Most antivirus programs identify h.exe as malware—such as McAfee identifies it as FakeAlert-EL, and Kaspersky identifies it as Packed.Win32.Krap.ag.
The h.exe file is a software component of Sysinternals Rootkitrevealer by Microsoft.
H.exe is an executable file that runs the Sysinternals Rootkitrevealer utility, a tool designed for detecting rootkits (hidden software programs) on computers running Microsoft Windows. This is not a critical Windows component and should be removed if known to cause problems. RootkitRevealer was created for Windows XP and Windows Server 2003. The program looked for discrepancies in the system registry and file system to indicate the presence of a rootkit. This tool is credited with unearthing secretive measures taken by Sony BMG as copy protection which ultimately turned out to be deceptive, illegal, and potentially harmful, causing a major scandal. Sysinternals is a website launched in 1996 by Mark Russinovich and Bryce Cogswell to host their free yet advanced system utilities designed to administer and monitor computers running Microsoft Windows. In 2006, Microsoft acquired Sysinternals, as well as Winternals Software LP, the company that operated the Sysinternals website. Windows Sysinternals is currently part of the Microsoft TechNet website. Microsoft was founded in 1975 by Bill Gates and Paul Allen and quickly rose to prominence following the launch of their popular operating system, MS-DOS for early personal computers. After the company went public in 1986, its rising share prices created three billionaires and roughly 12,000 millionaires from Microsoft employees. Microsoft began developing graphical user interfaces and the distinguishable Start-button after the introduction of Windows 95. Further additions like networking and security soon followed. Microsoft is currently headquartered in Redmond, Washington, USA.
h stands for RootkitRevealer: Rootkit detection utility by Russinovich
The free file information forum can help you find out how to remove it. If you have additional information about this file, please leave a comment or a suggestion for other users.
Here is some of what is known about the h.exe process. Up to now, our technical analysts have not been able to relate it to any particular software.
Description: H.exe is not essential for Windows and will often cause problems. The h.exe file is located in a subfolder of the user's profile folder.
Known file sizes on Windows 10/8/7/XP are 154,624 bytes (25% of all occurrences), 177,664 bytes, 117,764 bytes or 156,160 bytes.
There is no information about the author of the file. The program has no visible window. It is not a Windows core file. The process is loaded during the Windows boot process (see Registry key: Run). Therefore the technical security rating is 71% dangerous.
Recommended: Identify h.exe related errors
Important: You should check the h.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.
The following programs have also been shown useful for a deeper analysis: Security Task Manager examines the active h process on your computer and clearly tells you what it is doing. Malwarebytes' well-known anti-malware tool tells you if the h.exe on your computer displays annoying ads, slowing it down. This type of unwanted adware program is not considered by some antivirus software to be a virus and is therefore not marked for cleanup.
A clean and tidy computer is the key requirement for avoiding PC trouble. This means running a scan for malware, cleaning your hard drive using cleanmgr and sfc /scannow, uninstalling programs that you no longer need, checking for Autostart programs (using msconfig) and enabling Windows' Automatic Update. Always remember to perform periodic backups, or at least to set restore points.
Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.