Exterminate It! Antimalware

malpedia

Known threats:699,742 Last Update:November 20, 22:46

Testimonials

In recent weeks, my computer has been infected with malware and adware that just would not quit. A*G G*****t failed to remove them. S****t just froze up. Another anti-virus program just sat there and looked at me. So I purchased Exterminate It! This was the only anti-virus program I could find that would recognize and remove particularly pesky viruses from my computer. But even more impressive, they allow subscribers to send in descriptions of new viruses they encounter, and they will design a way to remove the virus and send out to you an update. I submitted the description of a virus to them, and a couple of days later they sent to me an update that cleanly removed it. If you run into viruses that just won't quit, give this anti-virus program a try. It's cheap and removes the viruses that the other anti-virus programs can't touch for some reason.

Source

Brother Mel

File: Userlog.dat

Location of Userlog.dat and Associated Malware

Check whether Userlog.dat is present in the following locations:

Windows 2000, Windows XP, Windows Server 2003 specific Userlog.dat file locations:

  • C:\Documents And Settings\USER_NAME\Application Data\Userlog.dat

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific Userlog.dat file locations:

  • C:\Users\USER_NAME\AppData\Roaming\Userlog.dat

If you find Userlog.dat file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The Userlog.dat file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of Userlog.dat File^

File SizeFile Md5Last Seen
817470DC430A118A513F04DA85AB720D25368Aug 4, 2010
555A3419FAA4F65D5E9338770F7F2F43AE2Aug 10, 2010
2848454939D2887B1051BDABFD023F13CA184EAug 22, 2010
69325F417F7971D711683C5F3B8CAD8C8718Sep 9, 2010
353C37F5A1CAE9AD946361DB9C0F93CBAA7Sep 25, 2010
12805D144B345656DED0BB454FE8FFCF7EF98Oct 5, 2010
19860535E2AEAAC9939CE6ABF6CF8129666EFOct 25, 2010
19963C96EBD63A7C093A1104D4D33D8CFE949Oct 25, 2010
6819C96D2ED752D4F6DC32F2D8B383F140F4Nov 5, 2010
3447543DE7287A71EDA4BFB6D2EE926BDB88Dec 2, 2010
1040121DF2C9E881C4E9A0E575B42ED3A291282Dec 7, 2010
4442498955824F167C0BF78D74D2F38839B51Dec 12, 2010
6769D0CF837924B35D35B927E45778AA5AFBJan 7, 2011
4121D4B2668537317CC5EE06FB8DE1D2D71CJan 16, 2011
83074DF7365F63FEE5C0DF3DFC4700BE08F8EJan 23, 2011
3718B23CFDE298D534D18AE22E7C99B7C496Jan 31, 2011
165893E5B4DCF3D55B75FFF81E84E7F39937D6Feb 2, 2011
395AC56F8EC4D8ED86AC18FA8034BA226FDFeb 17, 2011
5120AC5639AABAAA47FFEDCBA5E35E8107F1Feb 23, 2011
1908804607CFCAD706067440F257AFFECFDD04EFeb 25, 2011
10119098A926BC081195711AF50EF2422637B1EMar 16, 2011
25720C3EEC163DA2F11A14F870C481EB8C44Mar 17, 2011
12737302F9D918EF4C2A6B13B48979854A3EFFApr 3, 2011
2766757FCDABDD44F0547DDCAE4CAB87DF0FApr 14, 2011
1799272610B7DBCB242441A1111994EB9710329May 9, 2011
8156E689D09C5E68023F6067D707248235FMay 16, 2011
2591811AD59CCF2C132A2461F42FBFA9A2F26May 17, 2011
34522662C221920ABEE87B9C0AB89C7028CFB0May 30, 2011
2695648E857F7F35B5FA5563745459F807639May 31, 2011
2641ACF58D382AEBFD20FDF5652D9AF61B7Jun 4, 2011
7414359D6A97FE583888C0693F8A3BB65C7D2Jun 14, 2011
145994C95D4A5FFB5B551031DEE85FAC6D383Jun 17, 2011
783109BD8B9F6660802F8B62F91910CA322DAJun 24, 2011
1317991E2AFE1799CCD780AB0DF03F89A6EE83Jun 27, 2011
42615F3F4AB0B4D4FEF4AD31E1A43869EE13Jun 29, 2011
86373055C30FEA74750630C4FD615481D5CAB21Jul 5, 2011
5031346BFECFBFD8696374C4A0AB179A531FE7Jul 11, 2011
22566DB9A1A2C88305730D038C8D0CA371205Jul 14, 2011
9341B98A8CA852DA7F3593A8A2FF6397DA6Jul 17, 2011
769391D0B191F4768F84526C203C3350B87E65Jul 24, 2011
18050773CC5C6956E2138BC7394711BEC473C0Jul 24, 2011
2106781161184B352E011DF51CDE939DFC25BAJul 25, 2011
79322D67FB712D95376BCECF80F5C15C4C53FJul 26, 2011
592DF232192E70A7217839E9B71C6373D17Jul 27, 2011
20347E960C37DD33CD93A8745948273D6F27Jul 28, 2011
25460EB427B4200DD1D8D944ACA695A6AD8B5Aug 2, 2011
10636851CF40E4CF9079557079AE6D8744C3A3Aug 5, 2011
805537DACD71970C9CA18FBA905574D25DC84Aug 13, 2011
20721EE974493F229C85C80AF1BE0C869D1Aug 21, 2011
21190D37B80BC33A01FF27757DCCA97BDBA5BAug 25, 2011
5929739F058972AB9DF7E318C562EC56E7B6EAug 29, 2011
17372F463BEA0A063697A6703030D5E452CCSep 2, 2011
7638585BD2CF9BB20D555646323F46C319441Sep 6, 2011
906502E2B1494E498230D7E0F4A963A235ADSep 15, 2011
106762AA94A61D3EFA2AB973FBC757374D59FSep 21, 2011
29933CEF897271AEB21DD5F0B0FFA7898572BSep 25, 2011
279189BB78EA3E9FDB09760BC7A5A1005D16Sep 28, 2011
42820EA25F963A33BF58FB2CC29DF0BDA3772Oct 5, 2011
216997942D7C91D7092EE8785E56772739ECAOct 8, 2011
2239032B9DE00D378183BFC200E1517654A6E6Oct 12, 2011
887975FB3986A0E467E979B08EEC0CE4BA0C3Oct 18, 2011
372034159C45CB58E4220356AF71231DC602DOct 24, 2011
12277B87F3B672300AAEF4667D92E8A7E7FCOct 26, 2011
155295C9FD5E4E57F675D1A701789E85BAECDOct 27, 2011
389684D0322D0865D6F3B226CBCE560A4FD63Oct 28, 2011
7861FC6EB1351BC603031C4F61835FC4F20AOct 30, 2011
511263DBBE568BE6139B8AF73DCD70D03BADANov 7, 2011
4097215706633281A434CEF4F3F024D784F44Nov 9, 2011
15851217B10A87763BDA5A7D13ED97A1FDDE3ENov 11, 2011
9921E638C6E53163E1362B18ABA382DF96BNov 12, 2011
960046EDCA3A8840C154CB8E1BADC3E8432Nov 15, 2011
33117831310CD72CB2470C66B006D5B1C879FNov 16, 2011
37343EEF221DC9C64BA3F51964A9D7818FF65Dec 14, 2011
9026244F66788C7ED4592BB917B3CA64021DDec 18, 2011
598025652BF17DAB732665079694B103C5CC8EBDec 20, 2011
19130ADEC50B889387D5208D056EBA48A2331Dec 21, 2011
16771008C5408D067A79DAE6D3B937C29E67Dec 24, 2011
259FFF69C6DBD4F4E82F5390BE4C7EBF2C8Jan 21, 2012
85693E5EA18C8BE47BE7227C5FB891316362Feb 5, 2012
312377ADD1A27F6E0491AA773A49AF86316656Feb 6, 2012
72047307A63AF754B29E25D42F79A50FD59CB4Feb 14, 2012
45963D5D96D612CBE608920A31257738EB6Feb 15, 2012
3537586257A56C404E2E446B7239C4B7D6FFMar 3, 2012
1811245F3BE87CE2FABACB88DBCACC3C8BBD4Mar 9, 2012
9813ED7A655F333C3737A21B625B0C6D26CMar 19, 2012
916769AA570DC72979B2D11A2B6873C9DB8F28Mar 26, 2012
194556688F59DC588D71212240D337CFC50B71AApr 3, 2012
174300D00D494D3036F92DB0F777C67140E5E4Apr 9, 2012
141729B8B5790371303A69B657FB038767775Apr 15, 2012
20288BBEB76A809771FA1A155CB9BB4CFA22May 15, 2012
142760BF82C67FB72DCE1127AAB4DF6D4D97B7May 28, 2012
3188121822F0176211CBF309801DF0BFC2DC0Jun 16, 2012
44918520311D9E700FE5B4AC71F671A552077DJun 28, 2012
95185A48ECE36567D7FFBF4BD4903D3B69922Jul 1, 2012
130477A735B663E786EB05EB534145BCA1A2Jul 24, 2012
12388332593A9C14028407A274561AA30038C2ABAug 5, 2012
247A3F1E3DDFD8E088A05706F06AE8FA6B8Aug 27, 2012
24488952C968A262C0A9A03474A16DD3C1AOct 25, 2012
2572252BD3F2519E261677B6F2C37C271D7176Nov 3, 2012
260912192016CF1FDA89795B00C0DD0D0D90B8Nov 8, 2012
159397FD674DC80DCB588F03977FA4D446CNov 9, 2012
22631488D3F01A0740B5256539DE756165E0Nov 10, 2012
359278ADFFE45D3AD9896B6D5018083D1246Nov 14, 2012
1454F1D69F97D562A6637E524930831E8599Nov 15, 2012
30583A19F41D49EA82B95C9F0421DB3D736Nov 15, 2012
234EA54E3BAC24CBBA16617F299D61C6CCANov 16, 2012
17032B4057CC2DC0C6305797D13016D8F962Nov 18, 2012
3316AF6937E39B350A467664B335376279AANov 19, 2012
11760882DD85810D17A1B4D5795309DA6A3A345Dec 3, 2012
1276066939551B12379921B85EE929974DC45611Mar 15, 2013
2909395DFA386909C7259E944DF1AB79ECD6FC5Mar 29, 2013
306946682F8C3A347F60323703C78FC8A777FApr 18, 2013
29856F2A9F2F416D4B8A747FEA805E119FD34May 16, 2013
31061969312AE50DC9D7C8D6E92CBCC416F7CACJun 24, 2013
59952005704876CFD58D638E1F3CC43C0A3Jun 29, 2013
25359081B75758EFD0E00D1191DB3DC6C37Jul 24, 2013
37568596E85D8F943717519A8000B6944ADCF7DAug 9, 2013
48823C1F4272EF0CF2D0C08A354FABAC15E97Nov 19, 2013
275740146C9D0E14824F8F1EA1631B3ACFFBECApr 20, 2014
376902FE57B31B6830A6BAC9CE8798087700Sep 25, 2014
9648982AE07C3CD14047B9202839CD16529573Apr 17, 2015
41753E6521D1A209D3ED1E5039F8DEF1C3300Oct 24, 2015
208985AD1E00503BF02740F4D1C9A0BAFF6C4EJan 1, 2016
1939560042F5E026C035E5F8526137FB024CJan 10, 2016
15BF3DBA41023802CF6D3F8C5FD683A0C7May 3, 2016
72013935D0F9DEC4821C3408B752C3AB9F0FD24Jun 24, 2016
84509C56BE83379BB43B96D8E209A2303924Dec 21, 2016
38504E143115334564B035E993AA78003CFJan 26, 2017

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove Userlog.dat^

  1. To enable deleting the Userlog.dat file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select Userlog.dat and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of Userlog.dat and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of Userlog.dat and Associated Malware.
  6. Notes:

    • The deletion of Userlog.dat will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of Userlog.dat will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a Userlog.dat malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type Userlog.dat. The name of the first found registry value referencing Userlog.dat is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to Userlog.dat, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of Userlog.dat and Associated Malware.