Reply
Wed 28 Jul, 2004 10:08 pm
I discovered this in my startup.
Should I delete it?
I can't find anythign legit on it, and it looks to me like possible malware.
Removing it from startup shouldn't hurt.
It could be a nasty masquerading as a legit app. I'd recommend you do a search for the actual file, and check version and vendor in the properties for the file. If you have an HP inkjet printer, hpdllhost.exe is gonna show up in your System32 folder. But whatever, it doesn't need to be in your startups, legitmate or not. At the very least, I'd remove the entry from the startup folder. If you're real suspicious of it, you might try renaming it to something like hpdllhost.exe.old, and then see if anything incovenient happens when you try to use your printer.
Pest Patrol said that this is a BHO (Browser Helper Object)
http://www.pestpatrol.com/PestInfo/u/unknown_bho.asp
Try to scan your PC with Ad-Aware and see the result.
A little further attention-payin' on my part leads me to conclude that in all likelihood it is a baddie. Though it resembles a legitimate HP Network Printer function, it appears not to be. Checkin' around various privacy/security forums and newsgroups turns up no defense of it. Apart from getting it out of Startups, I'd definitely at least rename it. If it put up a fight, I'd figure that'd be reason enough to take sterner measures.