Parasite: webHancer

This record last updated Tue Sep 20 2005 00:34:15

PLEASE NOTE: Due to the overwhelming extent of this problem and the unbelievable volume of email we have received, we regret that we cannot respond to questions about browser parasites at this time. If you have attempted to contact us about this parasite please accept our apology for not responding. "Thank you's" are always appreciated ;-)

Description

webHancer is a process started at Windows startup that monitors web sites being viewed and sends performance data on them back to webHancer’s servers.

Distribution

Very widespread bundling, especially with file-sharing software such as AudioGalaxy and Grokster.

What it does

Advertising

No.

Privacy violation

Yes. The ‘customer companion’ collects names of visited sites and how fast they loaded, and sends them back to webHancer’s servers.

Security issues

Yes. Can download and execute arbitrary code silently from the controlling servers, as an update feature.

Stability problems

webHancer interferes with the networking stack, and may kill networking completely if deleted.

Removal

Use the Control Panel ‘Add/Remove Programs’ option if possible; if webHancer is not there you could try reinstalling a new version and then removing it.

Ad-Aware can also remove webHancer, but use a recent version.