Exterminate It! Antimalware


Known threats:700,086 Last Update:March 16, 12:51


Just want to let you know this is a great product. We bought it but it didn't get rid of the CID popups. We let you know and within 2 days we had a fix. Now we are CID free. My husband says this is the best money we've spent on a software product in recent years. We had been trying for 2 years (on and off) to get rid of these annoying CID popups and now we are CID free. Highly recommend Exterminate it. My husband says and I quote I am a believer!

Suzanne M.

File: WinThruster_UPDATES.job

Location of WinThruster_UPDATES.job and Associated Malware

Check whether WinThruster_UPDATES.job is present in the following locations:

WinThruster_UPDATES.job file locations that are Windows version independent:

  • C:\Windows\TASKS\WinThruster_UPDATES.job

If you find WinThruster_UPDATES.job file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The WinThruster_UPDATES.job file is associated with malware only if found in the locations listed above.


Different Variations of WinThruster_UPDATES.job File^

File SizeFile Md5Last Seen
2680EEC41FBC13343D7EF4CA64A008E095CApr 17, 2016
280A20EE227748CD8EC443ECF1CAE5DCA99Apr 22, 2016
312F03AD1B09B14F00F32241BBB22FAEAF4Apr 24, 2016
28089F3A2CF9C505DFD3F6144830F91ABCDApr 30, 2016
296A768F35C5F5EA606DEB31B707BDD3363May 1, 2016
30482AFDD23BA78E0F5C1A269A410D4D556May 9, 2016
2687B6A9AF8FE34C35C2FABFAAC9C16BC30May 13, 2016
284AFD683A99A93DBD79E629B1EE413CF11May 16, 2016
294B15685CA9A1A06DC2FCD1B18E53CFC2FMay 18, 2016
27638D81B390B13080E317FFFCEF031A041May 19, 2016
290BB4CE2F1F63F3FE03869A25FA19A3ED0May 22, 2016
288049860A5659E4731D846C15CDA754D1CMay 24, 2016
294EDBFACFE52BD0AC7EFB2C59604078CCBMay 25, 2016
324227632A813A121D324F2E357E27A6E71May 26, 2016
326D344D8D8B3AE960FEF44DC3F6780628AMay 30, 2016
2685AC576F92E947CBCCCBD1A3BC8BB9314May 31, 2016
3046C59ED394C9C403AA2997C37921859A9Jun 2, 2016
3184203ED759A1C4465F8236CD76230820FJun 9, 2016
294E453C6B4A367A807932C917FC48A1B9FJun 10, 2016
286B85FF624D8BC39D97BF9CEE04E396FB9Jun 13, 2016
284F8AA153870632CC916E713AE25E5ED81Jun 17, 2016
3147EDB7693F6C3FC61D651C207E1AEA2ABJun 22, 2016
2906219DCE1CB58D0760670DBDD6B21CA3BJun 26, 2016
272E175AAC9949E428EFEA7AD4C31878C3DJun 29, 2016
300FAC1F4016FB83A53899C965AD7FD6DBCJul 3, 2016
302BCF86D2524BA7EB04EE36B257E8D7039Jul 5, 2016
278C0F4CBE32FF1168940BF561B39F505B3Jul 9, 2016
27851A31D1FF9E78A2FB5F42347E7D650B7Jul 10, 2016
270A6F469B7F4C18D2862EED524A17F1455Jul 15, 2016
26464C2F605756BBE29780AD977624C7309Jul 15, 2016
30671BFBDCF0C44D32BCF7DC50434B2B702Jul 17, 2016
3144F0028C37A6D1DF5A4312C0A8392774AJul 18, 2016
27616408A3860CBB741EC4AFE0F676A9C4FJul 19, 2016
280234227979073A8561F28844E2126B974Jul 25, 2016
326C9AAD33A0B0E30EDB9C46F2F7AD188AAJul 25, 2016
286D89A01B7DB56E8CEF76C9D76352874B5Aug 4, 2016
312FB5C422AB0A94F3941894A02DFA322BDAug 6, 2016
286E2334AEC7CA742D3194FB151385B16DCAug 6, 2016
28815B6285336A552FC1B0AF56A0F6CA179Aug 13, 2016
268706F21D2455714F657D7AE53C6FD9BC7Aug 17, 2016
280C30B934E3CF4EA44EF3F5C9BBE2B1740Sep 8, 2016
294D52666A82506E32D3C0078B5536507EASep 13, 2016
3149FC4CE5B42D98EE8175E8CE9216C7EF3Sep 15, 2016
27219D0209BEAB96D0FA6F0EC56B719BC79Sep 17, 2016
3005EE16A845E83FE4DEDB505AC5B9391B6Sep 18, 2016
328307D78718DF60FE0A2907D3E8BBB118DSep 19, 2016
306D17E7B804B1D9118A884B0E0EC0AD729Sep 21, 2016
3061914C65F249B080584855508F250A036Sep 24, 2016
2841C96D8972ABABD488439E2326CCF9E56Sep 26, 2016
264C6717360EBD9AE7C871A164FD13397E3Sep 28, 2016
276EB93A11C132C9B987BC24FA6DD8ED076Sep 29, 2016
27040B9920EA1F438A332C07096B80D32F5Sep 29, 2016
2945EC6DAB329A7B26583BEE6F74491DB94Oct 30, 2016
2961E980ECC49802E4E26521D5D9F1E173FNov 9, 2016
302719568A6DBDBFAC8242C5AF92E2FD206Nov 14, 2016
298D9A1D9CA265B67880E4B85FF4DB3B771Nov 25, 2016
30490B14055EEB6359B010CDDF724768F49Dec 15, 2016
288FA023DE7416D39B4306A530CB7BDE1F7Dec 16, 2016
302336ECCB553126C76D12F051FB65269BBDec 22, 2016
28484EE71963D1C22C08D343B8D390EAD2CJan 12, 2017
28823C5C5C33892C1D824B4EF85E8C19E1FJan 15, 2017
30020A62892ECD734FC8DDCEFB81B615CE1Jan 15, 2017
300889CEAAA1E1C22517AD8895FBA7721A6Jan 17, 2017
310D29D03243B2BD2EC7C4DD8F7152AF936Jan 30, 2017
2961B833F2454E31E3EC69FEFC4460372BCFeb 5, 2017
332AAE14949BB32185B7499E59BDD164330Feb 12, 2017
306A06A6F64EFD5E78ECFCB115341A2FB4BFeb 20, 2017
2882C198921AE400FEBA1DF74E505915B10Feb 28, 2017
268E42E1D7E5648FF6515597D24F8A0CB93Mar 13, 2017

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove WinThruster_UPDATES.job^

  1. To enable deleting the WinThruster_UPDATES.job file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select WinThruster_UPDATES.job and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of WinThruster_UPDATES.job and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of WinThruster_UPDATES.job and Associated Malware.
  6. Notes:

    • The deletion of WinThruster_UPDATES.job will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of WinThruster_UPDATES.job will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a WinThruster_UPDATES.job malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type WinThruster_UPDATES.job. The name of the first found registry value referencing WinThruster_UPDATES.job is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to WinThruster_UPDATES.job, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of WinThruster_UPDATES.job and Associated Malware.