 2, 2017
3072DF7849824D0F1093EC4EA9987E4E2782May 4, 2017
3072CD0CA46CAA9F89202EC8B44A027FA16BMay 5, 2017
3072C777E4A2130EE2B9535B857BF4E30382May 6, 2017
716826F81747373F0E8E79907FBF1F8A82BEMay 7, 2017
7168AA39D59F72575B05DF24ED689998877FMay 7, 2017
3072FDAEA2B411824F08D076EB93C36EF718May 8, 2017
30725F172ECB462D8394854B0DCC8A76EC99May 10, 2017
3072A01150E1A3D320547092208B7D9AFB89May 10, 2017
30728B1F2C4BBB3F69B6C541DC9E37166F63May 11, 2017
30725AA2DDC3B81E0243AD850595BBEA1069May 13, 2017
30724A897ACFFF88C113E88D7FAFD4AFEF4AMay 16, 2017
3072A47BE839EF7951A4EFA16033A50D18DAMay 17, 2017
307238E49789D5ACD472ACFBBCA6E7C04AFFMay 18, 2017
307209B6317256ADE12E306BC8EE62223BFCMay 31, 2017
30723D2903A3B9859AC0AC5114DEF92A7F2BJun 1, 2017
30728668A9AF5A3545468798C691D529EA3FJun 2, 2017
30720BC646A36587485CEC72356331D78558Jun 4, 2017
30726436F7811013F7F40E7E50A24D13EF03Jun 7, 2017
307276D51053FF8C9CE1344B2FEE7FEFC7F7Jun 13, 2017
3072638434FFF8A7108A736C7C324344756CJun 19, 2017
3072DD8FF30D863ABE2DE6266E431E5A7788Jun 24, 2017
3072942022A1E8AF296F3B1D6F4AEB267394Dec 13, 2017

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove http_onclickads.net_0.localstorage^

  1. To enable deleting the http_onclickads.net_0.localstorage file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select http_onclickads.net_0.localstorage and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of http_onclickads.net_0.localstorage and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of http_onclickads.net_0.localstorage and Associated Malware.
  6. Notes:

    • The deletion of http_onclickads.net_0.localstorage will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of http_onclickads.net_0.localstorage will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a http_onclickads.net_0.localstorage malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type http_onclickads.net_0.localstorage. The name of the first found registry value referencing http_onclickads.net_0.localstorage is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to http_onclickads.net_0.localstorage, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of http_onclickads.net_0.localstorage and Associated Malware.