A while back is ran a check and found an adware called “henbang” that was linked to a file, tbhelper.dll, in the downloaded programs folder in c/windows. My OS is Windows XP Home Edition. I had avast delete it. This was before making my VRBD.
Now every time I boot up windows, I get an error message from rundll saying that it can’t find it. Is there something I did wrong? Later, I found that a file named “hbhelper” in the same folder, which was from the company that made the adware (but never showed up on any scans), so I deleted it. Every scan after this and on spybot has revealed nothing. I have been keeping avast and spybot updated. Did I miss anything? The pop up is a little annoying.
I know I should have realized not to immediately delete files, thou I know that they weren’t part of my original windows.
As you probably realize by now, the 1st thing you do with
a suspect "malware" is "quarantine" ( Avast calls that
"move to chest " ) it . Then try & find info on it, starting
with a Search Engine, like Google, Yahoo, etc . That should
lead you to other sites with more specific info ; if the
"results" are unclear, you ask on Support Forums, like
Avast . Since at this point in time you are unsure as to IF
you should get it back, be aware that there is a program
called "Restoration" available at :
www.pcworld.com/downloads/file_description/0,fid,23108,00.asp
that can be used in an attempt to get it back .
As you can read from the technical information of what henbag adware does to your system here: http://www.symantec.com/avcenter/venc/data/adware.henbang.html
the cleansing of this adware mainly concerns the registry settings.
Try to restore from your system cd or back-up, and check up if henbang is gone from the registry. The nuisance of spyware and adware malware is that when it is tackled in a wrong way it can ruin your OS or connections.
Therefore it is always safer to put files to the chest, ask here or get technical information about the malware at hand, and then make a decision what to do. Put the files back later or remove them safely, only if you know it is safe.
An AV product is no tool, if used wrongly it can seriously endanger your system settings or let you loose it even. Get an informed decision, and all will be well for you,
Hi DrChristmas :