NavExcel

Description: Adware
Risk Level: High
Date of First Occurence: Wednesday, April 16, 2008
Software Developer: NavExcel
Brief Info: NavExcel is a search hijacker implemented as an IE Browser Helper Object. Address bar searches, attempts to connect to unknown servers.
Removal: This threat can be removed using "Spyware Terminator"

RIMUOVI SPYWARE »

Geographical Distribution of Threat "NavExcel"

Threat Info

View All

Detected Items

  1. Detected Files: %PROGRAMFILES%\NavExcel\NavHelper\v2.0.4b\NHelper.dll MD5: D3D6E4A3B0E28513D9BC17A1C4DCD107 Size:135168 MD5: 72D73DF2F44552C39F0EE783E6A7C9DF Size:135168 %PROGRAMFILES%\NavExcel\NavHelper\v2.0.3\NHelper.dll MD5: 1417E9D02C279BFD1F8ED750E3F9245D Size:126976 MD5: 26134B8973678934AC364591AD38E933 Size:126976 %PROGRAMFILES%\NavExcel\NavHelper\v2.0.4d\NHelper.dll MD5: 1A66F47512AF24F59A8853C7386BDC8B Size:151552 MD5: 6C8C08F0F5C80EC89455FB710A9043BB Size:151552 MD5: 9EC022E4BDF58480951D90ED88B2B503 Size:151552 MD5: E16A4C130B636209BDB9F9BB267757E0 Size:151552 MD5: FE3E05630025FC748DAF4914C4FF9922 Size:151552 %PROGRAMFILES%\NavExcel\NavHelper\v2.0.4d\navapp.exe MD5: E45F995ADB83F5FA3EB5BB75BCE8DD28 Size:167936 MD5: 1CCA2DFB6515C4BCBA5B1B1B2DA6C0D7 Size:167936 MD5: 1DD0E3B4240E1EE36303AA1E9E705499 Size:167936 MD5: CDF51563D6E38FF6998ECD8A124FEA20 Size:24076 MD5: 92BD6E99BA9E3A6C4E221CA1D2820170 Size:167936 MD5: 6D09711C3985EF97D43BD9141B83EF70 Size:167936 %PROGRAMFILES%\NavExcel\NavHelper\v2.0.4a\NHelper.dll MD5: FCA66F14ACC00960DD15792EA86C4919 Size:135168 MD5: E49AE7A5CEAEA3B82CB779F43680CD7B Size:135168 %PROGRAMFILES%\NavExcel\NavHelper\v2.0.4\NHelper.dll MD5: A406682CA3D21A71740F748C7562D671 Size:135168 %PROGRAMFILES%\NavExcel\NavHelper\v2.0.4c\NHelper.dll MD5: E9EDCCE30DA9C24201A206CB3B86619B Size:135168 MD5: 4CA695EC1EE4C7CF2144DFA00EA0E1F7 Size:24576 MD5: 020D179BCA8BCB4A9F2C926E4958CD1D Size:147456 MD5: 2F8A4492FC0B1ABE5B2942E08C752F8A Size:135168 %PROGRAMFILES%\NavExcel\NavHelper\v2.0.4a\NHUpdater.exe MD5: D78E8BFBDC62AF0B6BDA02211340BDE8 Size:143360 %PROGRAMFILES%\NavExcel\NavHelper\v1.0\NHelper.dll MD5: 234D5802C261BE90E3A97502E49A365F Size:126976 %PROGRAMFILES%\NavExcel\NavHelper\v2.0.2\NHelper.dll MD5: A814A8E75FBA1D7A4995BF7D3A94A21C Size:126976 %PROGRAMFILES%\NavExcel\NavHelper\v2.0.4c\NHUpdater.exe MD5: C1DB080F9F286231644ACC97523E05CA Size:143360 %PROGRAMFILES%\NavExcel\NavHelper\v2.0.4c\NHUninstaller.exe MD5: B5F4EF5E78DAC3C8ECBAF0B9704A68F7 Size:110592
  2. Detected Files with variable Filenames:

Detecting items list:

  1. Files by Name %programfiles%\navexcel\navhelper\*\nhuninstaller.exe %programfiles%\navexcel\navhelper\*\nhupdater.exe %programfiles%\navexcel\navhelper\*\navapp.exe %programfiles%\navexcel\navhelper\*\nhelper.dll %programfiles%\navexcel\navhelper\*\nhelper.dll %sysdir%\nhelper.dll
  2. Files by MD5 MD5: 4BF650D3F3F6E692E604645C0E9717AE Size: 1370749
  3. Files by Directories %programfiles%\navexcel %Programfiles%\NavExcel Search Toolbar
  4. Files by CLSID or Name CLSID=C1E58A84-95B3-4630-B8C2-D06B77B7A0FC CLSID=D80C4E21-C346-4E21-8E64-20746AA20AEB CLSID=b5ef836b-7582-4d82-9246-17f6c40ddf0f CLSID=20f36af3-3486-4bb6-8bcb-f1f8abe74d07 CLSID=fa4de133-d3c3-4ed4-92d1-cd4dde839ab3
  5. Registry Keys HKLM\software\navexcel HKCU\software\navexcel

« Go to Software Database