Startup List
Startup Entry
Item Details
<< Return to the full Startup List
Startup Entry
This entry is classified as malware, spyware, adware, or other potentially unwanted software.
If the description states that it is malware, you should immediately run a trusted anti-virus and anti-spyware tool.
If the description states that it is malware, you should immediately run a trusted anti-virus and anti-spyware tool.
Item Details
| Name: | hack1x2 |
| Filename: | C:\WINDOWS\system32:hlpnod32.exe |
| Description: | A variant of the Backdoor.Bifrose Located in \%WINDIR%\system32:hlpnod32.exe Please note that this infection is an Alternate Data Stream file attached to the legitimate C:\Windows\System32 folder. Do not delete the C:\Windows\System32 folder as Windows will not operate correctly without it. To delete the Alternate Data Stream you should read this tutorial. Use SDFix under supervision. |
<< Return to the full Startup List
This is a Startup entry, not a running process - although it may be visible in Task Manager (CTRL+ALT+DEL) if it continues running after startup. Before ending a process via CTRL+ALT+DEL just because it is listed as an "X", please check whether it's actually set to start using MSCONFIG or another tool.
Some bad startup entries use the same names as common Windows processes, and it may be difficult to distinguish between them in Task Manager. If in doubt, seek advice before doing anything.
Some bad startup entries use the same names as common Windows processes, and it may be difficult to distinguish between them in Task Manager. If in doubt, seek advice before doing anything.