Exterminate It! Antimalware

malpedia

Known threats:699,443 Last Update:July 17, 22:52

Testimonials

In recent weeks, my computer has been infected with malware and adware that just would not quit. A*G G*****t failed to remove them. S****t just froze up. Another anti-virus program just sat there and looked at me. So I purchased Exterminate It! This was the only anti-virus program I could find that would recognize and remove particularly pesky viruses from my computer. But even more impressive, they allow subscribers to send in descriptions of new viruses they encounter, and they will design a way to remove the virus and send out to you an update. I submitted the description of a virus to them, and a couple of days later they sent to me an update that cleanly removed it. If you run into viruses that just won't quit, give this anti-virus program a try. It's cheap and removes the viruses that the other anti-virus programs can't touch for some reason.

Source

Brother Mel

File: hxiwlgpm.dat

Location of hxiwlgpm.dat and Associated Malware

Check whether hxiwlgpm.dat is present in the following locations:

hxiwlgpm.dat file locations that are Windows version independent:

  • C:\Windows\System32\hxiwlgpm.dat

If you find hxiwlgpm.dat file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The hxiwlgpm.dat file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of hxiwlgpm.dat File^

File SizeFile Md5Last Seen
40966D47069C07EB06CE5B617EF2E47ECE7BDec 17, 2009
40968F46D8A23147B04A193B90788C565F4CDec 17, 2009
4096479E3EAE26A2CCC2D5EEE6173958E9F9Dec 19, 2009
40962FB6DC6AE856AB1E78C2255D3D3AEF97Dec 21, 2009
40967B0AB4AC3DBA42351F886F7D7C46B672Jan 5, 2010
40962367AF013089F69D7ADA5A93517B8D22Jan 12, 2010
40968BFC0CDDB4CB425ED1B956A0842842EAJan 16, 2010
40963CE7B05543D6803B6DC025E91E685F70Jan 16, 2010
4096E26257B975BDE6F04E62D138A6ACD870Jan 23, 2010
4096A1BA5C11605C334AEA02CA41665F2755Feb 9, 2010
40965829968652D443FBBE5544A281B6F137Feb 13, 2010
4096195AAB0C16B68364B04683B4D2B410D2Feb 15, 2010
409651CAE03A8ADEE8B7AD784FAEB162F8A9Feb 18, 2010
4096C9FF971F110D2993A4A716C5378D9D91Mar 17, 2010
40969564DC4490BF515D86AEF7A63D7C4F0DMar 20, 2010
40962D946AA68F0FBBB6F79C68EF650B8A01Mar 25, 2010
4096BCB92E1BA84CFEBC0B98AD4101410EE4Apr 5, 2010
40962ECE98EDCADF4F0997298E9B2D8C5D65Apr 9, 2010
409680E1FE50D0CA62A356668C22C2030935Apr 15, 2010
40966235D5D2146300992C64EFC0455638E0Apr 23, 2010
40963B5F0BA533064A392BB1314ADD9AB053Apr 30, 2010
4096BD385C5D5E0F571957B8F43524CDD9FCMay 11, 2010
4096BED91E76E8A87BDBFCF509CAC299DE02May 29, 2010
4096337CEFB02239453AADDD0181AA00B52EMay 30, 2010
409690FCDDF9B02E61645174FBD2A6A635BAJun 3, 2010
4096AC7FDD7B20A4B6759CA859D93492DBD5Jun 7, 2010
40964E9B857EEB5B2447496A704D87B6322CJun 12, 2010
409636191C7726960CFD8CD4A8FA0EC2BCDFJun 15, 2010
40962847C30CA252CED5842DE0EE6AFA5FA0Jun 29, 2010
409689C529B657EBEEE875025E0368C42534Jul 13, 2010
4096B3597669E41A96B0A910C04A8F630EFBJul 14, 2010
409651209D20873A7AEB26C1C320E1E3CDFCJul 16, 2010
4096DD9F550444B1652EE5C3810C056FDBADJul 22, 2010
4096B4EACC5B06AB375ADC21FD1BE633B778Jul 31, 2010
40960338F7539D026755A9CCD379119FD7F6Aug 3, 2010
4096562BA3E916A0A5D484D823E084205102Aug 3, 2010
409638A00E0E0E29C42332F78B83C6AA4B60Aug 17, 2010
4096DB64839B7E9963B6FD4FF3B4A5AEBB31Aug 18, 2010
4096AE3CE741C442E36F38CD8CD185E110E6Aug 20, 2010
40965274D56741B0BC7CE3FC2F0103AF44D6Aug 23, 2010
409635F623A421EDC783796E2DA9EB589A80Sep 7, 2010
409613E56DB30A87BA5B03722178D4BE89D5Sep 7, 2010
409658CF30EF2B654A1A5A32040B8513BB0DSep 15, 2010
409636F433C59BADB92F3ACF4ACC9199B33FSep 30, 2010
4096D056CCCD66F2EA65828F5657495D19B4Oct 4, 2010
4096E84E19BA8ADE62966F64616D65D6B749Oct 18, 2010
4096DBBAD369649D1CE1DC3233AD9FC049DCOct 24, 2010
4096F309C3F024D63A6D9AD9C931A99BBE1EOct 27, 2010
4096F327C9D64AD6DE7F4E60D079A87A7EEDOct 31, 2010
409676FE974F3AF7C8755B6C9472FE0766A8Nov 7, 2010
40968F7FFC9DEE06C2150A32D21A68ECA14ENov 17, 2010
4096985CB3F95F6240A5588BF21DD5148C6ENov 28, 2010
40960848F3BDAD7BB6B0F77A9B1218CEDEC1Dec 9, 2010
4096DCBDE21CE0694423A11AB8E0C76A4D82Dec 23, 2010
40962449ECF38F1A756117388397FB1A1FCDDec 28, 2010
40963A6C7213728C5C450A60B207C84405BEJan 3, 2011
409625AAAF587BCD306E4F643BD45D22DC2EJan 12, 2011
4096FB0C00F4EE9F29764F7741070CD63026Jan 24, 2011
40967A74D796022B568B651F85DDAA2B750EFeb 6, 2011
409616DDA850A4713F47FA5C384E39E7392EApr 18, 2011
409614BC5D84DBBD2F82DB096B9D51901515Apr 22, 2011
409668E039848953D79254EA9A05A7C968BAApr 25, 2011
40962B057B1742988EDC1A01ED9F205E5FEDMay 14, 2011
4096DA660BFEB543E3FE09675C70AD21665EJun 13, 2011
40969A14CF098EDA8EA41B9AF99FF675486BJul 2, 2011
4096A2E8D43E497B8764EE855AF29C77B696Jul 11, 2011
40962279566D2F18B96EB32ED5648E8A1673Jul 16, 2011
4096019307D0C33FAEFCA89AA8947AEE5543Jul 17, 2011
409689DD72CB5AF8207BD7CC29EDEF7E5177Jul 25, 2011
4096CAA7DADEEF878DF76D807C5A6953A793Sep 30, 2011
4096C68C1B702566FD77FABADB8DB5214620Dec 8, 2011
40965F09A814145FDF59145512D38EC8BC8FJan 13, 2012
4096DB1B97CDCE6B3AF8134019AE487E3B83Feb 26, 2012
4096FBF25C88D0BD26D38A74961420F974C2Mar 30, 2012
4096DC0E87DD792F6E4EF01BE081C947DB99Oct 31, 2012
40965814526D611FA0B17622022CB6A10986Mar 26, 2013
409603C0E273573ECB16BFE2CFDA78367674Jan 27, 2014
409689C8B93CE395FDFB353543A6FE2BD78DNov 22, 2016
409668B85494AE84A32CA880FA0D443B1589Jun 27, 2010
409658999A0BB3746592F0711A1EC78B2F50Aug 4, 2010
40960ED21323A8DEDFBF3244A3A4CE544D46Aug 11, 2010
4096635F98A7041F5B7CA49713DDA54646EFSep 11, 2010
4096D13B41578C7EC583F5F38656DFD4BB77Nov 28, 2010
4096B429740C3C2685B576EA287401584F02Dec 1, 2010
4096A2DAED78903749066C8F63367A24C666Feb 13, 2011
4096A8854A29B3AE9E5595C43FE8BFC9881CMay 5, 2011
40968F6F242DAB192B8FD289AC6C7EFDCDDAAug 12, 2011
4096DA68FCC2A2DDE15F1844BA1C09C006FEOct 4, 2011
40961CA9D74053634564344C804F0852F564Dec 18, 2011
409638ED9E89B8A094275197002ADBA9ABBFDec 26, 2011
409611321836C21A31A2311C07A6813FDEC6Dec 28, 2011
4096B98E7CEDB77281A4D0482F5288E379B6Feb 3, 2012
4096271267362E73D09BB2A39E3B879BD2E6Jun 6, 2012
409697CDEC2C8B3A576D1B66C9A45348FCCFNov 13, 2012
409617CC242A105320C5ADE696E5330CA0C3Dec 27, 2012
4096D77D7565026D4BC643F1EB2E507EEB71Mar 8, 2013
40969AC9689971C0CE905E89F9751703FF34Jan 26, 2014
40963EDBBC3B32FB96AAB9044B92078F7C55Feb 8, 2014
40968F9F5A324FA4E74716A4CA6E15F309D1May 7, 2014

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove hxiwlgpm.dat^

  1. To enable deleting the hxiwlgpm.dat file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select hxiwlgpm.dat and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of hxiwlgpm.dat and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of hxiwlgpm.dat and Associated Malware.
  6. Notes:

    • The deletion of hxiwlgpm.dat will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of hxiwlgpm.dat will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a hxiwlgpm.dat malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type hxiwlgpm.dat. The name of the first found registry value referencing hxiwlgpm.dat is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to hxiwlgpm.dat, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of hxiwlgpm.dat and Associated Malware.