[filename.info logo]
[cn hh.exe][de hh.exe][es hh.exe][fr hh.exe][gb hh.exe][it hh.exe][jp hh.exe][kr hh.exe][nl hh.exe][pt hh.exe][ru hh.exe][us hh.exe]
 

hh.exe overview

The file hh.exe is contained in the following software
  • Windows XP Home Edition, Deutsch   More information
    Version: 5.2.3644.0
    Filedate: 2002-11-09 13:47:56
    Filesize: 10.752 bytes
    Filepath: C:\WINDOWS\system32\dllcache\hh.exe
    Show hh.exe details
  • Windows XP Home Edition, Deutsch   More information
    Version: 5.2.3644.0
    Filedate: 2002-08-29 14:00:00
    Filesize: 10.752 bytes
    Filepath: C:\WINDOWS\$NtUninstallKB826939$\hh.exe
    Show hh.exe details

hh.exe was found in the following malware reports:

W32.Dexec

Technical details
...the following Windows files: C:\%Windir%hh.exe is copied as C:\%Windir%Fontsh.exe....
...Copies itself as: C:\%Windir%hh.exe and sets its attribute to Hidden....
Removal instructions
...Restore these files: C:\%Windir%Fontshh.exe to C:\%Windir%hh.exe C:\%Windir%FontsNotepa.exe...
...C:\%Windir%Fontsh.exe to C:\%Windir%hh.exe C:\%Windir%FontsNotepa.exe...
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.dexec.html

W32.Toal.A@mm

Technical details
...The worm specifically infects Hh.exe, which is a standard Windows executable file....
...When it sends the email message, the worm attaches the infected Hh.exe file as Binladen_brasil.exe....
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.toal.a@mm.html

W32.Blebla.Worm

Technical details
...When executed, the Myromeo.exe file looks for the running copy of HH.exe (that is associated with .chm files) and tries to stop it in order to hide its activity....
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.blebla.worm.html

W32.Nosys

Technical details
...Winhlp32.exe HH.exe If it finds those files, it...
...Winhlp32.vir Hh.vir If the Trojan finds them,...
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.nosys.html

Trojan.PWS.QQPass.C

Removal instructions
...box and replace it with the path to the Windows installation folder followed by hh.exe" %1. This will vary with the operating system and where it is installed....
...Windows NT/2000: C:WINNThh.exe" %1 Windows 95/98/Me/XP: C:WINDOWShh.exe"...
Source: http://securityresponse.symantec.com/avcenter/venc/data/trojan.pws.qqpass.c.html

W32.HLLW.Maax@mm

Technical details
...F-Stopw.exe HH.exe Iamapp.exe...
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.maax@mm.html

W32.BleBla.J.Worm

Technical details
...To hide its activity, the Melh32.exe file attempts to terminate the HH.exe process. The worm then queries the...
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.blebla.j.worm.html

W32.Benpao.Trojan

Technical details
...Changes the value: (Default) %Windir%hh.exe %1 to:...
Removal instructions
...to: (Default) %Windir%hh.exe %1 Navigate to the key:...
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.benpao.trojan.html

W32.HLLW.BenfGame.B

Technical details
...Replaces the references to hh.exe with one of the random filenames that the worm created....
Removal instructions
...HKEY_CLASSES_ROOTchm.fileshellopencommand Restore value to: hh.exe %1 Key: HKEY_CLASSES_ROOTscrfileshellopencommand...
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.benfgame.b.html

W32.Faisal@mm

Technical details
...HKEY_CLASSES_ROOTApplicationsHH.exeShellopencommand @=%Windir%Myvwa.com...
Removal instructions
...HKEY_CLASSES_ROOTApplicationsHH.exeShellopencommand HKEY_CLASSES_ROOTApplicationsIamapp.exeShellopencommand...
......
Source: http://securityresponse.symantec.com/avcenter/venc/data/w32.faisal@mm.html

Navigation

Browse files

• by name




Valid HTML 4.01!
Copyright © 2004 by Tegtmeier Internet Solutions Colocation: NetGate