What is upxp64.dll?

Page 1 of 2 12 LastLast

  1. Posts : 41
    Win 7 x64 Ultimate
       #1

    What is upxp64.dll?


    Hi,
    Found this strange upxp64.dll as an autostart item in my Win 7 64-bit Ultimate.

    Making a search for that file throughout my system, it's location is C:\Users\Uffe\AppData\Local\upxp64\upxp64.dll. There are no other files in that folder upxp64. Looking at file details in Properties, File description, File version, Product name, Product version, Copyright and Language are empty. The only displayed file details are Size 84.0 KB and Date modified 27.2.2010 13:50.

    The only occurance in the registry is:
    [HKEY_USERS\S-1-5-21-791918989-287858860-1136523334-1001\Software\Microsoft\Windows\CurrentVersion\Run-]
    "upxp64"="rundll32.exe \"C:\\Users\\Uffe\\AppData\\Local\\upxp64\\upxp64.dll\", DllInit"

    I searched the web with Google + several other search engines - nothing came up, zilch, nada.
    My security tool (NIS 2010) and Malwarebytes' Anti-Malware don't object to the file.

    I'm wondering what that file might be related to. I find no reason, and it makes me uneasy not to understand & know the purpose of that startup item.

    I now disabled this Autostart item, and I haven't noticed any change - system running smoothly.:)

    Can anybody shed some light on this? I'm tempted to delete that folder.

    Cheers Uffe
      My Computer


  2. Posts : 8,608
    Windows 7 Ultimate 32bit SP1
       #2

    Do you play any online games?
      My Computer


  3. Posts : 1,506
    W7 Ult. x64 | OS X
       #3

    Never heard of it, you can try this program, but I doubt it'll know either:

    ProcessLibrary.com - The online resource for process information!
      My Computer


  4. Posts : 1,519
    El Capitan / Windows 10
       #4

    ustahl said:
    Hi,
    Found this strange upxp64.dll as an autostart item in my Win 7 64-bit Ultimate.

    Making a search for that file throughout my system, it's location is C:\Users\Uffe\AppData\Local\upxp64\upxp64.dll. There are no other files in that folder upxp64. Looking at file details in Properties, File description, File version, Product name, Product version, Copyright and Language are empty. The only displayed file details are Size 84.0 KB and Date modified 27.2.2010 13:50.

    The only occurance in the registry is:
    [HKEY_USERS\S-1-5-21-791918989-287858860-1136523334-1001\Software\Microsoft\Windows\CurrentVersion\Run-]
    "upxp64"="rundll32.exe \"C:\\Users\\Uffe\\AppData\\Local\\upxp64\\upxp64.dll\", DllInit"

    I searched the web with Google + several other search engines - nothing came up, zilch, nada.
    My security tool (NIS 2010) and Malwarebytes' Anti-Malware don't object to the file.

    I'm wondering what that file might be related to. I find no reason, and it makes me uneasy not to understand & know the purpose of that startup item.

    I now disabled this Autostart item, and I haven't noticed any change - system running smoothly.:)

    Can anybody shed some light on this? I'm tempted to delete that folder.

    Cheers Uffe
    Zip it and attach it and I'll extract the strings from it.
      My Computer


  5. Posts : 41
    Win 7 x64 Ultimate
    Thread Starter
       #5

    Jacee said:
    Do you play any online games?
    No, I only game offline, but some games check with a server for update, DRM etc.

    Cheers Uffe
      My Computer


  6. Posts : 41
    Win 7 x64 Ultimate
    Thread Starter
       #6

    baarod said:
    Zip it and attach it and I'll extract the strings from it.
    You mean I PM you with file attached? How do I do that?

    Cheers Uffe
      My Computer


  7. Posts : 1,506
    W7 Ult. x64 | OS X
       #7

    Just place it in a zip file and attach it to a post using the "Manage Attachments" button in a full reply. (Hit Advanced)
      My Computer


  8. Posts : 41
    Win 7 x64 Ultimate
    Thread Starter
       #8

    File attached


    Hope I succeeded in my 1st attempt to upload a file to the forum.

    Thanks for the advice.

    Cheers Uffe
      My Computer


  9. Posts : 41
    Win 7 x64 Ultimate
    Thread Starter
       #9

    notsograymatter said:
    Never heard of it, you can try this program, but I doubt it'll know either:
    ProcessLibrary.com - The online resource for process information!
    You were right, it said:
    Oooops... Process Not Found

    Thanks for trying, though.

    Cheers Uffe
      My Computer


  10. Posts : 1,519
    El Capitan / Windows 10
       #10

    No discernible strings but from the imports list it looks like a graphics utility of some kind. Maybe a screen grabber? Here's the raw imports:

    Code:
    GetProcessHeap  ˆVirtualQuery  RLoadLibraryA  lstrcatW  #InitializeCriticalSection }GetModuleFileNameA  QLeaveCriticalSection  T CreateFileMappingA  ˜ EnterCriticalSection  f CreateProcessA  *GetProcAddress  qGetLastError  †VirtualProtect  HeapFree  GetSystemTimeAsFileTime  HeapValidate  C CopyFileA qUnmapViewOfFile lstrlenA  GetModuleHandleA  GetSystemDirectoryA GetThreadPriority  FindFirstChangeNotificationA  *ReadConsoleInputW ? ConvertDefaultLocale  GetVersionExW GetVersionExA ŽGetNumberFormatA  GlobalAddAtomA  
    SetDefaultCommConfigW [SystemTimeToFileTime  GetTempPathA  ' CallNamedPipeA   FindFirstChangeNotificationW  GlobalDeleteAtom  vGetLogicalDriveStringsA RtlUnwind lstrcmpiW ?IsValidCodePage GetThreadLocale “ DuplicateHandle HeapUnlock   EnumSystemLocalesA  GlobalFlags ~GetModuleFileNameW   EnumResourceNamesW  GetProfileIntW  
     AssignProcessToJobObject   GetAtomNameW  SetEnvironmentVariableA ReleaseSemaphore  NSetVolumeLabelW eLockResource  |VerLanguageNameW  [LocalFlags  GetSystemPowerStatus  \LocalFree ‰VirtualQueryEx  &InterlockedCompareExchange  RegisterWaitForSingleObjectEx GetTempFileNameW  ‘PeekNamedPipe HeapCreate  k CreateSemaphoreA  @IsValidLanguageGroup  GetProcessVersion 7GetConsoleScreenBufferInfo   ExpandEnvironmentStringsW F CopyFileW GlobalReAlloc  FreeConsole SetEndOfFile  SetEnvironmentVariableW lstrcpyA  4SetProcessShutdownParameters  HeapDestroy aLocalSize , CancelWaitableTimer DLCMapStringA  ‰OpenSemaphoreW  5IsBadStringPtrW ^GetFileAttributesA  XSuspendThread USizeofResource  GetWindowsDirectoryA  ™WriteConsoleA  EnumUILanguagesW   FindFirstVolumeMountPointW  E CopyFileExW 5GetConsoleOutputCP  GetStringTypeW  $SetHandleCount  œPurgeComm  FillConsoleOutputCharacterW GGetDateFormatA  GetCommandLineW  FindClose GlobalMemoryStatus  SetConsoleCtrlHandler GetSystemWow64DirectoryW  GetTickCount  3GetConsoleMode  GetBinaryTypeA  GetProfileIntA  lstrcpynW  EscapeCommFunction   FileTimeToDosDateTime ZSwitchToThread   FlushViewOfFile RemoveDirectoryW  †OpenProcess SetFilePointerEx  WLoadResource  {GetLongPathNameW  €VerifyVersionInfoW  `GetFileAttributesExW  6IsBadWritePtr XLocalAlloc  VirtualAlloc  ResetEvent  QueueUserWorkItem CIsWow64Process   GetAtomNameA  PeekConsoleInputA  FindNextVolumeW ReadConsoleInputA _TerminateThread 2 ClearCommError  ]LocalHandle ‘WaitForSingleObjectEx pUnlockFileEx  * CancelIo  …OpenMutexW  GetProcessAffinityMask  c CreateNamedPipeW  4IsBadStringPtrA KERNEL32.dll  d CoTaskMemAlloc  i CoUninitialize  e CoTaskMemFree /StgOpenStorageEx   IIDFromString l CoUnmarshalInterface  OleSetContainedObject  CreatePointerMoniker  " CoGetClassObject  y CreateDataCache ~ CreateItemMoniker D CoLockObjectExternal   OleCreateLinkToFile +StgIsStorageILockBytes  € CreateOleAdviseHolder } CreateILockBytesOnHGlobal 6StringFromIID < CoInitializeEx  ’ GetHGlobalFromStream  W CoReleaseMarshalData  ` CoSetProxyBlanket  OleCreateLink [ CoRevertToSelf  OleUninitialize  CoDisconnectObject   OleRegEnumVerbs  OleSaveToStream - CoGetInterfaceAndReleaseStream   OleCreateLinkFromData 
    PropVariantCopy / CoGetMarshalSizeMax ole32.dll ŠSetWindowsHookExA :GetMessageA UnhookWindowsHookEx KillTimer  DispatchMessageA  zSetTimer  )ReleaseCapture  V CreateDialogParamW  pSetScrollRange  wvsprintfA  SetWindowLongW  œTabbedTextOutW  HGetProcessWindowStation 0GetMenuDefaultItem  ’ShowWindow   DrawTextW  DispatchMessageW   AdjustWindowRectEx   DeferWindowPos   EnableMenuItem   EnumDesktopsW MessageBoxIndirectA fSetParent DSetCapture  mSetRectEmpty  MessageBoxIndirectW  EndDeferWindowPos Z CreateIconIndirect  bSetMenuItemInfoA  GetInputState =GetMessageTime  L CreateAcceleratorTableA WinHelpW   CallWindowProcA Ž DefWindowProcA   DrawEdge  M CreateAcceleratorTableW dGetUpdateRect < ChildWindowFromPoint  _SetMenuDefaultItem  WindowFromDC  OemToCharA  ŽShowCursor  N CreateCaret LoadMenuA @ ClientToScreen  mGetWindowInfo UnregisterClassW  wsprintfW GetDlgItem   EnableScrollBar MonitorFromRect  DrawFocusRect  GetCaretBlinkTime UpdateWindow  ŸToAscii *UnhookWindowsHook a CreateWindowExW aSetMenuItemBitmaps  LGetQueueStatus  KGetPropW  MapDialogRect MoveWindow  uGetWindowRgn  PtInRect  3ScrollDC  LoadCursorW  BringWindowToTop   EnableWindow  žIsChild / CharPrevW hSetProcessWindowStation TGetScrollBarInfo  OpenInputDesktop  2GetMenuItemCount  : CheckMenuRadioItem  ModifyMenuW ‹ DefMDIChildProcA  GGetProcessDefaultLayout ™SystemParametersInfoA 
     BeginPaint   DrawTextExW LoadStringA OpenWindowStationW   DrawStateA  MsgWaitForMultipleObjectsEx @SendMessageW  $ ChangeMenuA MonitorFromWindow YGetSubMenu   DefWindowProcW  @GetMonitorInfoW TranslateAcceleratorW MapVirtualKeyW   GetAsyncKeyState  ˆ DefDlgProcW ;SendMessageA  nGetWindowLongA  CSetActiveWindow   ChangeDisplaySettingsA  .ReplyMessage  kSetPropW  IsDialogMessageW  ‰ DefFrameProcA †SetWindowTextA  J CopyRect  UGetScrollInfo nSetScrollInfo ] CreateMenu  ›TabbedTextOutA  0ReuseDDElParam  ?SendMessageTimeoutW +RemoveMenu  SetWindowContextHelpId  MessageBoxExW ShowCaret PeekMessageW   AdjustWindowRect   CallWindowProcW  EnumDisplaySettingsW  LoadAcceleratorsW O CreateCursor  — DestroyMenu ( CharLowerBuffW  IsZoomed  ^ CreatePopupMenu ModifyMenuA ySetThreadDesktop  MonitorFromPoint  'RegisterWindowMessageA  USER32.dll   CommandLineToArgvW  # DragQueryFileW   SHGetSettings v SHAppBarMessage - ExtractIconExA   SHGetDesktopFolder  s SHAddToRecentDocs  SHGetFolderPathAndSubDirW ShellExecuteW * SHFormatDrive 
    ShellExecuteExW  SHSetLocalizedName  Ž SHCreateShellItem ShellAboutA y SHBrowseForFolderA   SHGetSpecialFolderLocation  SHELL32.dll 0SetPaletteEntries pGetEnhMetaFileA PolylineTo  E CreatePalette SetDCBrushColor 1 CreateDIBPatternBrushPt  FlattenPath  ExtTextOutA FStartDocW jGetDIBits 4 CreateDiscardableBitmap GetPixelFormat  –GetObjectType ” Ellipse ScaleViewportExtEx  JGetBitmapBits ˜GetOutlineTextMetricsA  1SetPixel  3SetPixelV  EnumFontsA  PGetBrushOrgEx ModifyWorldTransform  aGetClipRgn  PolyDraw  & CopyMetaFileW 2 CreateDIBSection  4SetPolyFillMode PTranslateCharsetInfo   AddFontResourceW  yGetFontData %SetICMMode  :SetTextAlign  =SetTextJustification  PolyBezier   FillRgn F CreatePatternBrush  <SetTextColor  % CopyMetaFileA  ExtEscape GetRgnBox Polygon  DescribePixelFormat QGetCharABCWidthsA # CopyEnhMetaFileA  : CreateFontIndirectA PolyBezierTo   CloseMetaFile 9 CreateFontA MSwapBuffers -SetMetaFileBitsEx Ž DeleteMetaFile  ”GetNearestPaletteIndex  ŸGetROP2 ™ EndPath  EnumFontFamiliesExA gGetDCOrgEx  MGetBkMode N CreateScalableFontResourceA MoveToEx  /SetMiterLimit “GetNearestColor *GetRandomRgn  – EndDoc   EnumMetaFile  BSetWindowExtEx  - CreateCompatibleDC  €GetGlyphOutlineA  ]GetCharWidthW PolyPolygon Polyline  J CreatePolygonRgn  ŽGetMetaFileA  GetTextFaceW  SetBitmapBits PolyPolyline  KGetBitmapDimensionEx  ? CreateHalftonePalette GetTextExtentPoint32A OffsetWindowOrgEx SetBkMode / CreateDCW IntersectClipRect EStartDocA GDI32.dll         EˆK    )          ) ) ) h”  _H  ) *    uyvwahyw.dll DllInit DllInstall
      My Computer


 
Page 1 of 2 12 LastLast

Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 23:53.
Find Us