How to remove dhm343.exe


The module dhm343.exe has been detected as Adware.OpenCandy

Product Name:

Installation helper

Company Name:

Install helper Team

MD5: 98e3a6cbc1b215577d85a2566c61258c
Size: 197 KB
First Published: 2018-03-02 14:09:22 (6 years ago)
Latest Published: 2018-03-02 14:09:26 (6 years ago)
Status: Adware.OpenCandy (on last analysis)
Analysis Date: 2018-03-02 14:09:26 (6 years ago)
Signed By: OpenCandy (Verified Application Company)
Status: Invalid (digital signature could be stolen or file could be patched)
%sysdrive%\yeyue\backup set 2016-08-14 195722\backup files 2016-08-14 195722\backup files\c\users\玟祥\appdata\roaming\rpeng
%sysdrive%\yeyue\backup set 2017-01-08 190001\backup files 2017-01-08 190001\backup files\c\users\玟祥\appdata\roaming\rpeng
%sysdrive%\yeyue\backup set 2016-10-30 190001\backup files 2016-10-30 190001\backup files\c\users\玟祥\appdata\roaming\rpeng
%sysdrive%\yeyue\backup set 2017-03-12 190001\backup files 2017-03-12 190001\backup files\c\users\玟祥\appdata\roaming\rpeng
%sysdrive%\yeyue\backup set 2016-10-02 190000\backup files 2016-10-02 190000\backup files\c\users\玟祥\appdata\roaming\rpeng
%sysdrive%\yeyue\backup set 2016-06-18 032320\backup files 2016-06-18 032320\backup files\c\users\玟祥\appdata\roaming\rpeng
Windows 10 100.0%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0007b7a0

PE Sections:

Name Size of data MD5
UPX0 0 00000000000000000000000000000000
UPX1 154112 dbbf567f4833466f4c4974d4632e0b71
.rsrc 40448 5ca4c3240dfa0399f1b0fdf1be687693

More information:

Download GridinSoft Anti-Malware - Removal tool for dhm343.exe