Emsisoft Malware-Info

Name: Adware.Win32.1941 Operation Typhoon

Risklevel: Elevated Risk

Company: Exefind.com - http://www.exefind.com/

Description:

1941 Operation Typhoon is an adware bundler that installs Spyware-WebHancer with itself.Webhancer is a program that monitors Web sites visited and sends this information to a remote server.It also installs Adware-NaviHelper (NavExcel) with itself.Adware.Navihelper typically installs itself as a Browser Helper Object and may perform other actions, including displaying advertising content and updating itself.

Removal instructions for Adware 1941 Operation Typhoon:

To delete this malware infection, buy Emsisoft Anti-Malware.
Guaranteed removal of Adware 1941 Operation Typhoon.

Run a full scan on all drives and move all detected items to the quarantine.

More details about this danger:

Characteristics:

  • It installs Spyware-WebHancer with itself.
  • Webhancer is a program that monitors Web sites visited and sends this information to a remote server.
  • It also installs Adware-NaviHelper (NavExcel) with itself.
  • Adware.Navihelper typically installs itself as a Browser Helper Object and may perform other actions, including displaying advertising content and updating itself.

Installation: Installed through EXE

Process: Typhoon.exe

Screenshots:

1941 Operation Typhoon1941 Operation Typhoon1941 Operation Typhoon1941 Operation Typhoon1941 Operation Typhoon1941 Operation Typhoon1941 Operation Typhoon1941 Operation Typhoon1941 Operation Typhoon

Used folders:

  • C:\Program Files\NavExcel\NavHelper
  • C:\Program Files\whInstall
  • C:\temp\kwdot\help
  • C:\Program Files\NavExcel
  • C:\Program Files\1941 Operation Typhoon
  • C:\Program Files\1941 Operation Typhoon\data
  • C:\Program Files\1941 Operation Typhoon\data\save
  • C:\temp
  • C:\temp\kwdot
  • C:\Program Files\NavExcel\NavHelper\v2.0.4a
  • C:\Program Files\NavExcel Search Toolbar
  • C:\Program Files\webHancer
  • C:\Program Files\webHancer\Programs

Used files:

  • C:\temp\kwdot\MsRepl35.dl_
    [216599 Bytes] DL_ File
  • C:\temp\kwdot\OlePro32.dl_
    [67142 Bytes] DL_ File
  • C:\temp\kwdot\File_ID.DI_
    [735 Bytes] DI_ File
  • C:\temp\kwdot\Default.sa_
    [169314 Bytes] SA_ File
  • C:\temp\kwdot\Vendor.txt
    [37 Bytes] Text Document
  • C:\temp\kwdot\Ctl3d32.dl_
    [15600 Bytes] DL_ File
  • C:\temp\kwdot\CSWSK32.OC_
    [46461 Bytes] OC_ File
  • C:\temp\kwdot\Licence.tx_
    [1688 Bytes] TX_ File
  • C:\Program Files\whInstall\whInstaller.ini
    [760 Bytes] Configuration Settings
  • C:\Program Files\webHancer\Programs\whiehlpr.dll
    [106496 Bytes] Application Extension
  • C:\Program Files\webHancer\Programs\whinstaller.exe
    [294912 Bytes] Application
  • C:\Program Files\webHancer\Programs\whSurvey.exe
    [155648 Bytes] Application
  • C:\Program Files\whInstall\readme.txt
    [1533 Bytes] Text Document
  • C:\Program Files\whInstall\whAgent.exe
    [241664 Bytes] Application
  • C:\Program Files\whInstall\whAgent.inf
    [4883 Bytes] Setup Information
  • C:\Program Files\whInstall\whAgent.ini
    [17 Bytes] Configuration Settings
  • C:\Program Files\webHancer\Programs\whAgent.ini
    [210 Bytes] Configuration Settings
  • C:\temp\kwdot\Readme.tx_
    [542 Bytes] TX_ File
  • C:\temp\kwdot\StdOle2.tl_
    [7134 Bytes] TL_ File
  • C:\WINDOWS\webhdll.dll
    [40960 Bytes] Application Extension
  • C:\WINDOWS\whAgent.inf
    [4883 Bytes] Setup Information
  • C:\WINDOWS\whInstaller.exe
    [45056 Bytes] Application
  • C:\WINDOWS\whInstaller.ini
    [357 Bytes] Configuration Settings
  • C:\temp\kwdot\Vendor.tx_
    [1451 Bytes] TX_ File
  • C:\temp\kwdot\VBAJet32.dl_
    [10264 Bytes] DL_ File
  • C:\Program Files\whInstall\whiehlpr.dll
    [106496 Bytes] Application Extension
  • C:\Program Files\NavExcel\NavHelper\v2.0.4a\NHelper.htm
    [8023 Bytes] Firefox Document
  • C:\temp\kwdot\help\NH20040517.4a.yy.exe
    [201653 Bytes] Application
  • C:\temp\kwdot\help\STUNTB.exe
    [339968 Bytes] Application
  • C:\Program Files\whInstall\webhdll.dll
    [40960 Bytes] Application Extension
  • C:\Program Files\NavExcel\NavHelper\v2.0.4a\NHelper.dll
    [135168 Bytes] Application Extension
  • C:\Program Files\webHancer\Programs\whAgent.exe
    [241664 Bytes] Application
  • C:\Program Files\NavExcel\NavHelper\v2.0.4a\NHUpdater.exe
    [155648 Bytes] Application
  • C:\Program Files\NavExcel\NavHelper\v2.0.4a\v2.0.4a.cab
    [106818 Bytes] WinZip File
  • C:\Program Files\NavExcel Search Toolbar\NavExcelBar.dll
    [331776 Bytes] Application Extension
  • C:\Program Files\NavExcel Search Toolbar\settings.dat
    [1075 Bytes] DAT File
  • C:\Program Files\webHancer\Programs\readme.txt
    [1533 Bytes] Text Document
  • C:\Program Files\webHancer\Programs\SET28D.tmp
    [8292 Bytes] TMP File
  • C:\Program Files\webHancer\Programs\SET28F.tmp
    [1405 Bytes] TMP File
  • C:\Program Files\webHancer\Programs\SET293.tmp
    [581632 Bytes] TMP File
  • C:\Program Files\webHancer\Programs\SET295.tmp
    [159744 Bytes] TMP File
  • C:\Program Files\webHancer\Programs\license.txt
    [7572 Bytes] Text Document
  • C:\Program Files\webHancer\Programs\webhdll.dll
    [122880 Bytes] Application Extension
  • C:\temp\kwdot\help\whCC-2MGAMES.exe
    [227760 Bytes] Application
  • C:\temp\kwdot\OleAut32.dl_
    [320739 Bytes] DL_ File
  • C:\temp\kwdot\ODBCTL32.dl_
    [38635 Bytes] DL_ File
  • C:\temp\kwdot\ODBCJt32.dl_
    [131097 Bytes] DL_ File
  • C:\temp\kwdot\ODBCJI32.dl_
    [13144 Bytes] DL_ File
  • C:\temp\kwdot\NavExcel.txt
    [8943 Bytes] Text Document
  • C:\temp\kwdot\MSVBVM50.dl_
    [863705 Bytes] DL_ File
  • C:\temp\kwdot\MSRD2x35.dl_
    [156626 Bytes] DL_ File
  • C:\temp\kwdot\MSJtEr35.dl_
    [14052 Bytes] DL_ File
  • C:\temp\kwdot\MSJInt35.dl_
    [29113 Bytes] DL_ File
  • C:\temp\kwdot\Readme.txt
    [1469 Bytes] Text Document
  • C:\temp\kwdot\VB5DB.dl_
    [51568 Bytes] DL_ File
  • C:\temp\kwdot\MSVCRT40.dl_
    [183001 Bytes] DL_ File
  • C:\temp\kwdot\VB5StKit.dl_
    [16457 Bytes] DL_ File
  • C:\temp\kwdot\VB5FR.dl_
    [26847 Bytes] DL_ File
  • C:\temp\kwdot\DAO350.DL_
    [308501 Bytes] DL_ File
  • C:\temp\kwdot\UUCODE32.DL_
    [18300 Bytes] DL_ File
  • C:\temp\kwdot\MSJet35.dl_
    [721647 Bytes] DL_ File
  • C:\temp\kwdot\Typhoon.ex_
    [684444 Bytes] EX_ File
  • C:\temp\kwdot\TYPHOON.HL_
    [212899 Bytes] HL_ File
  • C:\temp\kwdot\THREED32.OC_
    [98555 Bytes] OC_ File
  • C:\temp\kwdot\Register.tx_
    [1122 Bytes] TX_ File
  • C:\temp\kwdot\ST5UNST.EX_
    [38134 Bytes] EX_ File
  • C:\temp\kwdot\setup1.ex_
    [73379 Bytes] EX_ File
  • C:\temp\kwdot\SETUP.LST
    [10597 Bytes] LST File
  • C:\temp\kwdot\SETUP.EXE
    [202240 Bytes] Application
  • C:\temp\kwdot\Save.tx_
    [114 Bytes] TX_ File
  • C:\temp\kwdot\Register.txt
    [832 Bytes] Text Document
  • C:\temp\kwdot\Typhoon.da_
    [224708 Bytes] DA_ File
  • C:\Program Files\1941 Operation Typhoon\TYPHOON.HLP
    [216476 Bytes] Help File
  • C:\temp\kwdot\ECLIPSEUI.OC_
    [154967 Bytes] OC_ File
  • C:\temp\kwdot\AsycFilt.dl_
    [74553 Bytes] DL_ File
  • C:\temp\kwdot\AS97POPUP.OC_
    [34113 Bytes] OC_ File
  • C:\Program Files\1941 Operation Typhoon\data\save\Save.txt
    [92 Bytes] Text Document
  • C:\Program Files\1941 Operation Typhoon\data\Typhoon.dat
    [702464 Bytes] DAT File
  • C:\temp\kwdot\ComCat.dl_
    [10146 Bytes] DL_ File
  • C:\Program Files\1941 Operation Typhoon\Vendor.txt
    [2320 Bytes] Text Document
  • C:\temp\kwdot\COMCTL32.OC_
    [315585 Bytes] OC_ File
  • C:\Program Files\1941 Operation Typhoon\Typhoon.exe
    [1428992 Bytes] Application
  • C:\Program Files\1941 Operation Typhoon\ST5UNST.LOG
    [7714 Bytes] Text Document
  • C:\Program Files\1941 Operation Typhoon\Register.txt
    [1671 Bytes] Text Document
  • C:\Program Files\1941 Operation Typhoon\Readme.txt
    [687 Bytes] Text Document
  • C:\Program Files\1941 Operation Typhoon\Licence.txt
    [2593 Bytes] Text Document
  • C:\Program Files\1941 Operation Typhoon\File_ID.DIZ
    [895 Bytes] DIZ File
  • C:\Program Files\1941 Operation Typhoon\data\Default.sav
    [757760 Bytes] SAV File
  • C:\temp\kwdot\kwd.ico
    [3262 Bytes] Icon
  • C:\temp\kwdot\MSComFR.dl_
    [4471 Bytes] DL_ File
  • C:\temp\kwdot\MFC42.DL_
    [556612 Bytes] DL_ File
  • C:\temp\kwdot\MFC40Loc.dl_
    [14024 Bytes] DL_ File
  • C:\temp\kwdot\MFC40.dl_
    [540268 Bytes] DL_ File
  • C:\temp\kwdot\Licence.txt
    [4587 Bytes] Text Document
  • C:\temp\kwdot\CmCtlFR.dl_
    [26443 Bytes] DL_ File
  • C:\temp\kwdot\kwd.url
    [87 Bytes] Internet Shortcut
  • C:\temp\kwdot\MSCOMM32.OC_
    [55247 Bytes] OC_ File
  • C:\temp\kwdot\File_ID.DIZ
    [37 Bytes] DIZ File
  • C:\Program Files\whInstall\whInstaller.exe
    [45056 Bytes] Application
  • C:\Program Files\whInstall\license.txt
    [7572 Bytes] Text Document
  • C:\Program Files\whInstall\whSurvey.exe
    [155648 Bytes] Application

Additional information might be found here:

Search at Google for Adware 1941 Operation Typhoon Search at Google for Adware 1941 Operation Typhoon
Search at Bing for Adware 1941 Operation Typhoon Search at Bing for Adware 1941 Operation Typhoon
Search at Yahoo for Adware 1941 Operation Typhoon Search at Yahoo for Adware 1941 Operation Typhoon

How can I protect myself from Adware 1941 Operation Typhoon?

Important!
You essentially need an antivirus product, that is not only able to clean infections, but also protect your PC permanently from new dangers. This is the only way to prevent data loss and unnecessary hassle and costs of new installations of your operating system.

Take your chance and buy the multiple awarded protection software Emsisoft Anti-Malware today!

Only $40 for the security of your computer.

Buy Emsisoft Anti-Malware online:

Buy Emsisoft Anti-Malware now

Trust only on the best protection software!

Spring Offer!

Don't miss this: To your bought 1-year license of Emsisoft Anti-Malware or Emsisoft Internet Security Pack or higher you can now get a free license of the CyberGhost Anonymizer for free.
Your advantage: Surf anonymously and visit websites that are restricted in your country.

Only a few days left! Order here

Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - Q1-Q3 2011
More independent reviews of anti-malware software