What is g2mdlhlpx.exe?

The original g2mdlhlpx.exe is a part of Citrix GoToMeeting and GoToWebinar. Malware creators have copied this filename in an attempt to "hide" from PC owners and system administrators.

If you have Citrix GoToMeeting or GoToWebinar installed, don't worry about this process. If you don't have either of these Citrix products installed on your PC, you will have to clean this malware from your PC.

The legitimate g2mdlhlpx.exe executable installs in the C:\Documents and Settings\%user account%\ folder. Rogue versions of this executable are sometimes found in other locations, such as C:\WINDOWS\java\g2mdlhlpx.exe.

The rogue g2mdlhlpx.exe process is classified as a trojan virus, while there are versions of this file proven as spyware applications or malware processes. It has a size that never exceeds 60kbytes. This threat is installed unknowingly into a user's PC through the internet, particularly through anti-spyware pop-up advertisements.

It has been reported that the file g2mdlhlpx.exe can also cause damage on your Windows configuration, particularly with regards to the boot up and config processes of files. Users who have encountered this threat reported that their browsers started redirecting them to certain network addresses. This led to the total corruption of most of these infected computers. This process also appears to have the capability to disable windows firewall and automatic updates. The Windows OS versions that can be infected by this malicious file include: