Content
Adware-NavHelper
- Type
- Program
- SubType
- Adware
- Discovery Date
- 10/01/2003
- Minimum DAT
- 4297 (10/08/2003)
- Updated DAT
- 4588 (09/22/2005)
- Minimum Engine
- 5.1.00
- Description Added
- 10/14/2003
- Description Modified
- 10/14/2003 7:21 AM (PT)
Tab Navigation
Characteristics
This is not a virus or trojan. It is a direct-marketing application.
The application is designed to provide the end user with keyword-based searching. Businesses can register specific keywords with the product developer, and when users enter a keyword that matches, they are taken directly to the appropriate site.
The application also provides an interface to popular search engines.
Installation
The main DLL of this application installs as a Browser Helper Object (BHO) on the target machine. The following Registry entries will be visible:
- HKEY_CLASSES_ROOT\NavExcel.NavHelper
- HKEY_CLASSES_ROOT\NavExcel.NavHelper.1
- HKEY_CLASSES_ROOT\AppID\NHelper.DLL
- HKEY_LOCAL_MACHINE\Software\NavExcel
Multiple string and data values are stored within these parent keys, including the CLSID's. The installed BHO can be seen via:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\
Explorer\Browser Helper Objects\
{C1E58A84-85B3-4630-B8C2-D06B77B7A0FC}
The detection of this type of file is not automatically activated. Users who would like to check for the presence of this kind of files on their system should run the command line scanner with the /PROGRAM switch.
Please note that VirusScan 7 has also an option, which enables users to detect this kind of program automatically (see below).
Aliases
Aliases
- NavHelper
