Detection Names :	Gen:heur.navipromo.3, Gen:variant.navipromo.2
Category:	Spyware
Type:	Adware
Platform:	W32

This program delivers advertising content to the user. It is usually annoying but harmless, unless it is combined with spyware or trackware.

Adware:W32/Navipromo is an advertisement display program that runs in stealth and hides from the user by using rootkit techniques. The software reports back visited URLs to the server and displays pop-up and pop-under advertisements.

Activity

To perform its advertising-display function, the program sends back visited URLs and receives back links to websites with related advertisements. These are displayed as pop-up or pop-under windows to the user.

Rootkit

The software uses rootkit techniques to hide the files, processes and registry keys from the user. F-Secure's rootkit detection program, Blacklight, is capable of displaying the hidden files and processes and disabling the rootkit technique.