Exterminate It! Antimalware

malpedia

Known threats:700,085 Last Update:August 24, 10:09

Testimonials

Running an update right before activating seemed to do the trick. Many thanks. (Also, once I had it properly activated, Exterminate It! got rid of the SpySnipe trojan I’d been battling with for a week, so the news is even better!)

Gary M.

File: Vosteran.xml

Location of Vosteran.xml and Associated Malware

Check whether Vosteran.xml is present in the following locations:

Windows 2000, Windows XP, Windows Server 2003 specific Vosteran.xml file locations:

  • C:\Documents And Settings\USER_NAME\Application Data\mozilla\firefox\profiles\[%PROFILE_FOLDER%]\searchPlugins\Vosteran.xml
  • C:\Documents And Settings\USER_NAME\Application Data\Mozilla\Firefox\Profiles\1crgqdf1.default\searchPlugins\Vosteran.xml

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific Vosteran.xml file locations:

  • C:\Users\USER_NAME\AppData\Roaming\mozilla\firefox\profiles\[%PROFILE_FOLDER%]\searchPlugins\Vosteran.xml
  • C:\Users\USER_NAME\AppData\Roaming\Mozilla\Firefox\Profiles\1crgqdf1.default\searchPlugins\Vosteran.xml

If you find Vosteran.xml file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The Vosteran.xml file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of Vosteran.xml File^

File SizeFile Md5Last Seen
1231FFCA1F697677DC9CE4CC60410B8077CEDec 5, 2014
282520BAFF447743DFE80D348F8F212D60F6Dec 20, 2014
2823ABF3BA23D34919FA5026A55E23B65613Dec 24, 2014
12417BBD87A7E7D99120C21BB3279888450BJan 10, 2015
2335EF9C740ADF1FE4630E2BBECD6BAD1168Jan 17, 2015
2803D08AECC33B5BE44D08DA23C4F9FE1F82Jan 18, 2015
28172F7F5C59F8CA48DFF76AEEB12F6EFF75Jan 23, 2015
2819EE7451833668FCFF610FFF6BCDDBD081Jan 25, 2015
1219F125C7F7DC033A22869263EBAD460131Jan 29, 2015
2839F91426C738E3E2694F37CB355CA8BD7FJan 30, 2015
121595831BE60F69EDBDFBE386B5510AE982Feb 2, 2015
28239D5D204BAABEDCD404718396DC21F82DFeb 4, 2015
1223888F1D11A180C8280E3F10CB72349E12Feb 18, 2015
2815DC9BE60BB901AFE37DADA8456FDE90D2Feb 25, 2015
12314CBA8FF96230E06C7AD36512BBB80BF4Mar 1, 2015
1239EFF73890D0C99069B4472ABCDD5AC31EMar 28, 2015
2831B42BCE84135F493C32610DE1A3DB1298Mar 28, 2015
1227C21F88C15C64BD6B5E707FA8E3696FBCApr 11, 2015
2823AF5CB4F539A626778463CA8B5DB6CDF7Apr 13, 2015
2799F8ED6BF11565F7AEAAF1C385FCFEF0A1Apr 20, 2015
2823ACDC4C198DF2BA9D308E94C51BAC5A33Apr 24, 2015
122145E132EF689505C686D7B2E6895017E6Apr 25, 2015
2821FEAFC05A61E4C95CDBECDB024523EAE0May 3, 2015
2821F318C31D28651FDD8F708C4E16BF67BAMay 5, 2015
12292057644477E6CFCD761871C7F7323341May 5, 2015
2829ECDF0CCAD3F1CA46819EE73B04756630May 9, 2015
2825B8A9268FE4627767ABC7227A56B971AFMay 10, 2015
2817F4966D90E59E936E74AAB5E66749D6A0May 18, 2015
2813A6E5FA9FF5DB7FB9B93B23B7EE855D98May 18, 2015
2825597CE8D104CE7246AFF026F851CDF32EJun 7, 2015
28258E849F2E4FB3FCB50255FB23D499C7FBJun 18, 2015
1271ABFE0D0C17004776A347F63C78E68AA5Jun 23, 2015
281300F2DC7CDC2FF9E1440AD332F30C4B60Aug 10, 2015
1255F338D8F53283D05E51883652EA9169CEAug 25, 2015
28075CDC89F69A8915AC2AD9C1ED7020F674Sep 9, 2015
282196FB06E1E688864765D8851C54A17B70Sep 10, 2015
2821BD8A1C348828D11DE68450D7F20FB370Sep 12, 2015
1223704AA9D1B8820AA33AF8DC4550A94110Oct 2, 2015
2789EDEA6D1F787F5FE27450CFEF273F878COct 29, 2015
2829FB457E2A47BCAE611C755203D175C2AENov 1, 2015
28235202E9D3DA8A64958D60C0B11EF32A6ENov 9, 2015
2825EB17A258CA42A91AA6A51D4FB184447ANov 13, 2015
2827BC441369386ED02CAE16CBD006D17210Nov 21, 2015
2815E0C70B7B76C5BA1F15ADBCB93BA6274DNov 30, 2015
2827DBC756CA0366D02A06A69C2452809F54Dec 14, 2015
122376F982F475FEE44833A2CF471651EF21Dec 20, 2015
2809B40C5CA7413305A13CB0EFD91544696ADec 20, 2015
28053884B1814486B8BBEE5B8AB42847BB60Dec 31, 2015
2825113DBF48E01C8587BD423E27EF91A331Jan 3, 2016
2821215F0891AA1DE28321611FE55EAE20B1Jan 5, 2016
2787802F0C51D611D7FAE883F26711A02002Jan 23, 2016
281714037D748AADEFB73EA078A9C7730BE1Jan 24, 2016
2829EF0BD29428C53AEDF4B16399B762EB5FFeb 1, 2016
2785E386125F2F2C40F195CA9AB87A07BCDEFeb 12, 2016
2845F2E63979EFDE791039732DB55FF95BF8Feb 16, 2016
281970A1E8C84B3A4A8EBB74E6C0F4A90B72Feb 27, 2016
2817CEAF7332C22C0ECE3C83888FA1C9884FMar 2, 2016
28037D13FA6024EC75D2865216BDE02982CDApr 20, 2016
28716258103F67773459A58BF9B2F558FC20May 5, 2016
2857BC257FCCD7254D306A859819D3C5C6F5May 9, 2016
2819FF8FB12281B78C9B50994695707C785CMay 17, 2016
283169986F7C21735E57E75813541F725454May 21, 2016
2805719BC9DF853C292BF48992066E7F423AMay 21, 2016
28152A4E905CD4FD170AB4F8F84615E33F19Jun 1, 2016
2835A5DD78801C4A4623D51138C12BC05FAEJun 5, 2016
28190EF3FE0D955ABE6F0A4BA4372B4BA987Jun 28, 2016
1221E36170B4647866F2D3CC03AD9DE477CEJul 25, 2016
2791DBADBDBF38812A20CD17D6DB469D2692Jul 28, 2016
122969C78825CD7672155BE09F1A75A5FC90Aug 1, 2016
2819310CA4C691A6E411858898121B18FC4FAug 4, 2016
2333C55AB2E73C0D999E21D26F4641AB28C4Aug 28, 2016
28130C25D2F9058C3DA1F442B26A37EFA2C2Sep 11, 2016
282538EBBFC3E3E7F9CCB35B31E3E5BC7B26Sep 12, 2016
283592F4CCF7A30B4284F10EEAC82B34B01ESep 27, 2016
2861DDEEFB81AF075A8B9E08604C6E40C945Sep 27, 2016
12233316FCF8EC3D4E8089B34E374BDB4135Oct 3, 2016
27917403FBC608690E329F0BDE0E61450F70Oct 7, 2016
2831E554BF098D052F1B2D4ECB2EFDD69651Oct 18, 2016
2883DA24DC382FB4202B8F016479BC6A2825Nov 12, 2016
28697B395276023A5EEE6C85A7FA98E7D711Dec 2, 2016
2823D3D2ECE981E4C7F1C84F491E29474388Dec 8, 2016
122141BB447956B9B6478CC28DAF0B667063Dec 16, 2016
2811B367E68C113CB3359CC2ED9F836E02E6Dec 21, 2016
28258D8CF9EEEFEA842AD8E4463E00440BF4Dec 22, 2016
2857B6622F47B02CE46AC8010AD910075FC6Jan 6, 2017
2815F1222F23BB8D9BCBA6F86984999FC045Jan 23, 2017
1231EDDE99D0095EED9A482D58BBC92C6931Jan 30, 2017
2815E6BDBDFA924558F92D14637C5BFD0F80Jan 31, 2017
2827D1C04A14EAE8C322869236622BC534A7Feb 2, 2017
28559171F30575640FC27A885B5C4852FA0CFeb 11, 2017
1231D466BA11852256DCEF2DC8FC8301C1AEFeb 13, 2017
28156D875FF279DF944D0CA0CAB545E63A43Feb 17, 2017
1223F845BD743F5DCB4FFAF6B1EA0207C27BFeb 17, 2017
2795BE86300B32A30C208C83FEE152B1CEADFeb 20, 2017
2815B8138CC616BA8074B549140E5699B8F5Mar 15, 2017
2811E6045FDCC35ABBA883607606540E12A7Mar 16, 2017
28034E94E564A29E046A18C301AD3AEDCE57Mar 22, 2017
2821FE9DAC89DB2AA09308A0D4005186A623Apr 7, 2017
2823645610968F8BDB5E3828445451575201Apr 13, 2017
27954FFE191C32BE901199207C2E93C4BCE1May 30, 2017
282789B2889A5A7F8B0EA5D95D6B1D241FAAAug 29, 2017

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove Vosteran.xml^

  1. To enable deleting the Vosteran.xml file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select Vosteran.xml and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of Vosteran.xml and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of Vosteran.xml and Associated Malware.
  6. Notes:

    • The deletion of Vosteran.xml will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of Vosteran.xml will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a Vosteran.xml malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type Vosteran.xml. The name of the first found registry value referencing Vosteran.xml is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to Vosteran.xml, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of Vosteran.xml and Associated Malware.