HLPL.EXE is Trojan Bebloh

June 19, 2012 by NightWatcher
Filed under: Malware 
: Solved!

Fix it immediately:

The file HLPL.EXE is malware related.
You must delete the file HLPL.EXE immediately!
Delete the file HLPL.EXE without delay!
Kill the process HLPL.EXE and remove HLPL.EXE from the Windows startup.

Malware Analysis of HLPL.EXE
Full path on a computer: %SysDir%\hlpl.exe

Detected by UnHackMe:

HLPL.EXE
Default location: %SysDir%\hlpl.exe

Removal Results: Success
Number of reboot: 1

HLPL.EXE is known as:

Trojan.Bebloh, Trojan.Bublik

HLPL.EXE hash:

  • MD5: d8e90ba5eb81fb019474726be6e4e381
How to quickly detect HLPL.EXE presence?

Registry:
  • HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\userinit.exe\Debugger: “hlpl.exe”
Files:
  • %SysDir%\hlpl.exe


  • Recommended: UnHackMe anti-rootkit and anti-malware

    Premium software: RegRun Security Suite (Good choice for removal and protection)

    Written by

    Malware Hunter.

    Tags: Bebloh, HLPL.EXE, Trojan

    Comments

    Tell me what you're thinking...
    and oh, if you want a pic to show with your comment, go get a gravatar!

    You must be logged in to post a comment.