Need help? Ask the community or hire an expert.
Go to Avira Answers
Virus:ADSPY/NaviPromo.J
Date discovered:27/10/2011
Type:Adware/Spyware
In the wild:No
Reported Infections:Medium to high
Distribution Potential:Low
Damage Potential:Low to medium
Static file:Yes
File size:381.968 Bytes
MD5 checksum:11033fe49e144984b82ae16ce1221cd0
VDF version:7.11.16.173 - Thursday, October 27, 2011
IVDF version:7.11.16.173 - Thursday, October 27, 2011

 General ADSPY/ - Adware/Spyware

This class of detection flags software that display ads, usually in the internet browser by modifying displayed pages or opening aditional pages with ads, and/or monitor and send information about the user's activity. These adware/spyware programs are usually installed by the users themselves or come with other software that the users install themselves (usually in exchange for using the software for free or as a default install option).

Users might be unaware that this software was installed or of its behaviour. This detection is meant to flag the file and the behaviour as part of legitimate ad displaying/user activity monitoring software.

This detection can be disabled and is recommended if the user is aware of the software installed on his/her system and doesn't want this type of software to be detected.
Method of propagation:
   • No own spreading routine


Aliases:
   •  Bitdefender: Adware.Relevant.BH
   •  Eset: Win32/Adware.MarketScore.A
     Sunbelt: Adware.Win32.RelevantKnowledge.a
     GData: Adware.Relevant.BH
     DrWeb: Adware.Relevant.81


Platforms / OS:
   • Windows 95
   • Windows 98
   • Windows 98 SE
   • Windows NT
   • Windows ME
   • Windows 2000
   • Windows XP
   • Windows 2003
    Windows Vista
    Windows Server 2008
    Windows 7


Side effects:
   • Drops a file

 Files The following file is created:

Non malicious file:
   • C:\TEMP\CSM3.tmp

 Miscellaneous String:
Furthermore it contains the following strings:
   • InstallMonitor.dll
   • rkverify.exe
   • Software\comScore\Confidence
   • .exe

 File details Programming language:
The malware program was written in MS Visual C++.

Description inserted by Chiaho Heng on Friday, November 25, 2011
Description updated by Martin Muench on Friday, February 17, 2012

Back . . . .