Exterminate It! Antimalware

malpedia

Known threats:699,443 Last Update:July 17, 22:52

Testimonials

You guys finally did it!!! Your July 27 update completely removed the Softwarerefferal virus from my computer. I had tried (with no success) several anti-virus programs. I really appreciate your quick response and good work. Keep it up!! Thanks so much!

John K. D.

File: task.vbs

Location of task.vbs and Associated Malware

Check whether task.vbs is present in the following locations:

task.vbs file locations that are Windows version independent:

  • C:\Temp\task.vbs
  • C:\Windows\System32\task.vbs

Windows 2000, Windows XP, Windows Server 2003 specific task.vbs file locations:

  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\task.vbs

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific task.vbs file locations:

  • C:\Users\USER_NAME\AppData\Local\Temp\task.vbs

If you find task.vbs file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The task.vbs file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of task.vbs File^

File SizeFile Md5Last Seen
3337D56AB012596BB51786D1B937DCFE6BBDec 26, 2015
3299A4CF259B2A2238BB16364D127ABC129Dec 27, 2015
3321F7F7632FE39BDFCC21A5C9C11FAAAF8Dec 28, 2015
330737D4990060637BAFF5613F0EC9B7DE5Dec 28, 2015
332AD6DC74793047B70807416EFCCCC8913Dec 29, 2015
328FDC7FC66D705C4594F5EE2F39DABD733Dec 30, 2015
252FE4C4DDD02375CADF57207454B0E4D70Jan 3, 2016
333405936C162620856B6117E160E000944Jan 3, 2016
334B82DB77B18E9AD03EDF4175436042922Jan 4, 2016
325732B23C3018C3BAFC7941AE9E1CE18EAJan 4, 2016
3283F797B609F801779AE7FD981D1223AA2Jan 5, 2016
33167F23A6741B0634E4D02EF9BA1E9FD2AJan 5, 2016
335EAB56EEA80E381FA0FD651D23A32D673Jan 7, 2016
335C9CFE2BA36EFA0705582B848EC345CADJan 7, 2016
3336313F21E99034ACEAB211C203EDA5A08Jan 8, 2016
3340D72E1C9AD8CAC5864CD3D254727C6CBJan 9, 2016
3319D7764FC7C63EE81A13283EAD22AE38AJan 9, 2016
3280B79F028D6080E93069420B979B74350Jan 10, 2016
3326AA687C444C5935CEFAD588DFB869700Jan 10, 2016
33579F9E6790C1511F812EAB01D057CEA7FJan 10, 2016
331F92C7B12D2D7D28BBCD9685EEC589E42Jan 11, 2016
3336DEBCF04DEAE20AE9D5D530A9D311525Jan 11, 2016
332777FB8ACA2C8336B236F225C33D1E070Jan 11, 2016
336DB75B653CE178B6370F1A63B5B2840B9Jan 11, 2016
3297D63DBD0D3EC07D168413B1E06B6B051Jan 13, 2016
332280FFF8E50DDE232111B67C44EC0A13EJan 13, 2016
335601A1357D683FB2A4557BD5480EB6EF9Jan 24, 2016
329F238F27D8924540D0333CD4978FCF95FJan 25, 2016
3339477ED50437B83FA88C6EE3D5F80E57AJan 25, 2016
331B8EBC83E19D8D7E032618CBC8A9DF737Jan 26, 2016
33324FAD0E1B931CC0972FC484DDD3B893CJan 27, 2016
3339BEFDA66E254F122179345256A455707Jan 28, 2016
335CB113EDD68B3C08456496405987160C2Feb 1, 2016
331058B75CEF3E5E6DE3343A9AF46ECDAE7Feb 1, 2016
3321573C88DB74124339FC70744B3D04A6AFeb 1, 2016
334AD3F67FFBCBA97EEC5CA6AB1CF4EE43BFeb 1, 2016
327F2F8E8358050C4DAD8AD2C17F54621EFFeb 3, 2016
33261510242F60873F47A5538E4FA055631Feb 4, 2016
33198A15A969609C9145ACC7D5CEFFE1056Feb 4, 2016
326B6D2B425464154FD1F271C740CFE475DFeb 12, 2016
334C1C510D12CACF7AA1A78EDC25826240FFeb 13, 2016
33463A88D81D776B4EA7AF6FC28BB4D231FFeb 13, 2016
336E7E178E015BE40AAC7165FF98F316A13Feb 13, 2016
33521B6D1E4A08933AD798D67F044267A24Feb 15, 2016
33264E467AF57A4A9B1F8665863F8008AD3Feb 16, 2016
3321E8536BE38BCFC9C38336AF37FE3089BFeb 16, 2016
3314AD435665472C04ADAEE0AB6B96ACA82Feb 16, 2016
333AEE1ADE09BDC27758A851EDD9BD7D3DCFeb 18, 2016
32888FFF7A61D8C0C9B368BAFCDA2DDD5CAFeb 20, 2016
3343F53CD297FE06082DE10AD07C82321E1Mar 3, 2016
25388935AC9DCFE9935F00A406163556F9DMar 22, 2016
3355447F11D5CC9DC7D4C2373EDEA364CE8Mar 27, 2016
32726BFE3DC5C24AC3252982D4AE15EE193May 5, 2016
3322F31ECBC152B140B159C1DDBC9B8E437May 12, 2016
332129F6C07E631C6418BB03680B6CEC2DCMay 14, 2016
3319181BFA3F2DA509FB9BD8D076BAB1171May 16, 2016
3351733B6ED1A1E43838582B9804E629965May 25, 2016
3319CD87D04F718948B56299D71C6A833A5May 31, 2016
32988A5EB679148B460377DC41F64CCCA79Jun 1, 2016
332EE0A78E54B0E8B4151D30720B2946E9DJun 4, 2016
25319A6C2A29FA23B810AAB25BF474CB3E4Jun 6, 2016
25151971838773F3F48664DB9C556F057EAJun 7, 2016
330673C38EF6176FF2533FF2D90CFE86996Jun 8, 2016
3306C778B5BECB50B009E362B64A9D14EFFJun 12, 2016
3280F46C8DC59247AF0C7288AA65827CD12Jun 15, 2016
331841FA3A7FB032E126E8FDC26EA01AB05Jun 24, 2016
331E40210D0397626A6C3508C289D8718C7Jul 23, 2016
329EE416BB8418CC8183E3660EDEE6E733BAug 5, 2016
328C67481AABF046C0BD5A642EDC48483A5Aug 9, 2016
253D7C27D6BA2FA5672AD230E967855C93BAug 24, 2016
3318877342A2F198C5A24681ABC074BA939Sep 28, 2016
336F326D638553129C6AC60E5DB242D8755Sep 30, 2016
332D33909CE4E26E7CFD82695B7BA2D0072Oct 9, 2016
25571A8EDE8FB310097B45284E4E37E9E55Nov 9, 2016
3274376C92CE5E071F1FA9C0DDD20D56D88Nov 14, 2016
32975FAA20D0C19C766D75B23F5F2374106Nov 28, 2016
3289396211AE334F5D6A3B4D2297E7BBA82Nov 28, 2016
327E46AAA1A3B83AAB20C14E73D34B1C6F7Dec 5, 2016
330AA787FB85C1C08110A2ECBA721302AC3Dec 21, 2016
32869383728E0BA1DB9D11F13E7E7476924Jan 11, 2017
331B7E0BF1E03C95F299AEBB0AFA4693C6BJan 29, 2017
3292CDE6F42F71409B64137A97A9C767538Jan 31, 2017
331E31F1F05890C891E34438F5D187D4148Feb 2, 2017
3287171B5C5037F6D033E76B3A4235E0DDAFeb 11, 2017
331E43381AC71186B7C0CDC999CA557A205Feb 24, 2017
33059FB7BA791E41BCC3B376D7958AC872CMar 8, 2017
3328942A76E4833BA73C1DBAAB2364FAF7EApr 17, 2017
3300EEADFA6DAAD6D38F8A5F9746BE0B41EApr 25, 2017
3315E39BB344E92A17C1CD6B8C062215577Apr 27, 2017
2554BBBFC4C218390CCA19B9C2F8CDE6116May 31, 2017
306F25C537BF2809DB26821DC30056914CBFeb 8, 2016
301EC9AFDA9B9B096132023320EFC65E5AAFeb 6, 2017

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove task.vbs^

  1. To enable deleting the task.vbs file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select task.vbs and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of task.vbs and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of task.vbs and Associated Malware.
  6. Notes:

    • The deletion of task.vbs will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of task.vbs will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a task.vbs malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type task.vbs. The name of the first found registry value referencing task.vbs is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to task.vbs, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of task.vbs and Associated Malware.