Exterminate It! Antimalware

malpedia

Known threats:699,742 Last Update:November 20, 22:46

Testimonials

Hi!
I just wanted to thank you. My computer was frozen last night thanks to an online Easter card that was sent to me via the funcards site. I couldn't do anything but open windows.
I tried to open the exterminate it program that I purchased last year but the funcards site was blocking it, too!
I decided to purchase a new year of service (knowing my current one is going to expire sometime this month). It took two hours of searching, but exterminate it fixed my computer last night.
I have no idea how you all do it, but I would be lost without your service.
Thank you!!!

Valerie

File: v9-.xml

Location of v9-.xml and Associated Malware

Check whether v9-.xml is present in the following locations:

Windows 2000, Windows XP, Windows Server 2003 specific v9-.xml file locations:

  • C:\Documents And Settings\USER_NAME\Application Data\mozilla\firefox\profiles\[%PROFILE_FOLDER%]\searchPlugins\v9-.xml

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific v9-.xml file locations:

  • C:\Users\USER_NAME\AppData\Roaming\mozilla\firefox\profiles\[%PROFILE_FOLDER%]\searchPlugins\v9-.xml

If you find v9-.xml file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The v9-.xml file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of v9-.xml File^

File SizeFile Md5Last Seen
21213F3DE9602F3E1B8A3AAB87D93134C415Aug 17, 2015
22099C381579E2165B5635F0170E9566B016Sep 15, 2015
2091ADA940DBBEB7D22C08371A292FC75978Oct 7, 2015
2144C0CB831081D9C89B8F42D38FA500EFE9Oct 23, 2015
21625B8B6E1542D662045C6CFB71B5659845Oct 29, 2015
209068DB509E2CDA825770FE1992D7D114B3Nov 29, 2015
2156C9DAAC36FE8DC771E587FF65DA854C7BNov 30, 2015
21125DAF13E66ECB18F0964A52302B318411Dec 1, 2015
21429028758D33FF0AA5E228A2264E269A2FDec 13, 2015
21407006475BFEBFF869C4EE1AFA1A4863C4Dec 14, 2015
20103B43EB5E439C45B7CC7B55AF6CC871BFDec 23, 2015
21016A61BBAF85414E55585BC338FB4A924CDec 26, 2015
496EBCE899F0E2B070A82701099A982D87AJan 11, 2016
21458DB64FC1699393F1D657915C47C4A216Jan 23, 2016
21136C68C2FDBEDF4D077C6D8A37F9012F20Feb 3, 2016
21494A9E7DB8CFE94F32C10F11CFD22BB6F8Feb 13, 2016
21428C9928E9E2C17049CDC89ACA5066F89BFeb 14, 2016
2160F28D98FC718B4D22321E56F39DBD8FA1Feb 14, 2016
2104EAABF5B504A32BCA436AF048A41176D9Feb 17, 2016
2095A72463E75EC358E1975D7511678F386CMar 2, 2016
2094D4906DDB22CE020CB4D8BB3C1B38CB9DMar 13, 2016
2104AFF185E835FB31ECDEA4ABC3D92537AEMar 22, 2016
215059691E7F53717C0EE1BB48628EDA6085Mar 27, 2016
2106645DF604B0EE5A3FC55E6BBB72ED1EA4Apr 15, 2016
21638438E03801D812691E192A628296EAA5Apr 23, 2016
2087B531BE4BA302493E8B50BBF54F907289May 7, 2016
2104EAF612E7F3D9A91943BCABC3CC44DA6AMay 28, 2016
2117C0C34708B838BDDC7EAB35F4D3CB241FMay 29, 2016
506C40351E84D68E1FC598FE9379FCB4F3AJun 4, 2016
21014320D4FF7EA35C27EE25B5664D62C46DJun 8, 2016
20946699F9C532EEDDAA299622AB7DAB2693Jun 12, 2016
214444CBC8BF054A8D87FD93584BE0E0371BJul 20, 2016
214239E08F4A87A70CF737E05FD1812E73E6Jul 26, 2016
2106652AEF976E8E97CE4AEF295FB19E9B79Aug 14, 2016
21525AB98134FCF1AC18B4EDB2F18F58C783Sep 6, 2016
210557F7AF697497CF1147FB912E1A216C74Oct 2, 2016
21518507E47BB7D7DE2CE8EE7B03894BE7F2Oct 23, 2016
219690411BE4BC99CEB4F60D23E4383D5E97Oct 23, 2016
209012458C6B9A3AFB147008C81CAB63D6ECOct 30, 2016
2194A2923E17F3989E2A8427F2C5FD3202E4Nov 19, 2016
21608CD912487E97CC1FD7BEBE51F5C7745DDec 6, 2016
2174CC5BEAAB17D9FAD4DDADF2F1013808F0Dec 21, 2016
2134911AE8C47EF91A8B385B4691C691AACAJan 12, 2017
2138401D3A34A83E8B846689284F682D205BJan 21, 2017
2086E8C3BD880F375988F48620C5BF714D49Mar 29, 2017
2145CEC3A6618ACE0201A62F0A6431E453ABApr 10, 2017
2157E072D659161B3F528556ACA53A8642FDApr 29, 2017
21585C80955E2A8DA302263C5A2F01D9931AMay 7, 2017
210153E2BFFA7169B7892CC4710E532A539BMay 12, 2017
2159FB9F92EC137D7FA405F04676468D5213Jun 17, 2017
2139B649A76B7952A4DDF8CBA6554DA012D3Jun 19, 2017

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove v9-.xml^

  1. To enable deleting the v9-.xml file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select v9-.xml and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of v9-.xml and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of v9-.xml and Associated Malware.
  6. Notes:

    • The deletion of v9-.xml will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of v9-.xml will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a v9-.xml malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type v9-.xml. The name of the first found registry value referencing v9-.xml is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to v9-.xml, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of v9-.xml and Associated Malware.