Exterminate It! Antimalware

malpedia

Known threats:700,085 Last Update:March 01, 12:55

Testimonials

I ran the free version on my system that I knew had something on it, nothing would detect what was going on but your program did! I instantly bought it and now it's clean!

Awesome job! I'm an instant life-long customer.

Peter C.

File: trovi.xml

Location of trovi.xml and Associated Malware

Check whether trovi.xml is present in the following locations:

Windows 2000, Windows XP, Windows Server 2003 specific trovi.xml file locations:

  • C:\Documents And Settings\USER_NAME\Application Data\mozilla\firefox\profiles\[%PROFILE_FOLDER%]\searchplugins\trovi.xml

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific trovi.xml file locations:

  • C:\Users\USER_NAME\AppData\Roaming\mozilla\firefox\profiles\[%PROFILE_FOLDER%]\searchplugins\trovi.xml

If you find trovi.xml file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The trovi.xml file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of trovi.xml File^

File SizeFile Md5Last Seen
2802014E4014D6351F81BADA71C1176BCBB9Feb 16, 2015
280271AD2009791376094E62875D95D403D6Feb 23, 2015
2976164C8A5ECF167C7CF67DB3CE44DB7A73Mar 10, 2015
2764457387B1426BC48281D62369C083F7BFMar 30, 2015
2802BE95D4CA4FE91E879DC2E11BCE47BFFEMar 31, 2015
2989EE98B1FFE924DAECF5431E7E782D3CB3Apr 14, 2015
2815BE66B8B85A0B5FE9362DA0C9959DF7A0Apr 22, 2015
2830AD33E5C8416EF291DFF5F3A47703051AApr 25, 2015
28150475CF574ECF32815920FDE4BA70FE2AApr 27, 2015
28152CB3A1BCF4ECF2D030E67E47D29BD3BAMay 5, 2015
2989FAEB5C033249F5060649EF306320B55BMay 14, 2015
2814CDD68D453464C1A7765A5AE4C2A4494AMay 18, 2015
281521F09DC616733946F0BDE9763F6812D3May 22, 2015
28159BC53CB1837BA037ACE03A3DF25D13B1Jun 18, 2015
281501A3DDF85E7E5C0164979C5ED9F369A3Jun 26, 2015
276221266F1AB66856497F030A90F53907A4Jul 9, 2015
2830509F3F69EBDC8782298E9776F02A9304Jul 12, 2015
280277B39928DDD044DE60FB022F6180D8E7Jul 20, 2015
28157FE3797B4E86CC525B1FFD7F80901F70Jul 21, 2015
29991246BE920749F7BD8019B70537B7C2B7Jul 30, 2015
2815C00E46394561C0E4D506F3937277911AAug 13, 2015
2824ABFE8E2D1AEE8ADE5067F23584DE8BC0Aug 19, 2015
2817FB6B1A0D66D21051B2B448CB6FCB5A29Aug 19, 2015
2815138F78CE03ED95B02F78F17583D93F3CAug 24, 2015
2976725111E6F38D801CA870438E9B0B9124Aug 26, 2015
2825484F52F276EEBC76B871691F50B03268Aug 26, 2015
2825B30A2BE58B07A8943E2C928BC612EB11Aug 31, 2015
2825450C95D855228D5298F7BAC2D238409ASep 7, 2015
3029FBF4389DF67810B2A75E9FD612ED68E0Sep 13, 2015
2999428766FCEE128C7204B5AB2A8D774280Sep 15, 2015
2815C89957FB0D0CFD440F2DD183E0AFDE36Sep 17, 2015
28538E9BFB7FD00E72E5109F4266ADA21D23Sep 23, 2015
28255BCC7250A064129BB713FAE7A71C1A98Sep 27, 2015
299906EF4435B01B4F203A5B15801454D0A7Oct 14, 2015
299926CFEE2AEA289E84AF5E92F4FD3362A7Oct 29, 2015
299969E55003FD783A452097BFE815A4180FNov 1, 2015
28024B7F088A3566810F6956E2625465E094Nov 8, 2015
28300BD24A60136E1EEC087101622B6DF075Nov 19, 2015
27855E633137095453F86C96CC8B01750DBBNov 28, 2015
28255C382D4C14744875CC9E4D4F3BADD1EANov 29, 2015
2825B87AA95B5DC00AAEE097861FD4B552C9Dec 14, 2015
299909C38F7D700B4340D2D92E1B2CACDD2EDec 28, 2015
2802059280D9579A4B4B8F5EEABBF5D5A573Jan 3, 2016
28245547CB779304A1E0FDA0A65BD30386ABJan 5, 2016
2825131205D51FDA2D2E4DB84B00EFD97B3AJan 6, 2016
282525D404178734248F372AE413F2C43CB1Jan 11, 2016
282564814E2689A16D172AD293E24A2FD03AJan 12, 2016
2825E5F26FA728167B804A190B1C09E364FFJan 31, 2016
28250FE6BF04185E5D1F864D7E255E0FC816Jan 31, 2016
2816E867CA8AEFE411A1860FF5922576F241Feb 2, 2016
28259BAFF2826CC4BA9F8CCE7DF5C7C67415Feb 4, 2016
28247B4049FCC39DAC9ECF7D9DFA61F7EF43Feb 5, 2016
2825F7D348B246F4759C5915E9F2F9075D61Feb 10, 2016
2825FB74C56C0647ADBE976A94C97FA00AF8Feb 12, 2016
2825D48E2111A1666463C3E847E556A02895Feb 13, 2016
2802C04B78EDB623279A082C4BCD4D7CA1EAFeb 14, 2016
282513603A0B613480669EA46ABFFA33532DFeb 15, 2016
28552839D6D4F2FDE8467ECFAAC00E4BB153Feb 17, 2016
29993683BE702CE0F36DAC099F8780DBD9CAFeb 28, 2016
28553C777118B48B0110D3C65F99C4196674Mar 8, 2016
282500B8FB188B2D3B8A7FE310A5B0338009Mar 13, 2016
282526188FBB0F3E417EC72AFD0DEA8E0527Mar 20, 2016
282584E73B3FF2CA99631C07CCDCF1E4358DApr 3, 2016
280246C4E475D4344EF4D8CCB749FBBE51C9Apr 9, 2016
29995254126B0D49AE7549A05BCBD6D3E93AApr 12, 2016
299925C8A3FCF199EFAA74B3B87F0DB2627EApr 14, 2016
280273E3FCC4B3EB3C92C8E956E135555744Apr 15, 2016
28022F9FBE896A8E4EDC582A47668BEDAD90Apr 16, 2016
2825011E8D0B12F0105A5711D6B2494996B3Apr 24, 2016
2746BE93F4FEFE92783984448C374739CE0CMay 1, 2016
2998E8B9672C9EFD1D75192D6890FDAF093BMay 6, 2016
28258394CA57FBE58C02D6FCB78F46E1E10CMay 23, 2016
281588798CF84C53CFC9CD77E1FE9DB9D3C4May 23, 2016
2825F2024394F6EDDA4A37828EF60BB22A11May 25, 2016
2844A75A55461BCF408B7BA11EFD908C214EMay 26, 2016
282537292F2BC978AC31F0789C094B465E4CMay 26, 2016
28254F5A36B87EE1C131243F0BCB8582AE23May 29, 2016
2825CC9DE48BB86C3271CE6D285C2F2EB890Jun 1, 2016
28240701DE8D8863FF222A046544E87547E4Jun 1, 2016
282530094CE1E32B2FCD166F54AD0563D371Jun 2, 2016
2825DDA4DD661C816846E96A7E51BC40C17CJun 2, 2016
2825BB2D8776CC96A12D7EB997EFA76E37A3Jun 6, 2016
2825A37A71A3B3FE3E28D46F362EE0A84DF6Jun 6, 2016
282411BF70344E187B16C3479FDD77FD6003Jun 11, 2016
2824134FB76650CDDBBF398F14E2BB458F58Jun 14, 2016
2802F231CD1425AC9F2D3586C505BC6955C4Jun 14, 2016
2939F66392B5D2EE82B1CDF95D12E02A0835Jun 14, 2016
2824F81896A2A29FEAB605E0780388DE188AJun 15, 2016
2825BEF86477927CE3F9684DC43E3D5202ECJun 18, 2016
285307EBE30A44EA93DE581031EFC12B1DE1Jun 19, 2016
2989FB33CAAE37AC6B6F87BCE45BB13F778FJul 5, 2016
2857B3C879DC13B3FB480D226BBBCB164914Jul 12, 2016
278721640391A930F5E8C1EA95148BF2F025Jul 16, 2016
2825E48B5AF96BAE94F6C48A5814233E0DD3Jul 18, 2016
2825D6402FE6D62CD40D3C5F612CA359E0ADJul 20, 2016
28241A46640E2AC87DE33F0E6BC32391F4E2Aug 1, 2016
282478529A87558F2A683E0D68AFBB656846Aug 3, 2016
28250AB23CFC150FBFA44BC8B6E4590C36B8Sep 3, 2016
281590CD857754DDA8DC7BEE5CDCBFAF5093Sep 5, 2016
28258433314D84314E26C4390BE1F4030AE3Sep 18, 2016
2802F64B424C19326215738D3CF08F96702FSep 19, 2016
28155BAEDE46DAC08CEF51B2CA271E8386B6Sep 25, 2016
2824407E22F598DF0FD27CF3B2D6C0356214Oct 7, 2016
28250FD06315BE7312D9DBBC5D7067E21AFAOct 20, 2016
2916B81C66077C6ADB3FF61E69244C80F2F2Oct 21, 2016
2999593BC3423F82046D3A2F0AD4D558E513Nov 26, 2016
281538DAAC9E1565E23F4283E350CB2EA83FDec 5, 2016
2825E0F7CC59F194044234F4D102A05283E7Dec 8, 2016
28241AB37325ECF4CF1A1D85A58B1E693217Dec 21, 2016
2824F1A87B5988C94AA9B49DC653A1246B72Dec 23, 2016
28256FD0C84CC13467E6CDEDF9D153AFCF3DJan 12, 2017
2825E9EDF6ECACF6015B5DA8C42F3B075776Feb 1, 2017
2825E8477749F3AB3AC79C13AA91BFD97828Feb 9, 2017
28258EA0C7D60088EA949C895AF64860CD32Feb 15, 2017
2802FC1161F15C1D21861EB02D7BF2B4059AFeb 16, 2017
2824F8E3A9856284B147614FD6792067C03DFeb 20, 2017
282440C54361FD648211B56853897A28E21EMar 18, 2017
282483092ABF48BD505B6D843C3CCA591035Mar 25, 2017
2976D046E37B5073996C2A1511EE8E40863CMar 27, 2017
28150242E80FFDBA44AA2CC8ACD28EEB42D4Apr 8, 2017
28159E7071AE02ED835ACD20A77113E76D6FApr 9, 2017
2815304DEA2E404F98120464D7207B82C84DApr 22, 2017
2825A13D81342264DCE8381B6AE4E6D25229May 21, 2017
2998CB2351E7446FFADFAB51F5F68AEC3A42May 30, 2017
28241818F775F17B1C5015A6DB984A8BA6BCJun 12, 2017
27463315E9D5C75DAF2D848861C839DE4AF7Feb 13, 2020

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove trovi.xml^

  1. To enable deleting the trovi.xml file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select trovi.xml and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of trovi.xml and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of trovi.xml and Associated Malware.
  6. Notes:

    • The deletion of trovi.xml will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of trovi.xml will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a trovi.xml malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type trovi.xml. The name of the first found registry value referencing trovi.xml is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to trovi.xml, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of trovi.xml and Associated Malware.