Exterminate It! Antimalware

malpedia

Known threats:699,742 Last Update:October 27, 11:19

Testimonials

Hello, bought a license for your antivirus tool and I must say it was totally awesome! It cleaned TDSServ trojan which was a real pain in the ass for the last 8 months and it also found and killed Virtumonde together with all its files and a few other low level infections. I was already thinking about formatting and losing tons of information when I found your tool on the internet.

Thanks and please put this message where people can see it.

Andrei T.

File: ToolsUpdatePlatform_ScheduledTask

Location of ToolsUpdatePlatform_ScheduledTask and Associated Malware

Check whether ToolsUpdatePlatform_ScheduledTask is present in the following locations:

ToolsUpdatePlatform_ScheduledTask file locations that are Windows version independent:

  • C:\Windows\System32\Tasks\ToolsUpdatePlatform_ScheduledTask

If you find ToolsUpdatePlatform_ScheduledTask file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The ToolsUpdatePlatform_ScheduledTask file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of ToolsUpdatePlatform_ScheduledTask File^

File SizeFile Md5Last Seen
35180C043180DF250D2172FFFCC07FD3AE8DJul 21, 2015
3520A0DA5B5FCDE46B5174ECCA3107AF7237Jul 24, 2015
35220D3F410D98449232484C69ACD87B80B3Aug 7, 2015
3534A637BD694FCABA1C352B25EBAAF722C0Aug 20, 2015
3546B516AB339240EA6F7236ED2B98B383CAAug 23, 2015
3516F62B104310EEFF7C3B0F4C4103568DB3Aug 25, 2015
35302F6E6C4FCF2AB4E04B3A704532E2BE3EAug 31, 2015
3524D7EE9086A87642308D546AF6D089D20ASep 5, 2015
351612B1A62A1D51BACE9C13CDD0B921753FSep 6, 2015
354878FA7E593E4114997AEC45A7B40FC3EESep 6, 2015
3520D4AE7F5B63EF4F67C533C00BC9B8A14BSep 7, 2015
3522802A2B57F8D5136901F0CCBDEED08F42Sep 11, 2015
35204B1245C3615FCD840AD4D749643F7DDFSep 14, 2015
3522A026B21D87BCC52261DA7E77478E9A4FSep 22, 2015
35300F7452E84A6BA6D1DFA347E7A7D90F26Sep 24, 2015
35361C29D0C3A45AB55105602D6D397C8B11Sep 26, 2015
3626F7E8B71152A798C6003B5337425255A3Sep 28, 2015
352697EF235AC57D92CE6314FBA68E9D3DB9Sep 30, 2015
25489E44E27E5DB7EE738734C28D8E61DC2FOct 8, 2015
35266953D802B0D79B3A91239F9313F1FB91Oct 13, 2015
352236A4E04956F421353FDBEDB80A1538BEOct 20, 2015
3528D2A920FDDDAE27EAB14C2F79096ED843Oct 22, 2015
35220A64EE2F761FBD807F89944C0D427391Oct 22, 2015
3528402A233F228D093A60A6CE70A468D70ENov 3, 2015
35186501307AD621B5333755E2A7D2B710A7Nov 23, 2015
3520F67E122289A008ADF35B5F351824562FNov 25, 2015
3522881FCAD260CBECB250582F99E0B97E3FNov 28, 2015
3520A6E87B8495C805A0488BAD7A5F394F2FDec 9, 2015
35389A111E15E839B743EF27169DDB1087BFDec 12, 2015
3528FD93DB6D45E803E94EDD2A992A0B4A75Dec 14, 2015
3526471F2F1ECD1BC187469882E29EB455FBDec 16, 2015
35426A7F37F5C6D24ADCC1B6B7A3AEB0C38FDec 21, 2015
36268E4C62835AC2A1D5BD5C414773970F58Dec 29, 2015
35208C3D6C6B37C0C2D941EF6DA82ACD9E16Jan 6, 2016
352830E7950957E815E5C998F43DD582FDB8Jan 7, 2016
35227355A04D197DF6805AC9240716820B3AJan 8, 2016
35388A46FD6510C6A99DF7416D8E9593FEE8Jan 15, 2016
3522EAE9E4055E9AB17CCC4926D582B98573Jan 21, 2016
35280F128D092F3495D3F3A80BB9DF057DCEJan 23, 2016
35388FFA11474676B439D300DE603F770C8DJan 25, 2016
3538434EFA62AF31F114E584C88B94E0317CJan 30, 2016
352271A748D56B89B38240F5DE455BD0ECE3Feb 3, 2016
3552336BE6673A594E4B5D6CA1A371D3AAEBFeb 5, 2016
3530504F5587E8868E6887BDACB89732C323Feb 13, 2016
352491EC04F20FFA695CD36138C0E170F6D9Feb 16, 2016
35187B87838560FF4E740285E2A82F041064Mar 7, 2016
352045CEC68E3C26E2B95B51B2B5DC7BF950Mar 15, 2016
353867241EACE8475337D6DF1B3A0999E639Mar 19, 2016
3528D29A21F235FF21379FD4E2BA642E57F7Mar 24, 2016
35325A1863BD46E9402446D06AC5CEBB1F1DMar 30, 2016
351895F8F20C26F5F02C537C41A6A8120300Apr 11, 2016
35209E57D46D21C1005B6702263FEFF60EB0May 7, 2016
351860DC1EB2A7FA145BC818745CF95CE8F6May 11, 2016
352618AA2D16384757A4D5008EB0C8736F97May 15, 2016
352254FDFF611E6AA879D886AD2D52CECBFEMay 20, 2016
3534820928CB1CBFC6B73A762AAD19BDB1EDMay 23, 2016
352807E6C41EF21FF6898F3323746E649D28May 31, 2016
3522F7C1B8E5041F9D7256CDEA597DB16762Jun 1, 2016
35207B468EE8FD0AAB33BBDDB20D1ADE3450Jun 14, 2016
3526063356057A68E4FBC132881A31B7474DJun 24, 2016
35200A86136C169FD028DE101F609E6CA2A0Jul 16, 2016
353038A7C310D0DE2B6EB77DEA47F4A0131FJul 25, 2016
3600100E68AAB21522A784B9094E3F5A9213Aug 7, 2016
3532043ED0EBF1EE84E8C4F5F980EC3D11BDAug 8, 2016
363099AABDAFCEF66BA18BC18FB02698AEE7Sep 13, 2016
35247D9F51CE83CB0D381DB7C8DA399C018ESep 27, 2016
351874C1F9B87C6CE6B45A2A1F63753D5371Oct 7, 2016
3528ED03E7A667F6D9D35B3F386D57CD2B18Oct 7, 2016
35286242D4DB98E76FDC82A8F319BA1242A3Nov 3, 2016
3520B9FED60ECFD73F373A904E6BBFA82FFCNov 21, 2016
353873EA37BA29DA25BBA938A0D39A3F60E4Dec 17, 2016
35208A4B7F5F8471838EC5C9AA17F6915261Jan 4, 2017
3524CD8BD777B1A9F6C01D1CBDBE9AEC4922Jan 20, 2017
3524C3572D7D6A9D4B8FA8EE83CE112AFBE5Feb 1, 2017
3524BF9168BD8144488550B6DB44DA2257F3Feb 12, 2017
3522799DE94D502896CA6263D22BDD61DCD4Feb 25, 2017
35202C7D3F6EC420895260A1F8893636AD90Mar 7, 2017
3518BA01AF7C9A191AB56FA60DD33D8C15D3Mar 22, 2017
35243EDDA15068FF75B5672A2A9D69642E61Mar 31, 2017
3520A73B29E319753D66C8A125CCAEEDE09DMay 18, 2017
35189DCD2173AC49DD95BAD10EBF9D924D92May 21, 2017
35265718A9F50BBEB54A0729475E8005ED39May 31, 2017
3520F63E8BCD8A4681E58319EF1A5E83D9ECMay 31, 2017
3522449AAB253D60EB2BBF445EDE2F003081Jun 12, 2017

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove ToolsUpdatePlatform_ScheduledTask^

  1. To enable deleting the ToolsUpdatePlatform_ScheduledTask file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select ToolsUpdatePlatform_ScheduledTask and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of ToolsUpdatePlatform_ScheduledTask and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of ToolsUpdatePlatform_ScheduledTask and Associated Malware.
  6. Notes:

    • The deletion of ToolsUpdatePlatform_ScheduledTask will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of ToolsUpdatePlatform_ScheduledTask will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a ToolsUpdatePlatform_ScheduledTask malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type ToolsUpdatePlatform_ScheduledTask. The name of the first found registry value referencing ToolsUpdatePlatform_ScheduledTask is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to ToolsUpdatePlatform_ScheduledTask, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of ToolsUpdatePlatform_ScheduledTask and Associated Malware.