Exterminate It! Antimalware

malpedia

Known threats:700,085 Last Update:March 01, 12:55

Testimonials

In recent weeks, my computer has been infected with malware and adware that just would not quit. A*G G*****t failed to remove them. S****t just froze up. Another anti-virus program just sat there and looked at me. So I purchased Exterminate It! This was the only anti-virus program I could find that would recognize and remove particularly pesky viruses from my computer. But even more impressive, they allow subscribers to send in descriptions of new viruses they encounter, and they will design a way to remove the virus and send out to you an update. I submitted the description of a virus to them, and a couple of days later they sent to me an update that cleanly removed it. If you run into viruses that just won't quit, give this anti-virus program a try. It's cheap and removes the viruses that the other anti-virus programs can't touch for some reason.

Source

Brother Mel

File: ~DF3212.tmp

Location of ~DF3212.tmp and Associated Malware

Check whether ~DF3212.tmp is present in the following locations:

Windows 2000, Windows XP, Windows Server 2003 specific ~DF3212.tmp file locations:

  • C:\Documents And Settings\USER_NAME\Local Settings\Temp\~DF3212.tmp

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific ~DF3212.tmp file locations:

  • C:\Users\USER_NAME\AppData\Local\Temp\~DF3212.tmp

If you find ~DF3212.tmp file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The ~DF3212.tmp file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of ~DF3212.tmp File^

File SizeFile Md5Last Seen
147456FE8FC5EE67F22FC8E4C1327EBCC4B71BDec 19, 2009
491522B0A1E43441DC2059291F8B78CE5E398Dec 22, 2009
1638403EB2C67DE85C0037C0795D694B9EB47Dec 24, 2009
4608E7E3398C4E68A34B86E81CA04EFBFD4CDec 26, 2009
16384AF060460F83F6029CADE054888F89CB4Dec 31, 2009
163846B2BC19E62E92D1E998F0ED2E88B7D52Jan 1, 2010
163843502535F09F663FC0DFF9166B7342D4CJan 5, 2010
16384101BF501368A3759C91F5A19487359F6Jan 7, 2010
16384230C6BF0922ED209671F6907EE926E4CJan 9, 2010
16384AF5A88D5B17C9FA867DFF378D56B46E2Jan 12, 2010
31129605033ED3423A316F5FD45320239652D0Jan 12, 2010
819203823D638088BE625FE9B7EB73B7CB8F9Jan 16, 2010
2560377200E214C1041AA81BF9D4F04F9B40Jan 28, 2010
163841565FA3C84D7C465056E2C769982DA4BFeb 13, 2010
2457601411EC637E6A4E1BEC25317045AA8D2FFeb 15, 2010
163845939CE0B206C19B10004B869377AABC6Feb 18, 2010
1638463D8B4DE2E012699E42CEEC21A6D2569Feb 26, 2010
196608EF2E0D18474B2151EF5876B1E89C2F1DMar 3, 2010
16384C97C0125165AE9126F037F6FB43AD3C5Mar 5, 2010
163848C1BCB126C7B080EC0EB296053BCDC4FMar 14, 2010
15368DD0C83F8BB8B700D98021D72B62B2BAMar 29, 2010
147456B954A1B18B4DE2CAA1E3E7CA29D86965Mar 31, 2010
327681A79041EE56F3D70AFE1710F6FC347F7Apr 13, 2010
16384DCCE66563B4A772CA8D4BC34F9BD66B5Apr 14, 2010
16384FB6B5369D7C61D2F84D5FA1039167ED2Apr 27, 2010
16384F35897FDF3FCF384979585B17B467333Apr 29, 2010
16384809B42A11A46A0D28A806E68A5FCB11AMay 2, 2010
16384083300DB5CCF2F851C2202648D8B0571May 12, 2010
32768A2340ACFE218750EE1F79667F9CB434BMay 21, 2010
3276896C9FEE106AAB88C0D7BD0DBADE82ED1May 24, 2010
819200BDF75213DCF7E51DC07FD2A59591350May 25, 2010
32768B930C5CB675DD37D7C19F19C4A5F9086May 31, 2010
16384ACE3DC13FC831AFAB8DA1BBEE04E1396Jun 1, 2010
1638411F7FD8B650039CA999B6705EA28A139Jun 7, 2010
73728403DFF833712666C5D3293245AC39B7BJun 17, 2010
163849C30FC6360396D08E44AF04F259C242DJun 18, 2010
163847638C86DBB451FF4C5135EC6277EBCB0Jun 18, 2010
311350487024661D9199600C018885DD9CF3B8Jun 18, 2010
26214432BDE1F1F20B9C21BC8996CE357236ECJun 20, 2010
327688545F14D4098C2F0A6465D3940226220Jun 21, 2010
16384DC155FF04E517EF419F469ED176246F9Jun 22, 2010
1638490F9E652698A3BFA63B2661D5F777CE8Jun 29, 2010
163846CBCE4947025B1A0A37FA016304C6FBEJul 1, 2010
16384AC967E3AB31D9722223F57A8420D34DCJul 9, 2010
16384629B1751ADDF5399FF38C5BBBE8F473DJul 18, 2010
98304BC45746CCED1883D2F9D5BED3A47BC27Jul 26, 2010
5734403871FE7F1A954B0A777B5D631EADC253Aug 16, 2010
163848C534688641F5815B1F321BEDD405554Aug 17, 2010
3276888F0D6F15F87FFA2242034E27C0E410DAug 23, 2010
753664AC75212B618465953E5527FB7461823ESep 1, 2010
32768B64887065E887B87401AA21C401B5063Sep 4, 2010
16384C0DCEBFAB3EBEC13C6BC89B904E1C82FSep 10, 2010
29491209ADD7086286F53D27A77D2B5059AB30Sep 10, 2010
1474561D94A2918E4C4EE1EEA981139C354736Sep 29, 2010
32768F0838D6F46A0193EC06EE92D74A8101FOct 10, 2010
49152EFEFB710AA43DE346AF08BE6026AFD3DOct 11, 2010
16384FBEE59D902FBA9D1F7A029247E948D08Oct 12, 2010
49152B1A239933019D13DBB3A548F3DCBE9D1Oct 15, 2010
491528C24AA9941ABE690E6C83D62732979D6Oct 16, 2010
868352D8622C1E88AB458A855ABD801CEFEA91Oct 24, 2010
245764DA9B27231A96FC919A8406C2BA0432FNov 2, 2010
2457609481EF9FED799C8B74596A05E3FCCB20Nov 2, 2010
983045F036A354FDC1D234693608502864440Nov 5, 2010
1638413708AF707A731F0BF7F7C6EE2FCCDAFDec 2, 2010
9830406135396E9A7B3585B3BE014ED4C2071Dec 3, 2010
163842122B7CF4D5E144106CC382C968A4D30Dec 3, 2010
32768BB7DF04E1B0A2570657527A7E108AE23Dec 7, 2010
32768E568D8EBC6BC9C4E048B4C104B74ADD3Dec 13, 2010
32768A65762A5FE3B8CF4FE3E641C6BB2A34ADec 17, 2010
14745661A90DA8F04131A0918F6A74E974AFDCDec 21, 2010
163843B1341D2C92F9BF46811B87A1CCB90E4Dec 29, 2010
424965E7A054400F50FFC52086505AB060ED4Jan 20, 2011
32768707E1AA1ED5548C9912639B6C05E49DCJan 22, 2011
98304BE3DED3588F5AFD95ABCA1E4E0DE6DC0Jan 23, 2011
163840FECEA66B45ACF81DC28453F969E0CD5Jan 26, 2011
16384317F2DDA9A8CFFB6514C476C074ABBE4Jan 26, 2011
20480E91E88A8FDB37C93B2D05C6E2507D916Jan 28, 2011
16384A2C62502A3CD1CDF16484DBB2F32E3D5Jan 31, 2011
3276871C998D922BAFEF282AEFE28E3134193Jan 31, 2011
491521E6813C9A43A37E5B51B9C42E0F9D1B6Feb 4, 2011
163845D6181302BE01DCCEFB75BF6FB1C9EB9Feb 7, 2011
16384874BE37F7B679730BA19BA27340EA9D4Feb 21, 2011
16384CAEEA2E777CD9EE5B076658F591A6C6CFeb 28, 2011
491525741C50015EC33EDC932EFBCF5540FBBMar 3, 2011
163842EF497FA41ACB4825E4E45DA6E488EE6Mar 13, 2011
16384D6B5A24C430386AAB41BDA8189EE5A81Mar 17, 2011
180224D55CE137B937D1A50BCCC3B3B691262DMar 31, 2011
32768DBEFC2503E887DF0E7B7E434975EC958Apr 9, 2011
655362966CD6E43D6FC0BF1043A59A36AEDDFApr 10, 2011
49152E2C29F2F91AD8F5845FB11AEF0356533Apr 15, 2011
737287739068B5766D03A618785DD008DD61FMay 1, 2011
16384530AB4B7AF4E5367329A96B0AD551176May 4, 2011
1638442C6F0685D4259A55AED1E84D9A24A41May 6, 2011
16384E16FE535ECB176192C4D8C46BB43BAA0May 6, 2011
16384344A839CE78EEF6BA01BF4277AB22DF5May 14, 2011
16384237B50302E3AD869F4B9FEC1D984A735May 28, 2011
983044D2421D65295826789F72B6FD123A9A5Jun 8, 2011
32768C162CE1C97705C75B3635D0884F68FFDJul 1, 2011
16384211E9372EB0E2D24D495BC8A8DBFD97FJul 5, 2011
163840D86612B7B33E1EFF1B04A9A176B21099Jul 8, 2011
16384FF601ECCF684705306587BA4FB1541E5Jul 17, 2011
163845B2C37A103E39F1F25F3ADDBB5FE539FJul 20, 2011
49152F4F35D60B3CC18AAA6D8D92F0CD3708AJul 30, 2011
3276871EA25D794EC9199549D62B5FE652FA1Aug 31, 2011
114688F03EFC12B95B90382A35210E23CACEB4Sep 7, 2011
1638486AD596AF3DAFFFA1A3532178D167921Sep 28, 2011
32768D83EDAEC07B1E870AFA3DA03D9E8E2E7Oct 5, 2011
32768822E6A3C6F15A3842C6542DD4B27F277Oct 9, 2011
286720C3947352F822544B73D318645732087Oct 13, 2011
2129925C4C278FDEB48653F5948B3B5BF5C3E3Oct 16, 2011
491526641C05065DC05A8418C649477E7905BOct 21, 2011
114688E03828EA055389EB01879FEC1D8313ADOct 21, 2011
1638403C30E5EE9CD6D600AB4BDB6AA5FCE8DOct 24, 2011
163842A2A2732F1EC1162ACFB48174827CC8AOct 27, 2011
16384850982FE535C23E84061637311413508Nov 7, 2011
1638480F6B114EEDA5D3FEB495C06D86D8200Nov 18, 2011
16384E976E5330D7C31BD95AC9E450BEF4545Nov 21, 2011
81920FF5DD4A28ECDFC5FE5061499704E3608Dec 19, 2011
32768F82861956C4D643CF89D46038A13638CJan 11, 2012
3113500B7CBD0B9C6F90CEE61613C2CCA80CA7Jan 20, 2012
32768DC4B1151BCB30B17C9C5ACC0825152B8Feb 3, 2012
32768147BB6E8A19700275EF4385C7F41D449Feb 22, 2012
491528EFDAF48E09B52EFBF7B05776A4172A3Mar 23, 2012
16384F601575776C27C3D38A480BCDBF77488Apr 3, 2012
3113508D8424E040066A48395211AB40A4C663Apr 5, 2012
1638423342FC5A02BFB231F8C73CCFDAE0473Apr 19, 2012
65536D7C33460EB2F40E91BA0CEE96679BABCApr 23, 2012
61440C62C4D52F621A30CCFC45D72A9A425F6May 5, 2012
16384E9A4DA637FED9A1D6D12B0B978A5097CMay 10, 2012
16384BFE0BD6748B8C17671206905A9CC9770Jul 21, 2012
2293767C9C7E3A6DEF365CE1451B2A6B225B5DAug 7, 2012
311350DD74A4A4E05B55D2FB591DA3C8FED1C3Aug 13, 2012
16384E2CBC4010E7F454900986D2B24C4D553Aug 29, 2012
153672F5C05B7EA8DD6059BF59F50B22DF33Sep 20, 2012
32768188865FC49677C8E630160E6B49F272BOct 5, 2012
32768B82CB5A23083D6078EBC7E219C6FD2FEOct 8, 2012
163848938357840E7C782164EB572C4C32CA9Oct 27, 2012
163845190D858C7206F87E60702933B4A0104Nov 20, 2012
16384EF4C595737D85BF4442ABEBD9DB0F17AJan 30, 2013
16384679672A5004E0AF50529F33DB5469699Feb 17, 2013
311350C4B022F60F364010DC4958D2492BAAF9May 13, 2013
40960092C9E1C5E75D14DA53CA387F31E754CFMay 17, 2013
512BF619EAC0CDF3F68D496EA9344137E8BMay 21, 2013
16384D5A5D8AE6D41DEE190F46AADCF2DA5B7Oct 16, 2013
327687D4D05D2F096C39ADCB01B44DC3E9BCDNov 23, 2013
327688BBFAA310E0376A64C0016B85F899F1BFeb 15, 2014
16384CE338FE6899778AACFC28414F2D9498BFeb 25, 2014
344064FA5067F0ADF20959204E1F6ED88A763DMar 14, 2014
163843424ED1CAAEBB4E67CE8FB36AC6B1EFAJul 29, 2014
16384CF3B2E1B1813592B70313081C3C08944Oct 21, 2014
20480DAA100DF6E6711906B61C9AB5AA16032Apr 16, 2015
16384963FBA8BC80A5C2F572CF85561AD5271Aug 3, 2015
3276851CD84872367D8AB24B9F58F166724E4Jul 2, 2016
16384DD2375E7FE6C38894EFEFA03A81B74D9Jul 10, 2016
16384B9D5B6F636E4C096775098A115100F2DJan 16, 2017

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove ~DF3212.tmp^

  1. To enable deleting the ~DF3212.tmp file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select ~DF3212.tmp and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of ~DF3212.tmp and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of ~DF3212.tmp and Associated Malware.
  6. Notes:

    • The deletion of ~DF3212.tmp will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of ~DF3212.tmp will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a ~DF3212.tmp malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type ~DF3212.tmp. The name of the first found registry value referencing ~DF3212.tmp is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to ~DF3212.tmp, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of ~DF3212.tmp and Associated Malware.