Reading from internet, to remove Tencent.Addressbar etc, I need to stop these
process iehelp.dll/iehelp1.dll/iehelp2.dll //
ssaddr.dll/ssaddr1.dll/ssaddr2.dll and tbhmain.dll. My question is where do I
find these or stop these as I could not find these files as I couls not find
them in Alt/Ctl/Delete >Processes.
Apprecuate your prompt response as I know this is not the correct place to
loo for answers. Thanks
Where to locate or kill these process?
Moderators: DllAdmin, DLLADMIN ONLY
-
tim meddick
- Posts: 8
- Joined: 03 Jun 2010, 23:00
Re: Where to locate or kill these process?
The items you quoted are not running processes, but filenames. They may
well be associated with a process or application in memory - such as
"Tencent Addressbar" - which you may have to terminate first, before you
will be able to delete these offending files. You would do this by
searching for "Files & Folders" within Windows Explorer, then deleting
them individually.
This is the long "manual" way of deleting a program from off your system,
and can be dangerous if you don't know exactly which files you are to
delete, and can still leave you with many unwanted registry entries
remaining.
Any application you install *should* be supplied with an uninstall feature.
There is usually a shortcut to uninstall an application, located in it's
folder on the "All Programs" menu. However, if not, then if you look
inside your "Program Files" for a folder that has a similar name to that of
the program you are trying to rid yourself of, then look for an application
in that folder called "uninst.exe" and run it by double-clicking on it.
Alternatively, try looking up the exact name of the application on the
internet, together with the words "how to uninstall".
==
Cheers, Tim Meddick, Peckham, London.
"sherrybukit" <sherrybukit@discussions.microsoft.com> wrote in message
news:6C716791-0D69-4F0A-A463-3804440F7ED4@microsoft.com...
> Reading from internet, to remove Tencent.Addressbar etc, I need to stop
> these
> process iehelp.dll/iehelp1.dll/iehelp2.dll //
> ssaddr.dll/ssaddr1.dll/ssaddr2.dll and tbhmain.dll. My question is where
> do I
> find these or stop these as I could not find these files as I couls not
> find
> them in Alt/Ctl/Delete >Processes.
> Apprecuate your prompt response as I know this is not the correct place
> to
> loo for answers. Thanks
well be associated with a process or application in memory - such as
"Tencent Addressbar" - which you may have to terminate first, before you
will be able to delete these offending files. You would do this by
searching for "Files & Folders" within Windows Explorer, then deleting
them individually.
This is the long "manual" way of deleting a program from off your system,
and can be dangerous if you don't know exactly which files you are to
delete, and can still leave you with many unwanted registry entries
remaining.
Any application you install *should* be supplied with an uninstall feature.
There is usually a shortcut to uninstall an application, located in it's
folder on the "All Programs" menu. However, if not, then if you look
inside your "Program Files" for a folder that has a similar name to that of
the program you are trying to rid yourself of, then look for an application
in that folder called "uninst.exe" and run it by double-clicking on it.
Alternatively, try looking up the exact name of the application on the
internet, together with the words "how to uninstall".
==
Cheers, Tim Meddick, Peckham, London.
"sherrybukit" <sherrybukit@discussions.microsoft.com> wrote in message
news:6C716791-0D69-4F0A-A463-3804440F7ED4@microsoft.com...
> Reading from internet, to remove Tencent.Addressbar etc, I need to stop
> these
> process iehelp.dll/iehelp1.dll/iehelp2.dll //
> ssaddr.dll/ssaddr1.dll/ssaddr2.dll and tbhmain.dll. My question is where
> do I
> find these or stop these as I could not find these files as I couls not
> find
> them in Alt/Ctl/Delete >Processes.
> Apprecuate your prompt response as I know this is not the correct place
> to
> loo for answers. Thanks
-
sherrybukit
- Posts: 3
- Joined: 20 Aug 2010, 23:00
Re: Where to locate or kill these process?
I search for Files and Folders including the hidden ones and found none. But
when I run Spybot Search & Destroy, it was detected but S&D cant remove it,
even Scan upon reboot.
Yes, its the Chinese QQ but its really slowing my pc down.
So what can I do next? Over the internet, there are programmes that says it
can remove TencentAddressBar which dont know how reliable it is. Thanks
"Tim Meddick" wrote:
> The items you quoted are not running processes, but filenames. They may
> well be associated with a process or application in memory - such as
> "Tencent Addressbar" - which you may have to terminate first, before you
> will be able to delete these offending files. You would do this by
> searching for "Files & Folders" within Windows Explorer, then deleting
> them individually.
>
> This is the long "manual" way of deleting a program from off your system,
> and can be dangerous if you don't know exactly which files you are to
> delete, and can still leave you with many unwanted registry entries
> remaining.
>
> Any application you install *should* be supplied with an uninstall feature.
> There is usually a shortcut to uninstall an application, located in it's
> folder on the "All Programs" menu. However, if not, then if you look
> inside your "Program Files" for a folder that has a similar name to that of
> the program you are trying to rid yourself of, then look for an application
> in that folder called "uninst.exe" and run it by double-clicking on it.
>
> Alternatively, try looking up the exact name of the application on the
> internet, together with the words "how to uninstall".
>
> ==
>
> Cheers, Tim Meddick, Peckham, London.
>
>
>
>
> "sherrybukit" <sherrybukit@discussions.microsoft.com> wrote in message
> news:6C716791-0D69-4F0A-A463-3804440F7ED4@microsoft.com...
> > Reading from internet, to remove Tencent.Addressbar etc, I need to stop
> > these
> > process iehelp.dll/iehelp1.dll/iehelp2.dll //
> > ssaddr.dll/ssaddr1.dll/ssaddr2.dll and tbhmain.dll. My question is where
> > do I
> > find these or stop these as I could not find these files as I couls not
> > find
> > them in Alt/Ctl/Delete >Processes.
> > Apprecuate your prompt response as I know this is not the correct place
> > to
> > loo for answers. Thanks
>
> .
>
when I run Spybot Search & Destroy, it was detected but S&D cant remove it,
even Scan upon reboot.
Yes, its the Chinese QQ but its really slowing my pc down.
So what can I do next? Over the internet, there are programmes that says it
can remove TencentAddressBar which dont know how reliable it is. Thanks
"Tim Meddick" wrote:
> The items you quoted are not running processes, but filenames. They may
> well be associated with a process or application in memory - such as
> "Tencent Addressbar" - which you may have to terminate first, before you
> will be able to delete these offending files. You would do this by
> searching for "Files & Folders" within Windows Explorer, then deleting
> them individually.
>
> This is the long "manual" way of deleting a program from off your system,
> and can be dangerous if you don't know exactly which files you are to
> delete, and can still leave you with many unwanted registry entries
> remaining.
>
> Any application you install *should* be supplied with an uninstall feature.
> There is usually a shortcut to uninstall an application, located in it's
> folder on the "All Programs" menu. However, if not, then if you look
> inside your "Program Files" for a folder that has a similar name to that of
> the program you are trying to rid yourself of, then look for an application
> in that folder called "uninst.exe" and run it by double-clicking on it.
>
> Alternatively, try looking up the exact name of the application on the
> internet, together with the words "how to uninstall".
>
> ==
>
> Cheers, Tim Meddick, Peckham, London.
>
>
>
>
> "sherrybukit" <sherrybukit@discussions.microsoft.com> wrote in message
> news:6C716791-0D69-4F0A-A463-3804440F7ED4@microsoft.com...
> > Reading from internet, to remove Tencent.Addressbar etc, I need to stop
> > these
> > process iehelp.dll/iehelp1.dll/iehelp2.dll //
> > ssaddr.dll/ssaddr1.dll/ssaddr2.dll and tbhmain.dll. My question is where
> > do I
> > find these or stop these as I could not find these files as I couls not
> > find
> > them in Alt/Ctl/Delete >Processes.
> > Apprecuate your prompt response as I know this is not the correct place
> > to
> > loo for answers. Thanks
>
> .
>
-
pa bear [ms mvp]
- Posts: 117
- Joined: 01 Mar 2009, 00:00
Re: Where to locate or kill these process?
You are seeing the effects of a hijackware infection!
NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!
Microsoft PCSafety provides home users (only) with no-charge support in
dealing with malware infections such as viruses, spyware (including unwanted
software), and adware.
https://support.microsoft.com/oas/defau ... =7552&st=1
Also available via the Consumer Security Support home page:
https://consumersecuritysupport.microsoft.com/
Otherwise...
1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwa ... fault.mspx
NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.
2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm
2b. Vista or Win7 (but not Vista 64-bit or Win7 64-bit) => Run this scan
instead: http://onecare.live.com/site/en-us/center/whatsnew.htm
3. Now begin your own, new thread in one (only) of the following recommended
forums for assistance by an expert in such matters. DO NOT SKIP THIS STEP!!
?
NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!
Microsoft PCSafety provides home users (only) with no-charge support in
dealing with malware infections such as viruses, spyware (including unwanted
software), and adware.
https://support.microsoft.com/oas/defau ... =7552&st=1
Also available via the Consumer Security Support home page:
https://consumersecuritysupport.microsoft.com/
Otherwise...
1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwa ... fault.mspx
NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.
2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm
2b. Vista or Win7 (but not Vista 64-bit or Win7 64-bit) => Run this scan
instead: http://onecare.live.com/site/en-us/center/whatsnew.htm
3. Now begin your own, new thread in one (only) of the following recommended
forums for assistance by an expert in such matters. DO NOT SKIP THIS STEP!!
?
-
sherrybukit
- Posts: 3
- Joined: 20 Aug 2010, 23:00
Re: Where to locate or kill these process?
Finally did a reformat and re-install as have tried all the suggested
scanners like MRT, Malware removal etc and that didnt work.There must be an
easier way to resolve this as reformat/install took many hours. Many thanks
for all the responses
"PA Bear [MS MVP]" wrote:
> You are seeing the effects of a hijackware infection!
>
> NB: If you had no anti-virus application installed or the subscription had
> expired *when the machine first got infected* and/or your subscription has
> since expired and/or the machine's not been kept fully-patched at Windows
> Update, don't waste your time with any of the below: Format & reinstall
> Windows. A Repair Install will NOT help!
>
> Microsoft PCSafety provides home users (only) with no-charge support in
> dealing with malware infections such as viruses, spyware (including unwanted
> software), and adware.
> https://support.microsoft.com/oas/defau ... =7552&st=1
>
> Also available via the Consumer Security Support home page:
> https://consumersecuritysupport.microsoft.com/
>
> Otherwise...
>
> 1. See if you can download/run the MSRT manually:
> http://www.microsoft.com/security/malwa ... fault.mspx
>
> NB: Run the FULL scan, not the QUICK scan! You may need to download the
> MSRT on a non-infected machine, then transfer MRT.EXE to the infected
> machine and rename it to SCAN.EXE before running it.
>
> 2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
> in Safe Mode with Networking, if need be:
> http://onecare.live.com/site/en-us/center/howsafe.htm
>
> 2b. Vista or Win7 (but not Vista 64-bit or Win7 64-bit) => Run this scan
> instead: http://onecare.live.com/site/en-us/center/whatsnew.htm
>
> 3. Now begin your own, new thread in one (only) of the following recommended
> forums for assistance by an expert in such matters. DO NOT SKIP THIS STEP!!
>
> ?
scanners like MRT, Malware removal etc and that didnt work.There must be an
easier way to resolve this as reformat/install took many hours. Many thanks
for all the responses
"PA Bear [MS MVP]" wrote:
> You are seeing the effects of a hijackware infection!
>
> NB: If you had no anti-virus application installed or the subscription had
> expired *when the machine first got infected* and/or your subscription has
> since expired and/or the machine's not been kept fully-patched at Windows
> Update, don't waste your time with any of the below: Format & reinstall
> Windows. A Repair Install will NOT help!
>
> Microsoft PCSafety provides home users (only) with no-charge support in
> dealing with malware infections such as viruses, spyware (including unwanted
> software), and adware.
> https://support.microsoft.com/oas/defau ... =7552&st=1
>
> Also available via the Consumer Security Support home page:
> https://consumersecuritysupport.microsoft.com/
>
> Otherwise...
>
> 1. See if you can download/run the MSRT manually:
> http://www.microsoft.com/security/malwa ... fault.mspx
>
> NB: Run the FULL scan, not the QUICK scan! You may need to download the
> MSRT on a non-infected machine, then transfer MRT.EXE to the infected
> machine and rename it to SCAN.EXE before running it.
>
> 2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
> in Safe Mode with Networking, if need be:
> http://onecare.live.com/site/en-us/center/howsafe.htm
>
> 2b. Vista or Win7 (but not Vista 64-bit or Win7 64-bit) => Run this scan
> instead: http://onecare.live.com/site/en-us/center/whatsnew.htm
>
> 3. Now begin your own, new thread in one (only) of the following recommended
> forums for assistance by an expert in such matters. DO NOT SKIP THIS STEP!!
>
> ?
-
tim meddick
- Posts: 8
- Joined: 03 Jun 2010, 23:00
Re: Where to locate or kill these process?
As "PA Bear" says in his post, you could try the Microsoft "MRT.exe"
(Malicious Software Removal Tool) application, if your PC is up-to-date
with the latest Windows Updates, then "MRT.exe" should already be on your
system in the C:\WINDOWS\system32 directory.
Type "MRT.exe" into the "Run" box on the Start Menu, and choose the "Full
Scan" not the quick one.
There's a chance MRT.exe will not pick it up. In that case, download the
[free] application "MalwareBytes" by clicking on the direct link below :
http://www.filescrunch.com/techspot-tem ... p-1.46.exe
Then, again, run the full scan, not the quick.
http://www.malwarebytes.org/mbam.php
==
Cheers, Tim Meddick, Peckham, London.
"sherrybukit" <sherrybukit@discussions.microsoft.com> wrote in message
news:ABC7F247-F4E6-4198-94CF-7C70524E2920@microsoft.com...
>I search for Files and Folders including the hidden ones and found none.
>But
> when I run Spybot Search & Destroy, it was detected but S&D cant remove
> it,
> even Scan upon reboot.
> Yes, its the Chinese QQ but its really slowing my pc down.
> So what can I do next? Over the internet, there are programmes that says
> it
> can remove TencentAddressBar which dont know how reliable it is. Thanks
>
> "Tim Meddick" wrote:
>
>> The items you quoted are not running processes, but filenames. They may
>> well be associated with a process or application in memory - such as
>> "Tencent Addressbar" - which you may have to terminate first, before you
>> will be able to delete these offending files. You would do this by
>> searching for "Files & Folders" within Windows Explorer, then deleting
>> them individually.
>>
>> This is the long "manual" way of deleting a program from off your
>> system,
>> and can be dangerous if you don't know exactly which files you are to
>> delete, and can still leave you with many unwanted registry entries
>> remaining.
>>
>> Any application you install *should* be supplied with an uninstall
>> feature.
>> There is usually a shortcut to uninstall an application, located in it's
>> folder on the "All Programs" menu. However, if not, then if you look
>> inside your "Program Files" for a folder that has a similar name to that
>> of
>> the program you are trying to rid yourself of, then look for an
>> application
>> in that folder called "uninst.exe" and run it by double-clicking on it.
>>
>> Alternatively, try looking up the exact name of the application on the
>> internet, together with the words "how to uninstall".
>>
>> ==
>>
>> Cheers, Tim Meddick, Peckham, London.
>>
>>
>>
>>
>> "sherrybukit" <sherrybukit@discussions.microsoft.com> wrote in message
>> news:6C716791-0D69-4F0A-A463-3804440F7ED4@microsoft.com...
>> > Reading from internet, to remove Tencent.Addressbar etc, I need to
>> > stop
>> > these
>> > process iehelp.dll/iehelp1.dll/iehelp2.dll //
>> > ssaddr.dll/ssaddr1.dll/ssaddr2.dll and tbhmain.dll. My question is
>> > where
>> > do I
>> > find these or stop these as I could not find these files as I couls
>> > not
>> > find
>> > them in Alt/Ctl/Delete >Processes.
>> > Apprecuate your prompt response as I know this is not the correct
>> > place
>> > to
>> > loo for answers. Thanks
>>
>> .
>>
(Malicious Software Removal Tool) application, if your PC is up-to-date
with the latest Windows Updates, then "MRT.exe" should already be on your
system in the C:\WINDOWS\system32 directory.
Type "MRT.exe" into the "Run" box on the Start Menu, and choose the "Full
Scan" not the quick one.
There's a chance MRT.exe will not pick it up. In that case, download the
[free] application "MalwareBytes" by clicking on the direct link below :
http://www.filescrunch.com/techspot-tem ... p-1.46.exe
Then, again, run the full scan, not the quick.
http://www.malwarebytes.org/mbam.php
==
Cheers, Tim Meddick, Peckham, London.
"sherrybukit" <sherrybukit@discussions.microsoft.com> wrote in message
news:ABC7F247-F4E6-4198-94CF-7C70524E2920@microsoft.com...
>I search for Files and Folders including the hidden ones and found none.
>But
> when I run Spybot Search & Destroy, it was detected but S&D cant remove
> it,
> even Scan upon reboot.
> Yes, its the Chinese QQ but its really slowing my pc down.
> So what can I do next? Over the internet, there are programmes that says
> it
> can remove TencentAddressBar which dont know how reliable it is. Thanks
>
> "Tim Meddick" wrote:
>
>> The items you quoted are not running processes, but filenames. They may
>> well be associated with a process or application in memory - such as
>> "Tencent Addressbar" - which you may have to terminate first, before you
>> will be able to delete these offending files. You would do this by
>> searching for "Files & Folders" within Windows Explorer, then deleting
>> them individually.
>>
>> This is the long "manual" way of deleting a program from off your
>> system,
>> and can be dangerous if you don't know exactly which files you are to
>> delete, and can still leave you with many unwanted registry entries
>> remaining.
>>
>> Any application you install *should* be supplied with an uninstall
>> feature.
>> There is usually a shortcut to uninstall an application, located in it's
>> folder on the "All Programs" menu. However, if not, then if you look
>> inside your "Program Files" for a folder that has a similar name to that
>> of
>> the program you are trying to rid yourself of, then look for an
>> application
>> in that folder called "uninst.exe" and run it by double-clicking on it.
>>
>> Alternatively, try looking up the exact name of the application on the
>> internet, together with the words "how to uninstall".
>>
>> ==
>>
>> Cheers, Tim Meddick, Peckham, London.
>>
>>
>>
>>
>> "sherrybukit" <sherrybukit@discussions.microsoft.com> wrote in message
>> news:6C716791-0D69-4F0A-A463-3804440F7ED4@microsoft.com...
>> > Reading from internet, to remove Tencent.Addressbar etc, I need to
>> > stop
>> > these
>> > process iehelp.dll/iehelp1.dll/iehelp2.dll //
>> > ssaddr.dll/ssaddr1.dll/ssaddr2.dll and tbhmain.dll. My question is
>> > where
>> > do I
>> > find these or stop these as I could not find these files as I couls
>> > not
>> > find
>> > them in Alt/Ctl/Delete >Processes.
>> > Apprecuate your prompt response as I know this is not the correct
>> > place
>> > to
>> > loo for answers. Thanks
>>
>> .
>>