0
Today, Malwarebytes Anti-malware notified me that it had quarantined a malware, right after I logged in. It looked like this:
But, when I searched the file, hstart.exe, I didn't get a definitive answer, any advice? (Windows 8.1)
John
Posted 2016-07-02T12:00:03.443
Reputation: 131
3
Despite the fact there is not enough information to identify, what the file your asking about, actually is I can identify the actual Hidden Start application which is likely the file your asking about..
The trial version of Hidden Start was created on March 14 2013.
It is signed by its developer, Alexander Avdonin, on March 18th 2013.
The copyright is owned by NTWind Software.
If the file you are asking about isn't signed then you should delete the file. I can also confirm that C:\Windows\hstart\hstart.exeis not a standard directory or file, so the only reason it exists, is because you ran something that created it.
Ramhound
Posted 2016-07-02T12:00:03.443
Reputation: 28 517
You tell us. hstart.exe appears to be the executable for Hidden Start. If you installed, Hidden Start yourself, then you should ignore the conclusions of Malwarebytes and notify them of the false positive. In my own research, the Google results I found, were very definite. I can't post an answer, since I have zero information on the actual file, that exists on your computer.
– Ramhound – 2016-07-02T12:03:09.073Thanks, I think it is malware, since I didn't install Hidden Start. – John – 2016-07-02T12:10:20.750
Before you jump to that conclusion. Provide us actual information on the file. Since the file has not yet been move, right click on it, and submit the properties of the file itself. The developer of Hidden Start, has signed the application, so provide the
General,DetailsandDigital Securityproperty information on the actual file that exists on your system. – Ramhound – 2016-07-02T12:12:31.657