Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer


HijackThis automated log analyzer! Submit a log and you will receive ALL the information we have in our DB's on everything on your system INSTANTLY!


Click here to scan for dl.exe Related Errors and Optimize PC performance

What is it?
dl.exe is a file associated with the W32.Bagz@mm worm

What does it do?
W32.Bagz@mm is a mass-mailing worm that uses its own SMTP engine to send itself to email addresses gathered from the infected computer.

When W32.Bagz@mm is executed, it does the following:
  1. Creates the following copy of itself:

    %System% utorial.doc <spaces> .exe

    Note: %System% is a variable that refers to the System folder. By default this is C:WindowsSystem (Windows 95/98/Me), C:WinntSystem32 (Windows NT/2000), or C:WindowsSystem32 (Windows XP).
  2. Adds the value:

    "syslogin.exe" = "syslogin.exe"

    to the registry key:


    so that the worm is executed every time Windows starts.
  3. Creates the following files:
    • %System%dl.exe
    • %System%syslogin.exe
  4. Disables the Windows firewall.
  5. Downloads and executes remote files.
  6. Installs its own network driver to bypass local firewalls.

Fix dl.exe Errors: Free Scan

Recommended: Free PC Speed Test - what is slowing down your PC?

dl.exe is Spyware!

Startup DB Entries:
Nothing Found

Service DB Entries:
Lookout Citadel Server (LkCitadelServer) Related to Lookout_Citadel_Server From National Instruments Inc. Note: Located in C:WINDOWSsystem32
D-Link IP servellience Launcher (D-Link_ST3402) Related to D-link Software. Note: Located in C:Program FilesD-LinkIP surveillance


Every attempt has been made to ensure the information about dl.exe is accurate but alot of malware applications try to pose as valid applications. If it is something other than what was posted above please leave some feedback in the forum.
Printer Friendly

User Comments
Jon PArkesHow can i remove the virus dl.exe its driving me insane!!!
bablooi dont know how to remote
IanThis is also a process associated with Weather Watcher. It will appear for a short time while it downloads weather updates.
KamiWell i had the little F*#ker on my pc and it kept me from connecting to the internet it kept bring up a prompt window then giving me some here about the window. so i searched with the search tool and 3 entries for dl.exe came up i just deleted them and emptied the recycle bin went away no problems so i hope this works for u guys and never download anything from style xp websites cause thats where my problem started
umeshits blocking my whole work plz help me out
DemlarThe "Free" scane you guys gave a link to us for is a really good program, Yet it does nothing to help me -.- I have no credit card so i can't simply register, I need a free program that i can download and use to get rid of this "beatch" as you put it :P
nirzarrun>cmd>regedit click on find option in regedit type "dl.exe" search for it u will get some registries as result from that select one with the "value" as dl.exe double click it and delete the text "dl.ex" close regedit and restart...might help
nirzarrun>cmd>regedit click on find option in regedit type "dl.exe" search for it u will get some registries as result from that select one with the "value" as dl.exe double click it and delete the text "dl.ex" close regedit and restart...might help removed it for me totaly highly recommend it.
RelishWhat you can do manually: Using the information provided above, go to those areas and rename all instances for the files. Also, dump your cache files, remove the Restore point function, don't use Hibernate. After taking these precautions, go into the System (from control panel) configure your Swap File as zero and reboot, defragment, then reinstall the swap file. To get rid of all instances of the file....also check all your backups.
RelishBetter way is the DOS way. Rename the EXE to E1E or whatever. Take away its execution and it can't call itself again. Also look for WinSys.exe, WinSys2.exe. You can also add a letter or number after .exe (.exe2). Deleting the file won't help.
juanbartesearching and removing dl.exe with regedit or unlocker works fine, but next time you restart windows it will appear on a different directory, that means you will find the file AGAIN
Security Risks - Adware Spyware
sndconfg16.exe | salm.exe | isass.exe | se.dll | kazza.exe | backweb-7288971.exe | bridge.dll | wtoolsa.exe | tkbellexe.exe | dl.exe | newdot~1.dll | wupdt.exe | mwsoemon.exe | saie.exe | webrebates0.exe | bxxs5.dll | funny.exe | 180ax.exe | randreco.exe | mssearchnet.exe | service.exe | webrebates1.exe | saap.exe | sais.exe | wsup.exe | backweb-137903.exe | sed.exe | alcmtr.exe | wo.exe | ffisearch.exe | optimize.exe | iadhide4.dll | backweb-8876480.exe | cdaengine0400.dll | istsvc.exe | newdotnet6_38.dll | Fvprotect.exe | Winupdate.exe | java.exe | cmesys.exe |