InterMute > Threat Research

webHancer is a process started at Windows startup that monitors web sites being viewed and sends performance data on them back to webHancer's servers.

Distribution

Very widespread bundling, especially with file-sharing software such as AudioGalaxy and Grokster.

What it does

Advertising

No.

Privacy violation

Yes. The 'customer companion' collects names of visited sites and how fast they loaded, and sends them back to webHancer's servers.

Security issues

Yes. Can download and execute arbitrary code silently from the controlling servers, as an update feature.

Stability problems

webHancer interferes with the networking stack, and may kill networking completely if deleted.

Removal

Use the Control Panel 'Add/Remove Programs' option if possible; if webHancer is not there you could try reinstalling a new version and then removing it.