Exterminate It! Antimalware


Known threats:699,443 Last Update:May 26, 18:52


Dear Exterminate It,
I just wanted to take a moment to say thank you.
Your response and the update has fixed my problem.
I have spent several weeks fiddling around trying to resolve it, and could not and my previous Anti-Virus program could find it but not fix it.


Sincerely yours,
Bountiful, Utah

David S. B.

File: iThemes.dll

Location of iThemes.dll and Associated Malware

Check whether iThemes.dll is present in the following locations:

iThemes.dll file locations that are Windows version independent:

  • C:\Program Files\Common Files\Services\iThemes.dll
  • [%PROGRAM_FILES_COMMONX86%]\Services\iThemes.dll

If you find iThemes.dll file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The iThemes.dll file is associated with malware only if found in the locations listed above.


Different Variations of iThemes.dll File^

File SizeFile Md5Last Seen
622080CA57AB5A22FF22CD16E7454937265248Dec 12, 2016
622080252DCC2D46AEB4B2C8A226DE91423ED2Dec 19, 2016
6266883890779A03D68DDC20279D8A99128D24Dec 21, 2016
510976CBE684B2F38325B3F031DA901575CF72Dec 21, 2016
624640A674259096C6A566AD0676C157FEA855Dec 21, 2016
5923840621AD6FFAA46E479592CD145BF725E0Dec 22, 2016
557056BA65AD92E21FDFFBF43AE7AC29D03C34Jan 5, 2017
820224581F55EC0470A25B51F6E03D91F1353AJan 14, 2017
5196809CFF319EB286200B69BB1E3317C9D0FBJan 14, 2017
877056050F02A6C957CFB1B9DFE17142ABB895Jan 16, 2017
565760FCC2D8E80CF5B9BCEC86153CA3E54AD3Jan 18, 2017
88268834723BB65824DF05EFA1DDDE5E995671Jan 23, 2017
578560AB5A69FE63408E6A105F8CC009FA0607Jan 30, 2017
56678413175DDA5A77316D303F72E0A6AC41A9Jan 30, 2017
5196805DC61F355D0E519D32CF865C64D51192Jan 31, 2017
56473608842EDDC33C6D60ADEE5A5B3517D8EFFeb 1, 2017
8872968CA8BD7A39451F1EB6EB2C07645FED13Feb 2, 2017
5155845915434568BA21CF4CD55A9C139E0126Feb 2, 2017
8872963C83ABC7F95B799522D26FB9B5616562Feb 3, 2017
4551689BBE690F3AAF77E29297824BF007E254Feb 16, 2017
567808C51E5323805CB866031E44452419B400Feb 21, 2017
5836809B804561DFFCADAF537C7C8B5862CA27Mar 7, 2017
5207043C823306B03308C288C842C77FFDDDDFMar 29, 2017
624640392C40A2BA8A85F654C5F112EB3DF8F2Apr 4, 2017
568832F93B19BC618651B327E37FAC5027E4B4Apr 14, 2017
4551689E65D97D9F9E9E490CD3F97B3944E140Apr 17, 2017
6225921EB7BF12CD661C75A1D42D1705524E6CApr 20, 2017
566272FD0DC02F2319279FA9488BA621ABEB25Apr 22, 2017
4592647F8B8CB44F6FE0FD0C3E2AD4D1D41C63Apr 26, 2017
98560050E59E61BB67DDB6E0FD416D057CD73DApr 29, 2017
520704101968D46C131BF9047CCBCA68165192Apr 29, 2017
568832FAB71F0CDA5476ACA77F4B7479D02AC7May 6, 2017
58726437258B3A36BE15F31301200324ABD3FFMay 11, 2017
568320A821B702CB7394529F259907466B6FDDMay 24, 2017
455168986CCA3C8D5EDEBCE385A36CBB43082BMay 31, 2017
5268483146AAE4E4A74C21FADBD5D235AAC2FDJun 2, 2017
459264E3BBAEC4E1A2DE33E32295AC3F319A3CDec 14, 2018
526848C39E7249275283C64BA0B873765BBD28Jun 12, 2017

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove iThemes.dll^

  1. To enable deleting the iThemes.dll file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select iThemes.dll and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of iThemes.dll and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of iThemes.dll and Associated Malware.
  6. Notes:

    • The deletion of iThemes.dll will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of iThemes.dll will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a iThemes.dll malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type iThemes.dll. The name of the first found registry value referencing iThemes.dll is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to iThemes.dll, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of iThemes.dll and Associated Malware.