Exterminate It! Antimalware

malpedia

Known threats:699,742 Last Update:November 20, 22:46

Testimonials

Wow,

I really can't believe you got back to me. I had bought and paid for 2 other Malware programs in the last 5 days, X********E & P*********c Anti-Spyware, and sent them the same message. I paid for yours and got 2 others from friends that where cracked copies N****n & S*******r but no one has got back to me. I have not heard a peep out of them but You have got back to me.

Well done.

Your faithfully ( a customer forever)

Richard D. P.

File: search-provided-by-yahoo.xml

Location of search-provided-by-yahoo.xml and Associated Malware

Check whether search-provided-by-yahoo.xml is present in the following locations:

Windows 2000, Windows XP, Windows Server 2003 specific search-provided-by-yahoo.xml file locations:

  • C:\Documents And Settings\USER_NAME\Application Data\mozilla\firefox\profiles\[%PROFILE_FOLDER%]\searchPlugins\search-provided-by-yahoo.xml
  • C:\Documents And Settings\USER_NAME\Application Data\Mozilla\Firefox\Profiles\5y52o7yv.default\searchplugins\search-provided-by-yahoo.xml

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific search-provided-by-yahoo.xml file locations:

  • C:\Users\USER_NAME\AppData\Roaming\mozilla\firefox\profiles\[%PROFILE_FOLDER%]\searchPlugins\search-provided-by-yahoo.xml
  • C:\Users\USER_NAME\AppData\Roaming\Mozilla\Firefox\Profiles\5y52o7yv.default\searchplugins\search-provided-by-yahoo.xml

If you find search-provided-by-yahoo.xml file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The search-provided-by-yahoo.xml file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of search-provided-by-yahoo.xml File^

File SizeFile Md5Last Seen
8235D9F3498D67BD654C07BE05ECA91327B5Jun 10, 2015
8247AFEAA65852F82A5C096BA8A8E0D7B544Jun 19, 2015
8263B1D071277F0ED469E05B8646B8CFEE92Jun 20, 2015
823558DB8A21B232F677CBABBF5C3EC45ACEJul 2, 2015
82353D4F0A9581C689CAE97EA11E601F1288Jul 2, 2015
823557E9A0D854E3C05FBF9D89E96D2C1ED0Jul 11, 2015
8246E243B5DC10B9E5A03EA98F20EDDF8E92Jul 17, 2015
8256168A13760628886AF7CF6A6FB199A757Jul 20, 2015
824203412C408762A517A116F34A2565313AAug 3, 2015
826156432F3996B361590A923B7DFE317AF5Aug 7, 2015
82296D185A11C4958725048DD979C67FAC0CAug 14, 2015
8231E3E83EE9E48184CCC06F50407FC3E6E0Aug 15, 2015
8240549D72355C18146F62540A94364FE2F5Aug 21, 2015
8261E6C49A3483001FADD7DE8009DEBCB2B8Aug 22, 2015
8266D7BDB25F794CB4FE4A0185825C879284Aug 23, 2015
82708178301A3E3CAAFFFBAB22EF1DD09F80Aug 25, 2015
822933A9B9B19E124E45FA227E2A61D184BASep 3, 2015
8269C8A777E59A1DC66CCDF40994B91730DBSep 4, 2015
8254AEA292A329CE3DF6C700E83DE605942ASep 6, 2015
8270E5032C58B106C126C02998CB49E5D833Sep 7, 2015
8251230C09032B8583A22472251514E2425ESep 10, 2015
82894544B08EF6DD1FA87F590372384F6829Sep 11, 2015
825849DD29C63E90D8DCFADA74968742EAC0Sep 13, 2015
8271104D1AF1EA979B83758284A152B6CD2DSep 19, 2015
82507622FBA77F89324785FCEA872E24140ASep 20, 2015
8251021F1336D8F82153B573D810C9605AA1Sep 22, 2015
827881B56EC5A2D32F93BF3601BF935F938FSep 24, 2015
825727B9FA3310FA67BC2E3D38658C9B8FB9Sep 28, 2015
82710CB7625DED4209682216AE734C40B2F8Sep 30, 2015
82320AFDE525CEEF903C2421339A68D1874AOct 1, 2015
8263E9F5CE6A8C95F8AAF6CE91A2D895488BOct 4, 2015
8232871238C8AA2948445DD7F4810BBB757BOct 4, 2015
826886B0EACA0EADD0A6308200EB63331419Oct 8, 2015
8262CAF853FF2930E049BF27E57135111AEEOct 8, 2015
82341656ACCF4253B6E5CE9135D93A035F16Oct 8, 2015
82640F264D1E6848C4C0459CF4CCE088347EOct 13, 2015
8269E6E90483A27CC21FBF30B3A40A25F752Oct 14, 2015
8256F1ED87BFB906034D08DBD6D40756FD22Oct 15, 2015
8255122CBA8A66F967A21039993CA7DF8A33Oct 19, 2015
823914362BFD10AEE7E9A331B42A66CB4F16Oct 22, 2015
825310A2DBC0B5C545906B93349E480D2380Oct 28, 2015
826662C512D66BBB4E3F908BFF834D23B68CNov 3, 2015
8258F28673DF6D203ED169EF5863716113BBNov 4, 2015
82373198A510F0356F3E24D92AD469E45E63Nov 4, 2015
8236B98D5F13623D955A686D7518D64090ECNov 7, 2015
824714927EA2020B5E7CA797B2EE4E88DB60Nov 7, 2015
82679E11E3E5C9989098983E7067547995BFNov 9, 2015
82681375A5F4B6B77A7564B38CE75FFF9F9BNov 11, 2015
8267841C137879DD38EF2FBF1C2BFB32F65BNov 21, 2015
8231410A2C9703649FADA8E2B6AC96DD43D9Nov 23, 2015
826077F42DCCDB57D99275ECFCA91184E43ENov 30, 2015
8245C51341BA7ECBE86903BCBFE1A50D537BDec 8, 2015
82270C85EBD636D51AAC194BB124E6A7A626Dec 14, 2015
8274F539BC5E410F08F883783C2F58E87D04Dec 17, 2015
824169B0772721D6E20EAEECBC754AFE6FD4Dec 18, 2015
826651D8F336BEA5C45C63B84290E1EB0E0CDec 18, 2015
82363A2E580796912F094122A67C4D43AFD3Dec 18, 2015
824729191EDD691F27360DE7EBD776DF75B8Dec 19, 2015
82568A314AA12375E7A68DD7A99428774E3EDec 21, 2015
825201CD0363CDC0E95720BF313CA73668F1Dec 21, 2015
8233AB4A32B271D603FFC28A467EEEA73D7ADec 22, 2015
8231D3CAA32491A51465EFA5BA1D3BFB23C2Dec 24, 2015
8245C709AE49760CAF6DA3F97258BEE2C68CDec 26, 2015
8250004B55980BEC84E017F25046FC895C4BDec 26, 2015
82320DDAE40A797FAA091D6A149BDD9FDAC9Dec 27, 2015
823270C1EBA5798D80F00CECC7A189D869C4Dec 28, 2015
8250936AE3F7B73AD5CA224BC9B821CD0294Dec 30, 2015
8231AA56AC3A591629128F2C99ECA4B4DD81Jan 2, 2016
82507B3F111840B0433AFF31E824A2DFDCB6Jan 5, 2016
82376704CE2BC5B006E31F06536022C09172Jan 6, 2016
826258F8BC1EE00B86F514F6D3586E84666BJan 7, 2016
825054508BB373B4AFB7E7B5061596DD3ED4Jan 7, 2016
82361428E4E84B67977D9F0EE4541A628144Jan 7, 2016
8236919E85D0FF5E881995602A2A3C0BF0B2Jan 8, 2016
82366A9F25B55B8CBCE889971E133EC2F54CJan 8, 2016
82445A2BB88C6DCCA3869892B46FBCCD0F55Jan 8, 2016
8237BC8F696562EDCD6B8C2EF5607E0C47EAJan 10, 2016
82261D09084ABF221BCD97445CB545E7E567Jan 11, 2016
8273B703DC9935CC57B72619E6F2185D15E7Jan 12, 2016
82377522BC0A291A738B0DE8F631E5C242A0Jan 12, 2016
8234D40B3671190B759199E24848A17A9BA1Jan 12, 2016
8274374C6A535CE5DA9352B12E06E7A7EF5EJan 18, 2016
8272798AE91EA118195470BA6C37F81A45D2Jan 20, 2016
82865C199705B4D864F4AEB6011AA1581596Jan 26, 2016
8229EE7ED0AD4FAB15DD9B6A4AC680421FA6Jan 31, 2016
82616026A37EEFBCF1E775189F0CAEA098E7Jan 31, 2016
824762F24BF5A98DCB9DCFF243EB65932010Feb 2, 2016
823555D95F0AB3E1492679ABF219D3D35C4CFeb 2, 2016
8266D643A01121BE5999DD8195633039CD42Feb 4, 2016
82717A004AC896EED34C52C2886EC022B91CFeb 8, 2016
8252E4375934D8A513766FFFEFFDA8A0FF7DFeb 13, 2016
82687E803F4E2F4B9A9FEDE8FEFD6F639E9AFeb 14, 2016
8235DD70C385932A14584A4563C723B3EEBBFeb 14, 2016
82482EAA344E598751A3797BD198F9C690CEFeb 16, 2016
8259DD0B9E26AD943B3681FCDCB95C77F79BFeb 16, 2016
82658EE9FBC60F11F802B35138AB62CA92A1Feb 24, 2016
82344381C85577A2C0D11195FCC1F8B962BAMar 14, 2016
8246F1B3E81862E85E29E3C32CAEE57B9B73Mar 15, 2016
8266BF9ACAEE1F936BBC0E4CC4DB22E3AFFEMar 21, 2016
823776D5AF40534592027B84C3CFC2FD4237Mar 23, 2016
8228E05F4F5B1637F082376E21762CF440EDMar 23, 2016
8257446B42697F302A38E7C99EC672DE8A54Apr 1, 2016
82728018418268C1585B3D84EBABDB8F755EApr 8, 2016
8235DEC01C6A2C4FA537A32BE542AE3D9EC8Apr 13, 2016
8268B33AE35FE49C19B28B3FBB972D688A99Apr 18, 2016
8262614375BA6A63AB31320109A667B72A9BApr 23, 2016
8269D096B2D8BA784AAF95CE53A076089F69Apr 26, 2016
824430EA2992031000C2FA419CFE3F475903Apr 27, 2016
8250C1495C0A141F5804C6CDAEB879DA26B9May 1, 2016
823789C7A34BDE4DC90EB93D3D36029856E4May 3, 2016
82480151799D1D79E9D4E7236866E1E37692May 7, 2016
8281A1049D5F8A149CC477EA7DC6033B4E1AMay 12, 2016
8259DAEB9CE1CAB3C1222C030785B978FEF9May 12, 2016
82415538529210FDED7E4FEE417F518F03D5May 12, 2016
824849DDA67DB3D37BB1AC314612C44580B5May 14, 2016
8255CCAE4A059903A1649CA4EF625C3495CDMay 14, 2016
82619C675CE43FBF7D89722099EF0895991AMay 15, 2016
82882FD7BEEBD30DA88427CEEDE49DC8317EMay 15, 2016
8243E56D9ACE6965CA333D357E308D4F6819May 18, 2016
8256C781B1B583BCC4DD4B0BFB2AF92AFF5FMay 18, 2016
8257F2784CBBC1422C6D61099D2E9F19FDA7May 18, 2016
9159F514D478140CBF5C96E3BC050F0B58BMay 23, 2016
825706AE30680062290CC4BD7F094048234BMay 23, 2016
823664F43545E072ECA66E4A92ED6E211CB8May 24, 2016
8278BEC63CD80D31F65B0405C7A7E9B54F01May 26, 2016
82848B2309CF4CD6E1825564AD0510B93BB5May 26, 2016
824922EB8C7ED3784839FD67BF2B948528B8May 30, 2016
8282DB4148052367706D886703BFC3F8F9C2May 31, 2016
823147F7CA10A93FE9E72D0A5265D9FA2B3AJun 2, 2016
824790CCEDAF1F82DD965F6F7FE54E18C1C7Jun 2, 2016
82728D7923791E2B63877FC1D233777BE907Jun 5, 2016
82375F57E895850B0871C873E3178402BECBJun 6, 2016
8240467F5F419AD46F30256A9844A6F97AB7Jun 12, 2016
8256F1BBE2404BC4F53E48F680DA4DCA7D62Jun 13, 2016
8255704C2F6A1E10F88C22A18AD9D936C7E0Jun 14, 2016
82484EBDC012742CD73DB192FFC689F2380BJun 19, 2016
823182AB61DEDA36DCC29988A93220ED4E82Jun 22, 2016
82326D124E3C4D05885BD9971DFA51B0DB5BJun 26, 2016
82798A43D0FEE208F8D175F149130B7C5F16Jun 27, 2016
82792C29D9F1BAFFF6D939C173416DA133F5Jun 28, 2016
82327112E0BC10B6328852A4844887920DC3Jun 30, 2016
82444EE653338F65D1E37049BC418A0EA046Jul 6, 2016
82591F69F858AA3ED0FB799F394E15114C34Jul 6, 2016
8245DE7BC6DFCFAA468B62E6778D1F789BC6Jul 6, 2016
8251FDCD9819B78F1027B8B3BDF3E253F728Jul 8, 2016
828756FFA8973C4252EF9C08E75608A1CDA3Jul 16, 2016
823257C7CA888053B6476F9D23A20D830C6BJul 19, 2016
82802A80C2AC29D13BE0B45763C1EB32CA33Jul 20, 2016
82361DECB5A884C7C4FC3DFA283A0C9295F8Jul 20, 2016
8262FED003AE8D78919901091476D2FFB9FEJul 21, 2016
825582C9E60803D1FC07A570D25C08B48E93Jul 24, 2016
8220CD9308157B40CC32F084CEA00E4FDD48Jul 24, 2016
8236060B8DC51E7E2EFC131B5E9602D0A269Jul 24, 2016
8240B42078E58130578E1C4092C40462E726Jul 27, 2016
8246C68F15DBFB51B6B988877938DD77B806Jul 27, 2016
8286BCF14B8B242ACCE1998CE30DD1580D6EAug 1, 2016
8252938F174B96CF18A0413CE77134A119AAAug 3, 2016
8230FB4379FB9751CCE107FBB8AC813212FFAug 11, 2016
8266D5A492F86E3276BC20C8349DC3B108A9Aug 11, 2016
8252B3B086EABB0FED3FC3B90BDB4C0949EBAug 29, 2016
8244DA46BF7CD8661B92FB7114DD3E07515DSep 7, 2016
8245C736108B97A73627FFFF98ECFB8DB858Sep 10, 2016
82488CECAFAC6661055FB039095BFEA37A47Sep 13, 2016
82551C8AE7D6B5F79BF989EF62CA57885679Sep 15, 2016
8261C89FFB23EA19AE0E84AF74785492F08CSep 20, 2016
823094DDEEFD35EF1839B568F209C28F1EC8Sep 20, 2016
82629A15E0819809B1B7AF51AD75E9A5725BSep 22, 2016
82737F2BE17E5E28C2F1FFA166B7669BE01CSep 27, 2016
823056C7F116A825B8BF17B34344A22C3A8BSep 30, 2016
82633B3F163007B13845BF8D4282D8037E82Oct 8, 2016
8241A8FFF34B3A24E449DFD759A293503741Oct 23, 2016
82452543685B0120B8F0A1D4D69035091B52Nov 4, 2016
82526D525D817A6F073173A1423C9B980E45Nov 5, 2016
8295FD9221AAD1D8B7915B66D6A701ACA038Nov 7, 2016
8269E8F34645973F05BDAEEF2C7C1E642D4ANov 18, 2016
8280F7258BB54AC3CCA36713FDAA3E2829D9Dec 4, 2016
8236ABDB5EFE0B06F0B2B8C9412E8D48A823Dec 7, 2016
828439FA9EAB4360CE04295FEC7C6A2BAE4FDec 8, 2016
82597C8034080F96DFD4A11D7B4571BFFECCDec 12, 2016
8295E3370DF43EB66E3F1FE2F9EF7BFD4E0ADec 12, 2016
8243EEE1E2CCD658C7AB9EF45BF13C756C6CDec 20, 2016
8242B5923CC2CBCC93D1C42DCFE4042C03ABJan 7, 2017
8261240554E1D3B14AC9463A4E47D79C63F9Jan 9, 2017
82471BC6927F704BDBD68241C44B462ED375Jan 16, 2017
82318C08A3A481831C2A2A6413D3810C170EJan 28, 2017
829594EF79E45A64D297864DD486E43F800DFeb 2, 2017
8344C2BCC5C6DE8F5059EEF4A4679E2DF8BDFeb 16, 2017
8228C5F058F1C17BA4F40E36B847653D5C5EFeb 18, 2017
82400C940CFDE9A5A93F16E86E30E5AF7286Feb 22, 2017
8255B4CF8B8E927CF0323E53246D41AD9174Feb 23, 2017
826036E2FBB424CC14E9A819A78C4F960B15Feb 24, 2017
8312EAB815460A5DD50E1A738253CA9E020CFeb 24, 2017
82541031696B1920887D8F3D33E78ACEDA2FMar 12, 2017
8246A84C6F567E06CF4D05CD9A64D31D184CMar 13, 2017
82489C453EB8B9ABC308E9D7407CBF366F22Mar 15, 2017
82253713AC9AC4AA2BA7DCDB1BFDB864DF98Mar 21, 2017
82482B73C6C13A662197A15F1D4504E1672DMar 24, 2017
8233F9DF2F3C5DF95F306AD92070BC118081Apr 7, 2017
8245A9C55623904493B0A532F6E2892B0751Apr 7, 2017
82424889C08EAC9012D118FE5A5BF93F4377Apr 13, 2017
82712C1B413641AB23B9FD3763051C0574A9Apr 14, 2017
8271BAF8A8CA0558CF03770CB6D173898001Apr 21, 2017
823297D1605518E63813987A62B661D9DBD2Apr 24, 2017
82347425FF402652D68EDEE2A27F7EBAB560May 4, 2017
8263E4E6003F6AA5ADAF4993E36D07CEA287May 13, 2017
82592E9109C5D1E59A70E84166050076BB52May 14, 2017
82448318F94A49B13FF1ACAFA362F3681483May 14, 2017
8275F8FDCBAD3A8687DB5540CCDE7130CFCCMay 17, 2017
82632150F67ECE36E16192D7CAD15D223C6FMay 19, 2017
8256BF5FC76A26A296A580BEB30FE1A02E09May 19, 2017
8262B6F461A7D5ABF7062864E2F0B67EF5FDMay 23, 2017
8227EC985E5C881DD3CEB784CF80FD1E984BMay 24, 2017
8258E988FD65880DE5A65741DF068E4E5972Jun 2, 2017
82478EEF0FFA1FF740E06AC1E40D3A70E923Jun 6, 2017
82542F1EFF2D5C00792D4774F0822309A7B0Jun 7, 2017
82308AA65B585E33B70D2D0C9B63CCFC1513Jun 15, 2017
82677D5CE7136034D0E7BDCF66E62BFD6340Jun 18, 2017
8239FD5C08C6D9707203EDAFB41883C142F5Jun 26, 2017
82402F21C02F3EF80B0C8CC29DE6B5B12B60Aug 31, 2017

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove search-provided-by-yahoo.xml^

  1. To enable deleting the search-provided-by-yahoo.xml file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select search-provided-by-yahoo.xml and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of search-provided-by-yahoo.xml and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of search-provided-by-yahoo.xml and Associated Malware.
  6. Notes:

    • The deletion of search-provided-by-yahoo.xml will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of search-provided-by-yahoo.xml will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a search-provided-by-yahoo.xml malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type search-provided-by-yahoo.xml. The name of the first found registry value referencing search-provided-by-yahoo.xml is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to search-provided-by-yahoo.xml, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of search-provided-by-yahoo.xml and Associated Malware.