Member Avatar for regina11

I found this in my start menu in msconfig, it is labled hmpfcsnl and can't find anything about it. Was also getting an error message that msvcr71.dll was missing and when I stopped the hmpfcsnl from starting up the dll message stopped popping up.Can anyone help plz, thinkin I might have somethin more wrong then what I'm seein. Tks bunches

  • 2 Contributors
  • 1 Reply
  • 108 Views
  • 7 Hours Discussion Span
  • Latest Post Latest Post by Seten

Dani AI

Generated

The fact that the "msvcr71.dll missing" error stopped when you disabled the startup item strongly indicates that the unknown entry (hmpfcsnl) is the process trying to load that runtime. Random, short filenames in startup are commonly used by malware and by poorly packaged installers, so this should be treated as suspicious until proven otherwise.

Practical next steps:

  • Use Autoruns (Sysinternals) to see the exact startup entry, full file path, and any publisher information. Autoruns shows all Run keys, scheduled tasks and service autostarts in one place: Autoruns.
  • Locate the executable on disk and check its file properties (company name, description, digital signature). Files stored in %AppData%, %Temp% or with very recent creation dates and no valid signer are red flags.
  • Get the file hash (SHA-256) and check it on VirusTotal before deleting or uploading: VirusTotal. That tells whether multiple engines already flag it.

How to remove or repair safely:

  • Keep the entry disabled (good first move). If the file is malicious, boot to Safe Mode, delete the file, and remove the corresponding Run/Task/Service entry with Autoruns. Create a restore point or backup the registry first.
  • Do not download individual DLLs from random sites. If a legitimate program needs msvcr71.dll, reinstall that program or get official redistributables from the vendor.
  • After removal, run a full scan with an up-to-date antivirus and a second-opinion tool such as Malwarebytes: Malwarebytes.

If more help is wanted, include the full path shown by Autoruns and the file hash (SHA-256). gave the right instinct in disabling the item; confirming path, signature and a VirusTotal result is the best way to decide whether to delete or restore.

Member Avatar for Seten

I found this in my start menu in msconfig, it is thinkin I might have somethin more wrong then what I'm seein. Tks bunches

Look where the file should be. Block it, if nothing happens then let it blocked
The missing dll : link

I think, that the name is randomly generated, so google won't help. Look where it should be and "kill" it if unknown.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.