uphlx.exe what is it ?

Hi can any one help me !
I am fixing a friend computer… broadband connection no firwall or antivirus software !!! yes it was riddled with Trojans and virus’s not to mention the spyware >:( any way ran avast and installed zone alarm and a spyware killer and things are a lot better. but in the task manager under processes I found uphlx.exe, did not recognize it so did a search on google …nothing very strange for a windows based exe file. any ideas what I should do with it . I was thinking of just deleting it , but then I thought it might be a new virus I ran avast on it, but it was ok.

tryed to right-click on this exe file to see the properties? ???

yes a bit more info
file size 17.2 k
size on disk 32.0k
full name uphlx.exe 02004b45pf
pf file
unknown application
location on disk C:\windows\system32
I tried to stop it using msconfig but it just re starts again, must be a line in the registry…

Better still have you googled it, a google search for ‘uphlx.exe’ without the quotes, returns no hits, which in itself to me is suspicious.

If you haven’t already got this software, download, install, update and run it.

  1. Ad-Aware
  2. Spybot Search and Destroy
  3. Spywareblaster
  4. Download HijackThis.zip - HiJackThis Tutorial

For an on-line scan of your Hijackthis log file try here http://hijackthis.de/index.php
Ignore any 023 reference to avast processes, this is a hiccup in the HJT 1.99.1 (especially missing file entry for avast), if you need any help with any of the analysis let us know.

Looks like one of those random filenames some forms of malware use.

Do a double check with these programs as anti-virus programs don’t catch all Trojans:

TDS-3 (Download the definitions file and move to the program folder.)

http://tds.diamondcs.com.au/

and TrojanHunter

http://www.trojanhunter.com/

Trend Micro Sysclean is also good for a virus double check. (Disable avast! temporarily while running it.)

http://uk.trendmicro-europe.com/enterprise/support/tsc.php
http://uk.trendmicro-europe.com/enterprise/support/pattern.php

It doesn’t need to be installed, just copied to the hard disk (with its definition file.)

With spyware it’s a quadruple check or more. Run the programs David mentioned plus Microsoft antiSpyware, Yahoo! Anti-Spy (really Pest Patrol), X-cleaner and the trial version of Webroot SpySweeper. They really do all find something different!

my search with Copernic Professional (category “filenames”) define “fp” like an extension used on ftp sharing files

Hi thank for the help I may just format and re install there is no extra program on the machine and very little in the way of files, but before I do I may just try a few of your suggestions
( I wish I didn’t like solving problems ) LOL