Exterminate It! Antimalware


Known threats:700,086 Last Update:March 16, 12:51


You guys finally did it!!! Your July 27 update completely removed the Softwarerefferal virus from my computer. I had tried (with no success) several anti-virus programs. I really appreciate your quick response and good work. Keep it up!! Thanks so much!

John K. D.

File: online pharmacy.url

Location of online pharmacy.url and Associated Malware

Check whether online pharmacy.url is present in the following locations:

Windows 2000, Windows XP, Windows Server 2003 specific online pharmacy.url file locations:

  • C:\Documents And Settings\USER_NAME\Favorites\pharmacy\online pharmacy.url
  • C:\Documents And Settings\USER_NAME\Favorites\favorites\online pharmacy.url
  • C:\Documents And Settings\USER_NAME\Favorites\Online Pharmacy.url
  • C:\Documents And Settings\All Users\Favorites\Online Pharmacy.url

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific online pharmacy.url file locations:

  • C:\Users\USER_NAME\Favorites\pharmacy\online pharmacy.url
  • C:\Users\USER_NAME\Favorites\favorites\online pharmacy.url
  • C:\Users\USER_NAME\Favorites\Online Pharmacy.url
  • [%COMMON_FAVORITES%]\Online Pharmacy.url

If you find online pharmacy.url file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The online pharmacy.url file is associated with malware only if found in the locations listed above.


Different Variations of online pharmacy.url File^

File SizeFile Md5Last Seen
126CE2968D9A78A63D82683864705DE73ABFeb 7, 2012
2498E69EE42A54B0469562A89C0E8AA6AA2Feb 9, 2010
69D8DDF714892925E96BF30FCDAE758EA1Mar 2, 2010
1049BF2DC54EA37B785846D4D1F6FA68C84Apr 25, 2010
271423790FFD1EAF02F4CF510153472B373May 29, 2010
175896B4F24C8BBF97829EA5350AD700F36Jun 3, 2010
22681F64BD427A48F9D9145113C1BD36FCEJun 10, 2010
220E417E099A13D9EB7E79CE62110206CA3Jun 25, 2010
165811F0D63C133E5C39DA397EE1BECEA16Oct 11, 2010
2565C2C0D36A02DA2AFF290FD4EDB1959BFDec 26, 2010
190254503E0AA979394FA91C1E16A23FEF5Mar 8, 2011
297F18D3723FBE02410FB3B21BA6D1FEEE4Oct 30, 2011
1113F6CFB7D1A2DABFAE95BF23D44EDACE2Apr 12, 2012
208670A32C2AF924FC9C270DBA2F2180D2CJan 3, 2013
1787DB2AEE9D2FC4DBEE7579AFDDA2AF277Feb 13, 2013
631AF721878B87F7FBB23016928A652B18BApr 9, 2013
1943B0E0A6C1E195AB69EB2D9C020E12FDEFeb 7, 2014
16096720C381E9079C35B29F8B39913EC23Nov 18, 2014
208A9F24CA7D46F0AFBFC54D05D37F69AA8Feb 10, 2015
141C616F353DA7FB556CEE70ECD801E6951Jun 7, 2015
16057B32FA5E51691FB7C001634286E23D4Sep 24, 2016
14743DBDF218697A9B127E710931B0FC4CCMay 14, 2010
1720610C2CAC2098EA946557A7C076162AFFeb 6, 2011
254AAA559463ECD65B7F20D7EC26492AA85Feb 27, 2011
158EED5D091AC9745A382E1F20E115CD5FFNov 4, 2011
20307C6521DFD16F4EE7D2EE1B5FD4A5D2EMay 2, 2013
616662288B4C3614DC3419FA1C55125D7FJun 22, 2011
160B5301FE1153521A3000424F3B1D149C2Mar 24, 2010

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove online pharmacy.url^

  1. To enable deleting the online pharmacy.url file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select online pharmacy.url and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of online pharmacy.url and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of online pharmacy.url and Associated Malware.
  6. Notes:

    • The deletion of online pharmacy.url will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of online pharmacy.url will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a online pharmacy.url malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type online pharmacy.url. The name of the first found registry value referencing online pharmacy.url is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to online pharmacy.url, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of online pharmacy.url and Associated Malware.