Exterminate It! Antimalware


Known threats:700,086 Last Update:March 16, 12:51


I just wanted to thank you. My computer was frozen last night thanks to an online Easter card that was sent to me via the funcards site. I couldn't do anything but open windows.
I tried to open the exterminate it program that I purchased last year but the funcards site was blocking it, too!
I decided to purchase a new year of service (knowing my current one is going to expire sometime this month). It took two hours of searching, but exterminate it fixed my computer last night.
I have no idea how you all do it, but I would be lost without your service.
Thank you!!!


File: setup.inf

Location of setup.inf and Associated Malware

Check whether setup.inf is present in the following locations:

setup.inf file locations that are Windows version independent:

  • C:\MoreTv352Tr\Setup.inf
  • C:\Windows\Temp\AutoUpdate1\setup.inf
  • C:\Windows\temp\~apropos0\setup.inf
  • C:\Windows\temp\autoupdate0\setup.inf

Windows 2000, Windows XP, Windows Server 2003 specific setup.inf file locations:

  • C:\Documents And Settings\USER_NAME\My Documents\MoreTV_352Esp\Setup.inf
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\icd2.tmp\setup.inf
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\AutoUpdate0\setup.inf
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\AutoUpdate1\setup.inf
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\~apropos0\setup.inf
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\icd1.tmp\setup.inf
  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\temp.fr2A06\setup.inf

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific setup.inf file locations:

  • C:\Users\USER_NAME\Documents\MoreTV_352Esp\Setup.inf
  • C:\Users\USER_NAME\AppData\Local\Temp\icd2.tmp\setup.inf
  • C:\Users\USER_NAME\AppData\Local\Temp\AutoUpdate0\setup.inf
  • C:\Users\USER_NAME\AppData\Local\Temp\AutoUpdate1\setup.inf
  • C:\Users\USER_NAME\AppData\Local\Temp\~apropos0\setup.inf
  • C:\Users\USER_NAME\AppData\Local\Temp\icd1.tmp\setup.inf
  • C:\Users\USER_NAME\AppData\Local\Temp\temp.fr2A06\setup.inf

If you find setup.inf file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The setup.inf file is associated with malware only if found in the locations listed above.


Different Variations of setup.inf File^

File SizeFile Md5Last Seen
14190DAA96FD3201C2B336F59F574DEBAECEAug 21, 2010
1456394A70A91BBA7D42E4576AA304B89976May 16, 2010
1391A5B42E654BAEBF7E018FCA1EDA79A7DBApr 30, 2011
2906047F4C105748CA1BC5D06B19E175584Dec 26, 2009
4463D4903CD320B60319A7945C8A12CB50FFeb 10, 2010
1286A818B652A41C5B4B103C9AA026EBA04Jul 18, 2010
255B5A653C35196B55BFA21D7DD6F690E92Mar 8, 2010
3185743C629145FE9F2481F89CD0EEEE20DJul 4, 2010
1115739244750FC0535216A0B60F01FC4E3BJul 8, 2010
3155E8C156CF95E596EFDA709812529202ESep 15, 2010
29449B7C23809FF6EC69F38B56D7C195C04Sep 22, 2010
29528F57387447995F98C18D3C122E8935EOct 14, 2010
2976D79C9D0751D5DC144F7A6F5E6837EA5Oct 17, 2010
471C984F603749C79625178AC5E20054830Nov 3, 2010
289F4113D0FE5D44BA57C2B8386B4535465Nov 18, 2010
296513EA496A6DEC576101868F197361437Nov 23, 2010
91A60D55D386FDF2D32F56F156619DA51CDec 13, 2010
1735E065F6711589C23C84DFB4DE509E6E7Dec 15, 2010
315366EF8C75689D9DA1AD8376E3F1755BCJan 6, 2011
111575A217C98C87430D9B5A5267C033C5CCJan 21, 2011
384268A3F0362FB36D3B9572464DD287116Jan 31, 2011
142D577EBFA5037DE908608F519CED5DBF8Feb 1, 2011
29596861D535A35CD453B3320BC92FA3367May 12, 2011
102026F199A3623A27EFEE51EFB945DFA06BJul 15, 2011
13484026D3EE597181FB0EE4F001BF43F74Jul 26, 2011
1448EDDC295CF14AD932423B46F467085AEAug 3, 2011
11139133851740EBDB037668573EEFE702BFSep 16, 2011
290E684C4A0D5B6A5812CD1CDC6717186ABSep 30, 2011
2964C32020409F1634FB8C2270757B93945Jan 5, 2012
296687F88DD8EAE444E42C6AFD020A2B41AJan 31, 2012
94567B6027254CA6C4EAF7A57A6B1B23E89Mar 17, 2012
31620E29C91AFE8FAACAF06B9C6CB69D9C7Mar 22, 2012
1854835318B9099ED1EA770FD981D5D86A6Apr 4, 2012
2884D50682E47C0B39F8E11EAFF5AE4345BNov 19, 2012
288F145CB86DF5BDA54AE782B1AB4ACE405Nov 19, 2012
4182D50E5A4A2E07A6547DC457FEBEE6158Jan 21, 2013
2898405EF47514ECA9F2EF39A2CB1285610Jan 25, 2013
417E610E5FF374549095127B69DCEE03EF2May 10, 2013
2896FB155E238B799DEC5DD2AA174FC9D71Jan 3, 2014
1485121188F879052032574354CEFD1F2FE5Dec 5, 2015
38130CC0A77AAE17182448DAD0924CE17A3Mar 31, 2016
2811DC8AC3B6E47BC5593E2A4B78BD2E9473May 16, 2010
112B34538E21CAE1241EA142CEBF46E9ED1Jan 19, 2010
14931C5064768735644EA52694E708C8C502Mar 8, 2010
2893C620FA5C2EAF5EE2BBF27637C38C987Jul 29, 2010
295A914F3442BDA3E943D08284400B343D3Nov 2, 2010
2930683C0999DE595DE101C04BAC488F29DOct 29, 2012
4500BA6B1729A9E838C1C2EBD896D70CF1F8Jan 1, 2015

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove setup.inf^

  1. To enable deleting the setup.inf file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select setup.inf and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of setup.inf and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of setup.inf and Associated Malware.
  6. Notes:

    • The deletion of setup.inf will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of setup.inf will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a setup.inf malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type setup.inf. The name of the first found registry value referencing setup.inf is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to setup.inf, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of setup.inf and Associated Malware.