newbie

Discussion in 'malware problems & news' started by skhatibel, Dec 8, 2004.

Thread Status:
Not open for further replies.
  1. skhatibel

    skhatibel Registered Member

    Joined:
    Dec 8, 2004
    Posts:
    2
    newbie question about hh32.exe

    Can anyone give me some information about a file named hh32.exe? I ran
    Trojan Hunter and received a warning about a possible trojan located in a UPX-packed file located in windows\system32\hh32.exe. Checked Google and got a couple of hits that had to do with hijackthis, which I have never used. I am concerned about the possible trojan. Any help or information would be greatly appreciated.
     
    Last edited: Dec 8, 2004
  2. wayne_b

    wayne_b Registered Member

    Joined:
    May 29, 2004
    Posts:
    56
    I have seen Norton flag 'hh32.exe' as a 'Backdoor.Trojan'

    Right-click then properties then the 'Version' tab and see what information is located there?

    -wayne
     
  3. skhatibel

    skhatibel Registered Member

    Joined:
    Dec 8, 2004
    Posts:
    2
    Followed your instructions-no version tab. General, Compatibility, security and summary tabs, but no version tab. Only information is 'file type'-application, date created-Jamuary 30, 2004 and file size-185kb.
     
  4. wayne_b

    wayne_b Registered Member

    Joined:
    May 29, 2004
    Posts:
    56
  5. wayne_b

    wayne_b Registered Member

    Joined:
    May 29, 2004
    Posts:
    56
  6. FanJ

    FanJ Guest

    Re: newbie question about hh32.exe

    Hi,

    If I'm allowed: I would advise you to send that file to Magnus :
    submit at trojanhunter.com

    As you didn't mention that it was an issue with respect to TDS-3, I guess the mods will move your thread to the "Other Anti-Trojan" forum-section ;)

    Cheers, Jan.
     
  7. Pilli

    Pilli Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    6,217
    Location:
    Hampshire UK
    I have moved this thread to a more appropriate forum as it is not a TDS3 support question.

    Thank you. Pilli
     
Thread Status:
Not open for further replies.