Exterminate It! Antimalware


Known threats:700,086 Last Update:March 16, 12:51


Dear Jean,

Thank you for your follow-up. I did indeed use the Submit State feature last night and this morning, your team sent me instructions to run an 'update' and then re-run Exterminate It! on the PC. I just finished that process and the new update wiped it out. I ran my regular anti-spy/anti-virus to double-check and it wasn't able to detect it either. I appreciate the support from both you and your team.

Linda D.

File: VIP Casino.url

Location of VIP Casino.url and Associated Malware

Check whether VIP Casino.url is present in the following locations:

VIP Casino.url file locations that are Windows version independent:

  • [%DESKTOP%]\VIP Casino.url

Windows 2000, Windows XP, Windows Server 2003 specific VIP Casino.url file locations:

  • C:\Documents And Settings\USER_NAME\Start Menu\VIP Casino.url
  • C:\Documents And Settings\USER_NAME\Favorites\VIP Casino.url
  • C:\Documents And Settings\USER_NAME\Start Menu\Programs\VIP Casino.url

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific VIP Casino.url file locations:

  • C:\Users\USER_NAME\AppData\Roaming\Microsoft\Windows\Start Menu\VIP Casino.url
  • C:\Users\USER_NAME\Favorites\VIP Casino.url
  • C:\Users\USER_NAME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VIP Casino.url

If you find VIP Casino.url file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The VIP Casino.url file is associated with malware only if found in the locations listed above.


Different Variations of VIP Casino.url File^

File SizeFile Md5Last Seen
17904059A4DD48B156745376F581810F187Oct 9, 2014
179BB2BC644C32F3EFAF992F8CB6E7E3938Jul 10, 2010
156B4DD4F2E4C79E86DB3BD913F2AFE609CJan 11, 2012
1790B7211716F0B4A27DED8700D8F013568Jan 6, 2010
161394EBAD613EE45692BB595BDC62FDAFFMay 3, 2010
179A5F94F8F472CDE0299BFC0BED49F4727May 21, 2010
156F37B8DEC6DE0E840C2DFFDDD0C917669Jul 26, 2010
17921BC5AF060EDDFFCE3A128CE7EE9DD65Sep 15, 2010
1564FE326E63DD6DCF5BC2F7548A212F783Oct 23, 2010
17905CCD7E9CB20E43020B15F446CF6E127Feb 7, 2011
179BEC4473FC43B77E28E60F89DA4E29C00Feb 14, 2011
1618C7D10B753F3CCC8968B196828493E55Aug 3, 2011
22461837287435AEE695DE88BBFDD2B0CC1Sep 9, 2011
1796891325F1DF18A1E682874A9C79137EAOct 1, 2011
1798A42B7DBA258792970D9F691A4D1B4EAJan 20, 2014
272BEDBECFD54612E5D0BFB93A6DB4F0C5CDec 29, 2015
269053969F1E05F7207C698282AF7A1E600Dec 29, 2016
18103A677792F4572928DF4252F9AA15E21Feb 22, 2011

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove VIP Casino.url^

  1. To enable deleting the VIP Casino.url file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select VIP Casino.url and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of VIP Casino.url and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of VIP Casino.url and Associated Malware.
  6. Notes:

    • The deletion of VIP Casino.url will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of VIP Casino.url will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a VIP Casino.url malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type VIP Casino.url. The name of the first found registry value referencing VIP Casino.url is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to VIP Casino.url, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of VIP Casino.url and Associated Malware.