HenBang

Category: Adware and PUAs Protection available since:09 Jun 2006 00:00:00 (GMT)
Type: Adware Last Updated:14 Nov 2006 00:00:00 (GMT)

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

HenBang is a potentially unwanted application.

When the application is installed the following files are created:

<Program Files>\hbclient\HBHelper.dll
<Windows>\hb24065.log
<Windows>\helper.ini
<System>\distributer.txt
<System>\hber.ini
<System>\hbhsy.ini

The following registry entry is created to run code exported by HBHelper.dll on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
RichMedia
<System>\Rundll32.exe "<Program Files>\hbclient\HBHelper.dll",WaitWindows

The following registry entry is set:

HKLM\SOFTWARE\RichMedia
path
<Program Files>\hbclient\HBHelper.dll

Registry entries are created under:

HKLM\SOFTWARE\RichMedia\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\hbhelper\
HKCR\HBHelper.HBObject\CurVer\
HKCR\HBHelper.HBObject\CLSID\
HKCR\HBHelper.HBObject\
HKCR\HBHelper.HBObject.1\CLSID\
HKCR\HBHelper.HBObject.1\
HKCR\HBHelper.HBActivex\CLSID\
HKCR\HBHelper.HBActivex\
HKCR\HBHelper.HBActivex.1\CLSID\
HKCR\HBHelper.HBActivex.1\

HenBang provides an uninstall option which can be accessed via the Add or Remove Programs dialog in the Windows Control Panel. The software is listed as "Rich Media".

download Try Sophos products for free
Download now