Henbang Adware Profile

Title: Henbang

Also Known as: Adware.Henbang, AdWare.Win32.Hengbang.I

Severity scale: 92 (92 / 100)

Henbang is an adware program created and distributed by henbang.net.  It has to be downloaded from the site or bundled with freeware.  It was first released on April 25 of 2005.

According to their website, “Henbang Inc. is a leading provider of Internet search marketing solutions and provides search assistant software that delivers consumers to highly targeted websites on behalf of advertisers when they are searching the Internet for products or services. ” There is no apparent licensing agreement or EULA associated with Henbang.

Henbang has no spyware capabilities, but it is a tough adware to kill.  It has numerous fail-safes to avoid removal.  Manual removal is not recommended.  Manual removal is tedious, time consuming and hazardous.  Henbang is a large program and has several ways to avoid removal.  You should use SpyZooka to remove this adware.

Download Henbang Remover

Also Known As:
Adware.Henbang, AdWare.Win32.Hengbang.I,
AdWare.Win32.Hengbang.c, Adware/Hengbang

Associated Files:
%System%popcounts.ini.
%System%history.ini
%System%hdp.ini
%System%proc.ini
%System%hda.ini
%System%unregister.ini
%System%driversKhdap.sys
%System%driversMadbp.sys
%System%driversPupw.sys
%System%driversUstqilnr.sys
%System%hap.dll
%System%uninstall.exe
%System%webad.dll
%System%win.htm
%System%winhtp.dll
%System%hap.log
%System%distributer.txt
%System%history.ini
%System%win.htm
%Windir%hbsetup.log
%Desktop%Henbang Secretary.lnk
%Startup%Henbang Secretary.lnk
%StartMenu%ProgramsHenbang SecretaryHenbang Secretary.lnk
%StartMenu%ProgramsHenbang SecretaryReadme.lnk
C:Documents and SettingsAdministratorLocal SettingsTemphdpadoc.txt
180c52b618296303ba85f0ca5f91b8da197fd66f.exe
5ed3555bffa39bcd7ac71646b4881177c7728f5b.exe
7b4b3115b483f9791c4adcf99ace7e379a5ada26.exe
bdbbc5cc4473e0e30ea14d5e019c6d23fa19666f.exe
c8ccd0c2f7f70e8aa89a82d187f2dc8f830fd976.exe
ca690f9e426ac8dbbb95bfe960819cd095099f46.exe
hdp.exe
morelion.exe

%ProgramFiles%HDPHenbangHBlibrary.dll
%ProgramFiles%HDPHenbanghenbang.exe
%ProgramFiles%HDPHenbangXPWindow.dll
%ProgramFiles%HDPHenbangdefault.hta
%ProgramFiles%HDPHenbangImages_delete.gif
%ProgramFiles%HDPHenbangImages_edit.gif
%ProgramFiles%HDPHenbangImagesadorn.gif
%ProgramFiles%HDPHenbangImagesarrow.gif
%ProgramFiles%HDPHenbangImagesarrow_up.gif
%ProgramFiles%HDPHenbangImagesbgtlbar.gif
%ProgramFiles%HDPHenbangImagesclose_hover.gif
%ProgramFiles%HDPHenbangImagesclose_normal.gif
%ProgramFiles%HDPHenbangImagesdropdown.gif
%ProgramFiles%HDPHenbangImagesexpand.gif
%ProgramFiles%HDPHenbangImagesHenbang.gif
%ProgramFiles%HDPHenbangImageshenbang.ico
%ProgramFiles%HDPHenbangImagesicon_close.gif
%ProgramFiles%HDPHenbangImagesINSTALL.LOG
%ProgramFiles%HDPHenbangImagesitem.gif
%ProgramFiles%HDPHenbangImageslinks.gif
%ProgramFiles%HDPHenbangImageslocalTool.gif
%ProgramFiles%HDPHenbangImageslogo.jpg
%ProgramFiles%HDPHenbangImagesmanager.gif
%ProgramFiles%HDPHenbangImagesMenuItemsmenu_category.gif
%ProgramFiles%HDPHenbangImagesMenuItemsmenu_home.gif
%ProgramFiles%HDPHenbangImagesminus.gif
%ProgramFiles%HDPHenbangImagesNavBarGame.gif
%ProgramFiles%HDPHenbangImagesNavBarHenbang.gif
%ProgramFiles%HDPHenbangImagesNavBarLeisure.gif
%ProgramFiles%HDPHenbangImagesNavBarPage.gif
%ProgramFiles%HDPHenbangImagesNavBarSys.gif
%ProgramFiles%HDPHenbangImagesnav_hover.gif
%ProgramFiles%HDPHenbangImagesnav_normal.gif
%ProgramFiles%HDPHenbangImagesnav_select.gif
%ProgramFiles%HDPHenbangImagesopen_hover.gif
%ProgramFiles%HDPHenbangImagesopen_normal.gif
%ProgramFiles%HDPHenbangImagesPage.gif
%ProgramFiles%HDPHenbangImagespassport.gif
%ProgramFiles%HDPHenbangImagespassword.gif
%ProgramFiles%HDPHenbangImagesplus.gif
%ProgramFiles%HDPHenbangImagessearch.gif
%ProgramFiles%HDPHenbangImagestab_hover.gif
%ProgramFiles%HDPHenbangImagestab_normal.gif
%ProgramFiles%HDPHenbangImagestbtitle.gif
%ProgramFiles%HDPHenbangImagestitle_bg.gif
%ProgramFiles%HDPHenbangImagestop_bg.gif
%ProgramFiles%HDPHenbangImagesUNWISE.EXE
%ProgramFiles%HDPHenbangImagesUNWISE.INI
%ProgramFiles%HDPHenbangmyCategory.htm
%ProgramFiles%HDPHenbangmyFreeArea.htm
%ProgramFiles%HDPHenbangmyHomePage.htm
%ProgramFiles%HDPHenbangmySites.htm
%ProgramFiles%HDPHenbangmyTools.htm
%ProgramFiles%HDPHenbangreadme.txt
%ProgramFiles%HDPHenbangScriptsfooter.js
%ProgramFiles%HDPHenbangScriptsheader.js
%ProgramFiles%HDPHenbangslChannel.htm
%ProgramFiles%HDPHenbangslChannelLink.htm
%ProgramFiles%HDPHenbangslSubChannel.htm
%ProgramFiles%HDPHenbangstChannels.htm
%ProgramFiles%HDPHenbangstMyChannel.htm
%ProgramFiles%HDPHenbangstMyFreeArea.htm
%ProgramFiles%HDPHenbangstMyHomePage.htm
%ProgramFiles%HDPHenbangstMySites.htm
%ProgramFiles%HDPHenbangstMyTools.htm
%ProgramFiles%HDPHenbangstPassport.htm
%ProgramFiles%HDPHenbangstSearchEngines.htm
%ProgramFiles%HDPHenbangstyle.css
%ProgramFiles%HDPHenbangUninstall.exe
%ProgramFiles%HDPHenbangxpstylebottom.bmp
%ProgramFiles%HDPHenbangxpstyleButtons.bmp
%ProgramFiles%HDPHenbangxpstyleCheckbox.bmp
%ProgramFiles%HDPHenbangxpstyleclose.bmp
%ProgramFiles%HDPHenbangxpstyleleft.bmp
%ProgramFiles%HDPHenbangxpstylemax.bmp
%ProgramFiles%HDPHenbangxpstylemin.bmp
%ProgramFiles%HDPHenbangxpstyleRadio.bmp
%ProgramFiles%HDPHenbangxpstylerestore.bmp
%ProgramFiles%HDPHenbangxpstyleright.bmp
%ProgramFiles%HDPHenbangxpstyletheme.ini
%ProgramFiles%HDPHenbangxpstyletop.bmp
%ProgramFiles%HDPHenbang_dataads.htm
%ProgramFiles%HDPHenbang_dataChannel.xml
%ProgramFiles%HDPHenbang_dataChannel_0.xml
%ProgramFiles%HDPHenbang_dataChannel_Common.xml
%ProgramFiles%HDPHenbang_datachannel_default.xml
%ProgramFiles%HDPHenbang_dataconfig.xml
%ProgramFiles%HDPHenbang_dataFreeInfo.xml
%ProgramFiles%HDPHenbang_dataHotWords.xml
%ProgramFiles%HDPHenbang_dataHotWords.xsl
%ProgramFiles%HDPHenbang_dataMySites.xml
%ProgramFiles%HDPHenbang_dataMyTools.xml
%ProgramFiles%HDPHenbang_dataPassports.xml
%ProgramFiles%HDPHenbang_dataSearchEngines.xml
%ProgramFiles%HDPHenbang_dataUrlLib.xml
%ProgramFiles%HDPHenbang_dataUrlList02.xsl
HKEY_LOCAL_MACHINESOFTWAREClassesCLSID
{2D6F6BFF-1796-4779-9BA3-5F20F17E5CEA}
HKEY_LOCAL_MACHINESOFTWAREClassesInterface
{71246576-0183-4C11-AF74-D377EC2209C4}
HKEY_LOCAL_MACHINESOFTWAREClassesTypeLib
{AE9C1B10-C380-4363-8620-7C6311169BAA}
HKEY_LOCAL_MACHINESOFTWAREClassesXPWindow.XWindow
HKEY_LOCAL_MACHINESOFTWAREClassesXPWindow.XWindow.1
HKEY_CLASSES_ROOTCLSID{3ED9FFDA-79DB-4B2D-99B7-16EA3C4A3A92}
HKEY_CLASSES_ROOTCLSID{616D4040-5712-4F0F-BCF1-5C6420A99E14}
HKEY_CLASSES_ROOTInterface{1363F829-37F1-4763-9FBA-E8BB564D95EE}
HKEY_CLASSES_ROOTInterface{EF991B92-4308-454C-94BB-E0322A511BAB}
HKEY_CLASSES_ROOTTypeLib{315A06D6-FCA7-45EA-B77D-EE7B90041224}
HKEY_CLASSES_ROOTTypeLib{B58A1EFB-3DEE-4493-93B9-4DE3F99C8AEE}
HKEY_CLASSES_ROOTDownloadStart.DownloadValue
HKEY_CLASSES_ROOTDownloadStart.DownloadValue.1
HKEY_CLASSES_ROOTMonitor.URLMonitor
HKEY_CLASSES_ROOTMonitor.URLMonitor.1
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersion
ExplorerBrowser Helper Objects{3ED9FFDA-79DB-4B2D-99B7-16EA3C4A3A92}
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersion
ExplorerBrowser Helper Objects{616D4040-5712-4F0F-BCF1-5C6420A99E14}
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExt
Stats{3ED9FFDA-79DB-4B2D-99B7-16EA3C4A3A92}
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExt
Stats{616D4040-5712-4F0F-BCF1-5C6420A99E14}
HKEY_LOCAL_MACHINESOFTWAREhap
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallHAPHKEY_CLASSES_ROOT%BrowserAssistant.BrowserHAP
HKEY_CLASSES_ROOT%BrowserAssistant.BrowserHAP.1
HKEY_CLASSES_ROOT%CLSID{AEF6F648-78D8-4456-BEE7-5ADE23D209FD}
HKEY_CLASSES_ROOT%Interface{CF1C62E9-AC73-4647-A99C-D2213FFDA728}
HKEY_CLASSES_ROOT%TypeLib{25E5E3D6-0C5C-44BD-A4BE-7A1C1285D1BB}
HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects
{AEF6F648-78D8-4456-BEE7-5ADE23D209FD}
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorerRun “helperdll” = “Rundll32 %System%driversPupw.sys,Rundll32″
HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMain “Enable Browser Extensions” = “yes”

Download Henbang Remover
 

Leave a Reply

Yes Scan My PcFor FREE!

  • AlphaAV

    AlphaAV is a rogue antivirus application that is promoted through Trojan horse programs. They download it and install it secretly, then the user is bombarded with false security alerts and phony scans. The scans will inevitably generate bogus results and then pressure the user into paying to register the useless program.
    If purchased, the user will [...]

  • Soft Barrier

    There are a lot of malicious programs out there and Soft Barrier is one of them. It uses Trojan horses to sneak onto the computers of unsuspecting users. Once installed, it creates numerous files that can slow down a PC’s performance. It then creates a number of fake security alerts and runs false systems scans. [...]

  • NetSpy

    Net Spy is known as a keylogger. This means that it records every keystroke made and sends it to a remote users. It is marketed as commercial surveillance software that tracks keystrokes, takes screen shots, and records addresses of various sites visited by the infected computer. Click the button below for a free scan to [...]

  • Win32.Knightseven Trojan

    Win32.Knightseven is a backdoor spyware program.  It functions in the same way that many legitimate remote administration programs do.  The difference is these programs use the access to your PC as a way to gather data or use your machine to its dirty work.  This pest will leave the following fingerprint f39f27410b37e9d1.
    However, understand these backdoor [...]

© 2010 SpyZooka Blog – Easy Spyware Removal All rights reserved. Powered by Wordpress. Designed by Woo Themes