An application change has been allowed

T

Tobias

Hello! Could someone explain why I get a notice from MS
Antispyware every time I log on to my coputer. The notice
say that "MSAS has allowed the Internet Explorer Shell
Browser Norton AntiVirus (navshext.dll) to be installed."
After the notice dissapeares the computer connects to the
internet by itself!
Please help me to stop this!
Thank you!
Regards, Tobias.
 
E

Engel

Hello Tobias

NavShExt.dll file information

The process Norton AntiVirusNAVShellExt Module belongs to
the software Norton AntiVirus by Symantec Corporation
(www.symantec.com).

Description: NavShExt.dll is located in a subfolder
of "C:\Program Files" or sometimes in a subfolder of C:\
or in a subfolder of the "My Files" folder - common is
C:\Program Files\Norton AntiVirus\ or C:\Program
Files\Norton SystemWorks\Norton AntiVirus\.

Known file sizes on Windows XP are 218736 bytes (38% of
all occurrence), 103368 bytes, 112248 bytes, 102400 bytes,
218240 bytes, 103552 bytes, 210048 bytes, 111784 bytes,
103528 bytes, 103592 bytes.

This .dll file is a Browser Helper Object (BHO) that runs
automatically every time you start your Internet browser.

BHOs are not stopped by personal firewalls, because they
are identified by the firewall as your browser itself.

BHOs are often used by adware and spyware. The unique ID
of this BHO is BDF3E430-B101-42AD-A544-FADC6B084872.

The program has no visible window.

NavShExt.dll is not a Windows core file.

File NavShExt.dll is able to monitor Internet browser.

The file is a Verisign signed file.

The file is digitally signed.

Therefore the technical security rating is 6% dangerous.

This legitimate BHO (NavShExt.dll) is related to Norton
Antivirus

Important: Some malware can camouflage themselves as
NavShExt.dll, particularly if they are located in
c:\windows or c:\windows\system32 folder. Thus check the
NavShExt.dll process on your pc whether it is pest.
 
D

Dallas Dees

If you want to remove the Norton BrowserHelperObject
(BHO), check out www.majorgeeks.com for a little program
called bhodemon. It will let you see all of the BHOs
currently installed in your browser and let you remove
malicious ones and disable ones you don't want.
Since the program is running at startup, you might
also want to go to www.mlin.net and download the Startup
Control Panel, if you are using one of the newer Windows
OS's, i.e., XP, 2000, etc. That utility will let you
alter what runs at the system startup. Just be sure you
know the name of the application running.

Hope that helps,
Dallas
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top