Exterminate It! Antimalware


Known threats:700,085 Last Update:March 01, 12:55


I consider myself pretty good with a computer, but after 10 hours of trying to do this myself, the sysguard.exe whipped me. I couldn't find all the files and when I thought I had them all, they would replicate and play hide and go seek I have never endorsed a product in a comment, but if you want to rid yourself of this stuff, pay the $24.99 and download Exterminate-It It fixed my system in 5 minutes!

Mike T.

File: pctskbr5.vbs

Location of pctskbr5.vbs and Associated Malware

Check whether pctskbr5.vbs is present in the following locations:

Windows 2000, Windows XP, Windows Server 2003 specific pctskbr5.vbs file locations:

  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\pctskbr5.vbs
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\2\pctskbr5.vbs

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific pctskbr5.vbs file locations:

  • C:\Users\USER_NAME\AppData\Local\Temp\pctskbr5.vbs
  • C:\Users\USER_NAME\AppData\Local\Temp\2\pctskbr5.vbs

If you find pctskbr5.vbs file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The pctskbr5.vbs file is associated with malware only if found in the locations listed above.


Different Variations of pctskbr5.vbs File^

File SizeFile Md5Last Seen
796547A3678745AD57186EE72C420B2A31CJan 22, 2016
80586EE42BEF714EE4D58FED4908C3E51ABJan 26, 2016
813952300E25EB0AE181EB3A175728BFD8CJan 31, 2016
80629E3886D4F64EE4E662EB6B3118F95CFFeb 16, 2016
8061BC4C4D7047A5E1EAC3DC2B5EFF57D33Feb 24, 2016
812DE03537D84E871149D25F06C3920649BApr 5, 2016
8098E050701579EDA41E78F034D7E142063Apr 6, 2016
80615480C1CEFDF264F299283BD7B5CD9FFApr 24, 2016
805F63FE88B0261AAF68A939C9B72CE672DMay 2, 2016
801F0CB3ACA74AC7ACCC0AE195DB42FE2DFMay 6, 2016
8078F9B40CF1B6CEAE85D699E092B6AAF4EMay 16, 2016
807C386CFE495CCC51418FB755D78C1148FMay 22, 2016
802EF2F399113FEA0CD07B95A12E3D53287May 24, 2016
8058AE09B3CFE30ED4695DDE6711BA4848AJun 6, 2016
807754B1BF240F098132627E839B80B7A6AJun 18, 2016
804949262F31E81538F12ADE44A20076496Jun 18, 2016
8051E8CF9E06BF9F5A8D463613689E8A0DAJun 24, 2016
805EF425DD68E107FF1B5BFF8E698A06295Jun 24, 2016
8065D975A9A9DE53FF3740DC3A1B29226D7Jul 1, 2016
802274B764FDD4772DD08721C0CDC5BB367Jul 10, 2016
80323D7F2D874717D99CD4F57F0597EAD96Jul 11, 2016
814291F68413B15E850FCE4A7A2FD00059FJul 14, 2016
8049811957D808FC781624BA84F4BF9C5B0Jul 29, 2016
792D8D6C852815CF497CB4A22E60BF523F3Aug 6, 2016
8076F670F595B9EDA23E5926E0A63DCB390Aug 6, 2016
805910CCF0B7E7186486A286B0D03B5CEE1Aug 14, 2016
805578A65BAB7876CD5BEF55CEA92958671Aug 20, 2016
803F1669B19D15321E7B82BFA80EADA4361Sep 7, 2016
804D81A836FE7D6AF2FA9950CD067BE21D4Sep 10, 2016
8102BCBF7AD2A75879A79757965393DFE33Sep 16, 2016
81353BC545E73F9ACEF9E1B16D2C61E71F7Sep 27, 2016
8128EEA8C8CAC01A8A02F428ADA6AEA947CSep 29, 2016
809556140B4A941B03F6F2B25006A2ECDD4Sep 30, 2016
8123FAB3D3328703891188BE77B40F2723COct 17, 2016
80958270DFC06CDB552542F3BCA9BE647FFOct 19, 2016
8074C7A41E0C3C49D882A8FA94C2BD34775Oct 20, 2016
8043D1DE7E7834EA2A08C2A91EE128C58D0Nov 4, 2016
8135A31BDEE20824494C05EFC16CC7F9DCCNov 6, 2016
819EE7A83DDBB305801FACAA8A76A9631E6Nov 11, 2016
8044640FF7CB8D1BD9A659660BDF65FB9A0Nov 11, 2016
817353DF79DA2B4B474E611E257C5A778B5Nov 18, 2016
815256128C21BFC7D9692C4F464C2D890C9Nov 18, 2016
8036B3E88598DC6F9AEE2B177739497004EDec 6, 2016
812531A405B81DE5F22F5EA8B3779EB186BDec 17, 2016
807AED98B8AB3923E2AD85AB1AFFFBE5204Dec 17, 2016
8055C31CC1DCCC84A034A752ADF2586DCCDJan 9, 2017
81393E315798C17C9F2201EDB50C73FBB8DJan 28, 2017
812C4873CD43F996ADAB412AE3BD22C723EJan 30, 2017
816750ADB301C10172BCC0ECB3D4DE07AEBFeb 4, 2017
8078A925A436621552AEE83DDDB08795AF9Feb 16, 2017
804762C712F2F580B2D0290FBD4C17D9C5AFeb 26, 2017
805A753575B34FB7887D5995E30A7FF3310Mar 1, 2017
8156063547CAB7D337500E59356453933C6Mar 10, 2017
806F750DD0D5BC35DFF93A49C66156E42F9Mar 11, 2017
81898D9C9C12FF9F2B207D03C30D17A775CMar 29, 2017
816A12341740F3722C5F54663C3634DF5F9Apr 5, 2017
8120C3FA08123449A2006477DF27AF361EDApr 6, 2017
8083753232E5B4E441E2568BDDECAE6E7C2Apr 26, 2017
821303832D4D8607E6D1755BB8051D2802EApr 30, 2017
8138BB6725FFC954D7DDDDEF2AE5357255CMay 5, 2017
81365EC81FEB111ED9B2B152CDDDBBB1918May 9, 2017
81391A5FA1C96E4DC20241BD4CD16588282May 28, 2017
814C6748E6F04F6F60E8FB8C4880EB8C2C5May 28, 2017
80603E6A6A14E469755DA43589312E26360May 30, 2017
805A48F7E8CB2352FC1E212A8A3BA9BA43DJun 16, 2017
85211EE23F32D47C5AD904CF368B30A4FCCJul 12, 2018

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove pctskbr5.vbs^

  1. To enable deleting the pctskbr5.vbs file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select pctskbr5.vbs and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of pctskbr5.vbs and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of pctskbr5.vbs and Associated Malware.
  6. Notes:

    • The deletion of pctskbr5.vbs will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of pctskbr5.vbs will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a pctskbr5.vbs malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type pctskbr5.vbs. The name of the first found registry value referencing pctskbr5.vbs is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to pctskbr5.vbs, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of pctskbr5.vbs and Associated Malware.