• Welcome to Tux Reports: Where Penguins Fly. We hope you find the topics varied, interesting, and worthy of your time. Please become a member and join in the discussions.

Where to locate or kill these process?

S

sherrybukit

Flightless Bird
Reading from internet, to remove Tencent.Addressbar etc, I need to stop these
process iehelp.dll/iehelp1.dll/iehelp2.dll //
ssaddr.dll/ssaddr1.dll/ssaddr2.dll and tbhmain.dll. My question is where do I
find these or stop these as I could not find these files as I couls not find
them in Alt/Ctl/Delete >Processes.
Apprecuate your prompt response as I know this is not the correct place to
loo for answers. Thanks
 
T

Tim Meddick

Flightless Bird
The items you quoted are not running processes, but filenames. They may
well be associated with a process or application in memory - such as
"Tencent Addressbar" - which you may have to terminate first, before you
will be able to delete these offending files. You would do this by
searching for "Files & Folders" within Windows Explorer, then deleting
them individually.

This is the long "manual" way of deleting a program from off your system,
and can be dangerous if you don't know exactly which files you are to
delete, and can still leave you with many unwanted registry entries
remaining.

Any application you install *should* be supplied with an uninstall feature.
There is usually a shortcut to uninstall an application, located in it's
folder on the "All Programs" menu. However, if not, then if you look
inside your "Program Files" for a folder that has a similar name to that of
the program you are trying to rid yourself of, then look for an application
in that folder called "uninst.exe" and run it by double-clicking on it.

Alternatively, try looking up the exact name of the application on the
internet, together with the words "how to uninstall".

==

Cheers, Tim Meddick, Peckham, London. :)




"sherrybukit" <sherrybukit@discussions.microsoft.com> wrote in message
news:6C716791-0D69-4F0A-A463-3804440F7ED4@microsoft.com...
> Reading from internet, to remove Tencent.Addressbar etc, I need to stop
> these
> process iehelp.dll/iehelp1.dll/iehelp2.dll //
> ssaddr.dll/ssaddr1.dll/ssaddr2.dll and tbhmain.dll. My question is where
> do I
> find these or stop these as I could not find these files as I couls not
> find
> them in Alt/Ctl/Delete >Processes.
> Apprecuate your prompt response as I know this is not the correct place
> to
> loo for answers. Thanks
 
S

sherrybukit

Flightless Bird
I search for Files and Folders including the hidden ones and found none. But
when I run Spybot Search & Destroy, it was detected but S&D cant remove it,
even Scan upon reboot.
Yes, its the Chinese QQ but its really slowing my pc down.
So what can I do next? Over the internet, there are programmes that says it
can remove TencentAddressBar which dont know how reliable it is. Thanks

"Tim Meddick" wrote:

> The items you quoted are not running processes, but filenames. They may
> well be associated with a process or application in memory - such as
> "Tencent Addressbar" - which you may have to terminate first, before you
> will be able to delete these offending files. You would do this by
> searching for "Files & Folders" within Windows Explorer, then deleting
> them individually.
>
> This is the long "manual" way of deleting a program from off your system,
> and can be dangerous if you don't know exactly which files you are to
> delete, and can still leave you with many unwanted registry entries
> remaining.
>
> Any application you install *should* be supplied with an uninstall feature.
> There is usually a shortcut to uninstall an application, located in it's
> folder on the "All Programs" menu. However, if not, then if you look
> inside your "Program Files" for a folder that has a similar name to that of
> the program you are trying to rid yourself of, then look for an application
> in that folder called "uninst.exe" and run it by double-clicking on it.
>
> Alternatively, try looking up the exact name of the application on the
> internet, together with the words "how to uninstall".
>
> ==
>
> Cheers, Tim Meddick, Peckham, London. :)
>
>
>
>
> "sherrybukit" <sherrybukit@discussions.microsoft.com> wrote in message
> news:6C716791-0D69-4F0A-A463-3804440F7ED4@microsoft.com...
> > Reading from internet, to remove Tencent.Addressbar etc, I need to stop
> > these
> > process iehelp.dll/iehelp1.dll/iehelp2.dll //
> > ssaddr.dll/ssaddr1.dll/ssaddr2.dll and tbhmain.dll. My question is where
> > do I
> > find these or stop these as I could not find these files as I couls not
> > find
> > them in Alt/Ctl/Delete >Processes.
> > Apprecuate your prompt response as I know this is not the correct place
> > to
> > loo for answers. Thanks
>
> .
>
 
S

Spamlet

Flightless Bird
"sherrybukit" <sherrybukit@discussions.microsoft.com> wrote in message
news:6C716791-0D69-4F0A-A463-3804440F7ED4@microsoft.com...
> Reading from internet, to remove Tencent.Addressbar etc, I need to stop
> these
> process iehelp.dll/iehelp1.dll/iehelp2.dll //
> ssaddr.dll/ssaddr1.dll/ssaddr2.dll and tbhmain.dll. My question is where
> do I
> find these or stop these as I could not find these files as I couls not
> find
> them in Alt/Ctl/Delete >Processes.
> Apprecuate your prompt response as I know this is not the correct place to
> loo for answers. Thanks


Process Explorer - one of MS's free power tools, has a 'find handle or dll
function'. I have never had cause to use the function, but if those
processes are running on your pc I would imagine it ought to find them.

S
 
P

PA Bear [MS MVP]

Flightless Bird
You are seeing the effects of a hijackware infection!

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

Microsoft PCSafety provides home users (only) with no-charge support in
dealing with malware infections such as viruses, spyware (including unwanted
software), and adware.
https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1

Also available via the Consumer Security Support home page:
https://consumersecuritysupport.microsoft.com/

Otherwise...

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

2b. Vista or Win7 (but not Vista 64-bit or Win7 64-bit) => Run this scan
instead: http://onecare.live.com/site/en-us/center/whatsnew.htm

3. Now begin your own, new thread in one (only) of the following recommended
forums for assistance by an expert in such matters. DO NOT SKIP THIS STEP!!

• SpywareHammer: Malware Removal
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0

• Spyware Warrior: Help with spyware removal
http://www.spywarewarrior.com/viewforum.php?f=5

• DSL Reports: Security Cleanup
http://www.dslreports.com/forum/cleanup

• Bluetack: Malware Removal
http://www.bluetack.co.uk/forums/index.php?showforum=172

• AumHa: Malware Removal
http://aumha.net/viewforum.php?f=30

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002

sherrybukit wrote:
> Reading from internet, to remove Tencent.Addressbar etc, I need to stop
> these process iehelp.dll/iehelp1.dll/iehelp2.dll //
> ssaddr.dll/ssaddr1.dll/ssaddr2.dll and tbhmain.dll. My question is where
> do
> I find these or stop these as I could not find these files as I couls not
> find them in Alt/Ctl/Delete >Processes.
> Apprecuate your prompt response as I know this is not the correct place to
> loo for answers. Thanks
 
T

Tim Meddick

Flightless Bird
As "PA Bear" says in his post, you could try the Microsoft "MRT.exe"
(Malicious Software Removal Tool) application, if your PC is up-to-date
with the latest Windows Updates, then "MRT.exe" should already be on your
system in the C:/WINDOWS\system32 directory.

Type "MRT.exe" into the "Run" box on the Start Menu, and choose the "Full
Scan" not the quick one.

There's a chance MRT.exe will not pick it up. In that case, download the
[free] application "MalwareBytes" by clicking on the direct link below :
http://www.filescrunch.com/techspot-temp/mbam-setup-1.46.exe
Then, again, run the full scan, not the quick.

http://www.malwarebytes.org/mbam.php

==

Cheers, Tim Meddick, Peckham, London. :)




"sherrybukit" <sherrybukit@discussions.microsoft.com> wrote in message
news:ABC7F247-F4E6-4198-94CF-7C70524E2920@microsoft.com...
>I search for Files and Folders including the hidden ones and found none.
>But
> when I run Spybot Search & Destroy, it was detected but S&D cant remove
> it,
> even Scan upon reboot.
> Yes, its the Chinese QQ but its really slowing my pc down.
> So what can I do next? Over the internet, there are programmes that says
> it
> can remove TencentAddressBar which dont know how reliable it is. Thanks
>
> "Tim Meddick" wrote:
>
>> The items you quoted are not running processes, but filenames. They may
>> well be associated with a process or application in memory - such as
>> "Tencent Addressbar" - which you may have to terminate first, before you
>> will be able to delete these offending files. You would do this by
>> searching for "Files & Folders" within Windows Explorer, then deleting
>> them individually.
>>
>> This is the long "manual" way of deleting a program from off your
>> system,
>> and can be dangerous if you don't know exactly which files you are to
>> delete, and can still leave you with many unwanted registry entries
>> remaining.
>>
>> Any application you install *should* be supplied with an uninstall
>> feature.
>> There is usually a shortcut to uninstall an application, located in it's
>> folder on the "All Programs" menu. However, if not, then if you look
>> inside your "Program Files" for a folder that has a similar name to that
>> of
>> the program you are trying to rid yourself of, then look for an
>> application
>> in that folder called "uninst.exe" and run it by double-clicking on it.
>>
>> Alternatively, try looking up the exact name of the application on the
>> internet, together with the words "how to uninstall".
>>
>> ==
>>
>> Cheers, Tim Meddick, Peckham, London. :)
>>
>>
>>
>>
>> "sherrybukit" <sherrybukit@discussions.microsoft.com> wrote in message
>> news:6C716791-0D69-4F0A-A463-3804440F7ED4@microsoft.com...
>> > Reading from internet, to remove Tencent.Addressbar etc, I need to
>> > stop
>> > these
>> > process iehelp.dll/iehelp1.dll/iehelp2.dll //
>> > ssaddr.dll/ssaddr1.dll/ssaddr2.dll and tbhmain.dll. My question is
>> > where
>> > do I
>> > find these or stop these as I could not find these files as I couls
>> > not
>> > find
>> > them in Alt/Ctl/Delete >Processes.
>> > Apprecuate your prompt response as I know this is not the correct
>> > place
>> > to
>> > loo for answers. Thanks
>>
>> .
>>
 
S

sherrybukit

Flightless Bird
Finally did a reformat and re-install as have tried all the suggested
scanners like MRT, Malware removal etc and that didnt work.There must be an
easier way to resolve this as reformat/install took many hours. Many thanks
for all the responses

"PA Bear [MS MVP]" wrote:

> You are seeing the effects of a hijackware infection!
>
> NB: If you had no anti-virus application installed or the subscription had
> expired *when the machine first got infected* and/or your subscription has
> since expired and/or the machine's not been kept fully-patched at Windows
> Update, don't waste your time with any of the below: Format & reinstall
> Windows. A Repair Install will NOT help!
>
> Microsoft PCSafety provides home users (only) with no-charge support in
> dealing with malware infections such as viruses, spyware (including unwanted
> software), and adware.
> https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1
>
> Also available via the Consumer Security Support home page:
> https://consumersecuritysupport.microsoft.com/
>
> Otherwise...
>
> 1. See if you can download/run the MSRT manually:
> http://www.microsoft.com/security/malwareremove/default.mspx
>
> NB: Run the FULL scan, not the QUICK scan! You may need to download the
> MSRT on a non-infected machine, then transfer MRT.EXE to the infected
> machine and rename it to SCAN.EXE before running it.
>
> 2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
> in Safe Mode with Networking, if need be:
> http://onecare.live.com/site/en-us/center/howsafe.htm
>
> 2b. Vista or Win7 (but not Vista 64-bit or Win7 64-bit) => Run this scan
> instead: http://onecare.live.com/site/en-us/center/whatsnew.htm
>
> 3. Now begin your own, new thread in one (only) of the following recommended
> forums for assistance by an expert in such matters. DO NOT SKIP THIS STEP!!
>
> • SpywareHammer: Malware Removal
> http://spywarehammer.com/simplemachinesforum/index.php?board=10.0
>
> • Spyware Warrior: Help with spyware removal
> http://www.spywarewarrior.com/viewforum.php?f=5
>
> • DSL Reports: Security Cleanup
> http://www.dslreports.com/forum/cleanup
>
> • Bluetack: Malware Removal
> http://www.bluetack.co.uk/forums/index.php?showforum=172
>
> • AumHa: Malware Removal
> http://aumha.net/viewforum.php?f=30
>
> If these procedures look too complex - and there is no shame in admitting
> this isn't your cup of tea - take the machine to a local, reputable and
> independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Client - since 2002
>
> sherrybukit wrote:
> > Reading from internet, to remove Tencent.Addressbar etc, I need to stop
> > these process iehelp.dll/iehelp1.dll/iehelp2.dll //
> > ssaddr.dll/ssaddr1.dll/ssaddr2.dll and tbhmain.dll. My question is where
> > do
> > I find these or stop these as I could not find these files as I couls not
> > find them in Alt/Ctl/Delete >Processes.
> > Apprecuate your prompt response as I know this is not the correct place to
> > loo for answers. Thanks
>
> .
>
 
You must log in or register to reply here.
Top