According to the WebHancer website, the purpose of this program is as follows:
"webHancer Customer Companion resides on the end-user's computer, where it transparently monitors Internet performance. webHancer Customer Companion measures overall network/site delay and the performance times experienced by actual end-users."Infection method:
As noted earlier, simply deleting WebHancer files from your system will result in losing your ability to connect to the Internet. WebHancer modifies your Windows Sockets configuration, binding itself to Winsock so that all packets are passed through WebHancer.
WebHancer's suggested removal
method is to make sure WebHancer is installed, and remove it using Windows'
Add/Remove Software feature as described at the bottom of WebHancer's
page. If you have already deleted WebHancer components, the company
suggests that you download (or get a friend to download, due to the connectivity
problem!) their Customer
Companion, fully install it, then use Add/Remove Programs to uninstall.
WebHancer can also be safely removed by pest-removal software such as Spybot Search&Destroy and AD-Aware. These and similar programs are listed on the Pest Removers page.
If you cannot access the Internet and simply need to restore Internet access, try my LSP-Fix program to repair the portion of the registry WebHancer and similar programs like to damage.
Be warned: Although uninstallation can in some cases go off without a hitch, in other cases it is extremely difficult to remove WebHancer completely. This letter from Doug D. explains just such a case.
WebHancer conflict with
Microsoft IIS - causes problems with ASP scripts
Problems have been reported when WebHancer installs itself on a Windows 2000 system running IIS. Robert G. writes:
"It causes server script ASP pages to not work at all when the web application settings are in medium and high isolation modes. The default mode is medium which allows pretty good performance benefits over "low isolation" mode. WebHancer doesn't seem to cause a problem with ASP pages when using low isolation mode."The suggested solution is to remove WebHancer and things should work as before. This semi-related MS Knowledge Base article may also be of interest:
WebHancer associated with shdocvw.dll and Explorer errors, and bluescreens
An involuntary WebHancer user reports the following issues after a (failed) removal of WebHancer:
"An error or exception occurred while calling the function "DllInstall" in "C:\WINDOWS\SYSTEM\shdocvw.dll"
"Explorer has caused an error in SHDOCVW.DLL. Explorer will now close."
Similar error messages referring to SHELL32.DLL.
The webhancer process will appear on the Ctrl-Alt-Delete list (Task List) in Windows as Whagent. Any of the following files in your Windows directory indicate a WebHancer infestation:
Removal Instructions from WebHancer admin:
From WebHancer:A Caution
If you have lost connectivity is this usually a sign of incorrectly removing the customer Companion. To correct this problem, re-install the Customer companion and follow the instructions below to remove.
How do I remove it completely?
To remove the agent, Click: START-->SETTING-->CONTROL PANEL
double click on ADD/REMOVE Programs.
scroll down to WEBHANCER AGENT and click ADD/REMOVE.
1. In your Windows (Winnt) directory, you can delete these files as well, as they are dll's and files used only by the our agent:
2. Delete the WebHancer folder in the Program Files directory. (If you get a sharing violation on the wbhshare.dll its because its been loaded, you'll need to reboot before deleting this directory).
3. Delete all the files out of you temp directory (most likely c:\temp). These files were put here temporarily during installation.
IMPORTANT: If you are
experiencing problems with WebHancer spyware or its removal, please contact
support for assistance, either by emailing
their tech support or contacting by phone at (613) 721-7747 (beware--NOT
a toll-free call). I'm not a technical support provider for WebHancer or
other spyware vendors, and what is on this Web site is really about all
the information I have. If you cannot resolve your problem with WebHancer,
email me and I will try to help--but please try it through them first!
This file (Service Provider Ordering DLL) may be installed by other applications
as well. If in doubt as to what installed it, leave it alone or rename
instead of deleting.
"All trademarks are hereby
acknowledged as the property of their respective owners." So don't even
THINK about suing me :)