Exterminate It! Antimalware


Known threats:700,085 Last Update:August 24, 10:09


Dear Mat,

Thanks you have saved my life, superb programme well worth the money. There seems an awful lot of viruses or trogens knocking around at the moment, I will recommend your product.


File: license.txt

Location of license.txt and Associated Malware

Check whether license.txt is present in the following locations:

license.txt file locations that are Windows version independent:

  • C:\PentestBox\bin\WebApplications\nikto\program\docs\LICENSE.txt
  • C:\PentestBox\bin\WebApplications\golismero\tools\nikto\docs\LICENSE.txt
  • C:\mirrored1\mirrorofdiles\drivekproblem\drive h sept 27 2oo7\driveD\aoepr\license.txt
  • C:\Program Files\Aureate\Group Mail\license.txt
  • [%ANY_DRIVE%]\Aureate\Group Mail\license.txt
  • C:\Windows\System32\License.txt
  • [%DESKTOP%]\Documents\Documents\BushWebDesigns\ColdSpotFeed\OSCommerce Add-Ons\PageEditorv1.6\PageEditorv1.6\LICENSE.txt
  • C:\Program Files\Cowabanga\License.txt
  • C:\Program Files\ScreenSaver.com\Living Marine Aquarium\license.txt
  • C:\Windows\System32\wsxsvc\License.txt
  • C:\Windows\System32\pcs\License.txt
  • C:\Program Files\ScreenSaver.com\Living 3D Dolphins\license.txt
  • C:\Program Files\A8GSdsApp\License.txt
  • C:\Program Files\Kazaa\Skins\Orbital Shadows\License.txt
  • C:\Program Files\Kazaa\Skins\Black Glass\License.txt
  • C:\Program Files\HomeKeyLogger\LICENSE.TXT
  • C:\Program Files\IMSI\HiJaak Digital Photo Studio\bin\license.txt
  • C:\Program Files\DameWare Development\DameWare NT Utilities\License.txt
  • C:\Program Files\MDSA Software\license.txt
  • C:\Windows\license.txt
  • C:\Program Files\bpk\license.txt
  • C:\Program Files\Invisible Keylogger\license.txt
  • C:\Windows\System32\icsxml\pcs\License.txt
  • C:\Program Files\Advanced RAR Rec\license.txt
  • C:\Program Files\AZPR\license.txt
  • [%DESKTOP%]\APDFPR\license.txt
  • C:\Program Files\WinACE WinRAR WinZip WinISO + password & cracker\WinZIP\Password Recovery V3.54\license.txt
  • [%DESKTOP%]\Utilities\Advanced IE Password Recovery 1.01\aiepr\license.txt
  • [%DESKTOP%]\WinZIP\Password Recovery V3.54\license.txt
  • C:\Program Files\WinRAR\Advanced Archive Password Recovery 2.20\license.txt
  • C:\Program Files\Specrem\License.txt
  • C:\Program Files\Watchdog II Server\License.txt
  • C:\Program Files\whInstall\license.txt
  • C:\Program Files\SpyKiller\license.txt

Windows 2000, Windows XP, Windows Server 2003 specific license.txt file locations:

  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\{37BC8452-0B37-4550-A0BD-620A6EDA2C92}\license.txt
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\Temp1_adobe acrobat Advanced PDF Password Recovery Pro 2.12+SERIAL.zip\license.txt
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\Rar$EX[%NUM%].[%NUM%]\WinKeygens\Keygen Pack AIO\LICENSE.TXT
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\Rar$EX[%NUM%].[%NUM%]\WinKeygPack\Keygen Pack AIO\LICENSE.TXT
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\Rar$EX[%NUM%].[%NUM%]\windows\XP_XTRAS\WinRAR 3.30 Plus Edition\WinRAR 3.30 Plus Edition\Advanced Archive Password Recovery 2.20\license.txt
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\Temp1_emailspy.zip\license.txt
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\WZS497.tmp\license.txt
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\WZS994.tmp\license.txt
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\RarSFX3\license.txt
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\RarSFX1\license.txt
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\RarSFX2\license.txt
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\RarSFX0\license.txt
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\temp.fr????\LICENSE.TXT
  • C:\Documents And Settings\USER_NAME\My Documents\FamTree\FamTreeCont\HiJaakIM\license.txt
  • C:\Documents And Settings\All Users\Application Data\BPK\license.txt
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\Rar$EX[%NUM%].[%NUM%]\LICENSE.TXT
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\Temp1_kgbspy-so-387.zip\LICENSE.TXT
  • C:\Documents And Settings\All Users\Documents\things from Mackenzie computer\for Jim\PC Activity Monitor Pro V6\license.txt
  • C:\Documents And Settings\All Users\Application Data\AudioTools\license.txt
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\RarSFX5\license.txt
  • C:\Documents And Settings\All Users\BPK\license.txt
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\RarSFX4\license.txt
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\RarSFX6\license.txt
  • C:\Documents And Settings\USER_NAME\My Documents\personal\Passw word\aoxppr_s_solo hasta 8 caracteres\license.txt
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\X1\c3\license.txt
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\X1\license.txt
  • C:\Documents And Settings\USER_NAME\My Documents\Vuze Downloads\WinACE WinRAR WinZip WinISO + password & cracker\WinZIP\Password Recovery V3.54\license.txt
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\Rar$DI19.8375\license.txt
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\X1\c2\license.txt
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\X1\c4\license.txt
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\Temp1_Advanced.Mailbox.Password.Recovery.v1.5.7.161.zip\license.txt
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\X1\c1\license.txt
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\probot\license.txt
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\WZS4.tmp\license.txt
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\WZSAD0.tmp\license.txt
  • C:\Windows\System32\Config\SystemProfile\Local Settings\Temp\RarSFX1\license.txt

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific license.txt file locations:

  • C:\Users\USER_NAME\AppData\Local\Temp\{37BC8452-0B37-4550-A0BD-620A6EDA2C92}\license.txt
  • C:\Users\USER_NAME\AppData\Local\Temp\Temp1_adobe acrobat Advanced PDF Password Recovery Pro 2.12+SERIAL.zip\license.txt
  • C:\Users\USER_NAME\AppData\Local\Temp\Rar$EX[%NUM%].[%NUM%]\WinKeygens\Keygen Pack AIO\LICENSE.TXT
  • C:\Users\USER_NAME\AppData\Local\Temp\Rar$EX[%NUM%].[%NUM%]\WinKeygPack\Keygen Pack AIO\LICENSE.TXT
  • C:\Users\USER_NAME\AppData\Local\Temp\Rar$EX[%NUM%].[%NUM%]\windows\XP_XTRAS\WinRAR 3.30 Plus Edition\WinRAR 3.30 Plus Edition\Advanced Archive Password Recovery 2.20\license.txt
  • C:\Users\USER_NAME\AppData\Local\Temp\Temp1_emailspy.zip\license.txt
  • C:\Users\USER_NAME\AppData\Local\Temp\WZS497.tmp\license.txt
  • C:\Users\USER_NAME\AppData\Local\Temp\WZS994.tmp\license.txt
  • C:\Users\USER_NAME\AppData\Local\Temp\RarSFX3\license.txt
  • C:\Users\USER_NAME\AppData\Local\Temp\RarSFX1\license.txt
  • C:\Users\USER_NAME\AppData\Local\Temp\RarSFX2\license.txt
  • C:\Users\USER_NAME\AppData\Local\Temp\RarSFX0\license.txt
  • C:\Users\USER_NAME\AppData\Local\Temp\temp.fr????\LICENSE.TXT
  • C:\Users\USER_NAME\Documents\FamTree\FamTreeCont\HiJaakIM\license.txt
  • C:\ProgramData\BPK\license.txt
  • C:\Users\USER_NAME\AppData\Local\Temp\Rar$EX[%NUM%].[%NUM%]\LICENSE.TXT
  • C:\Users\USER_NAME\AppData\Local\Temp\Temp1_kgbspy-so-387.zip\LICENSE.TXT
  • C:\Users\Public\Documents\things from Mackenzie computer\for Jim\PC Activity Monitor Pro V6\license.txt
  • C:\ProgramData\AudioTools\license.txt
  • C:\Users\USER_NAME\AppData\Local\Temp\RarSFX5\license.txt
  • C:\Users\Public\BPK\license.txt
  • C:\Users\USER_NAME\AppData\Local\Temp\RarSFX4\license.txt
  • C:\Users\USER_NAME\AppData\Local\Temp\RarSFX6\license.txt
  • C:\Users\USER_NAME\Documents\personal\Passw word\aoxppr_s_solo hasta 8 caracteres\license.txt
  • C:\Users\USER_NAME\AppData\Local\Temp\X1\c3\license.txt
  • C:\Users\USER_NAME\AppData\Local\Temp\X1\license.txt
  • C:\Users\USER_NAME\Documents\Vuze Downloads\WinACE WinRAR WinZip WinISO + password & cracker\WinZIP\Password Recovery V3.54\license.txt
  • C:\Users\USER_NAME\AppData\Local\Temp\Rar$DI19.8375\license.txt
  • C:\Users\USER_NAME\AppData\Local\Temp\X1\c2\license.txt
  • C:\Users\USER_NAME\AppData\Local\Temp\X1\c4\license.txt
  • C:\Users\USER_NAME\AppData\Local\Temp\Temp1_Advanced.Mailbox.Password.Recovery.v1.5.7.161.zip\license.txt
  • C:\Users\USER_NAME\AppData\Local\Temp\X1\c1\license.txt
  • C:\Users\USER_NAME\AppData\Local\Temp\probot\license.txt
  • C:\Users\USER_NAME\AppData\Local\Temp\WZS4.tmp\license.txt
  • C:\Users\USER_NAME\AppData\Local\Temp\WZSAD0.tmp\license.txt
  • C:\Windows\System32\Config\SystemProfile\AppData\Local\Temp\RarSFX1\license.txt

If you find license.txt file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The license.txt file is associated with malware only if found in the locations listed above.


Different Variations of license.txt File^

File SizeFile Md5Last Seen
3215BB8BD8E5DA4133E3CBB05FCF3FF9E0DFDec 18, 2016
3220CCB956EFD7932DAC206CD009319C77CEMar 29, 2017
366969EE3C4F0F065E7E43500D4D2ACB0880Mar 26, 2012
169299B74153F58FB885A5BA79EE654DA4620Jan 19, 2012
21295FAC14D84281685FBBD66A95F5B929A7May 30, 2015
44051294D915C93F16C633407568FDA7BC45Feb 14, 2010
7572C2CCE761BC9B859C41F96AFB1FD63DA1Jul 12, 2010
4493A90F11892B5C4EC4BB5D789CB67AA3C5Apr 23, 2011
38088ED45EA8E21124D0DB764A4522964363May 7, 2015
1123111665A93F7961434C9CF9C19DC61D5745Dec 11, 2011
46756C955FE6A88B1123EAB67201EBE91582Mar 23, 2018
82926343458F1FBFEF42127382CAC032DCCEDec 19, 2011
3599137C9CE84B081D0A8460BDCB7946157BBDec 29, 2011
251CC0BE69879565CF51843B0BC69A620ABJul 14, 2014
55241DFEE12C5FD3622853D2CBEED02A9A75Nov 19, 2012
4363B0BB39639F4538A31DE66DAC63AA96B6Sep 2, 2015
18357A16603446307F8209600429ED10B3199May 23, 2015
1488C3E9CF08C643081E59C96CD810A26F31Jun 5, 2017
12277A881696B6DE1B4128B64C2F81A70169DJul 5, 2017
405208D029F5BED129CB82EFC5742C8B3402Jan 3, 2018
2047C2751E0531B169B99CF4504ABBFD1B06Nov 18, 2018

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove license.txt^

  1. To enable deleting the license.txt file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select license.txt and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of license.txt and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of license.txt and Associated Malware.
  6. Notes:

    • The deletion of license.txt will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of license.txt will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a license.txt malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type license.txt. The name of the first found registry value referencing license.txt is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to license.txt, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of license.txt and Associated Malware.