NHFA

NHFA has a search function and provides search results for paid advertisers. It adds a third-party utility bar to the web browser. It also change the browser and shows the advertisements.0

General information:

Malware Name: NHFA
Malware Type: Toolbar
Company Name: Nhfa.ourtoolbar.com
Company URL: http://nhfa.ourtoolbar.com/
Threat Level: Moderate Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

Nhfa.ourtoolbar.com provides us the toolbar that includes a cookie cleaner, a history cleaner, and a cache cleaner. It also gets us notifies when we receive new e-mails to our POP3, Yahoo!, Gmail, or Hotmail accounts. We can also get instant access to our site from any site on the web. We can chat with other users who have the toolbar installed. We can search from anywhere on the web.

Spyware Description:

NHFA has a search function and provides search results for paid advertisers. It adds a third-party utility bar to the web browser. It also change the browser and shows the advertisements.0

Characteristics/Symptoms:

    -> It has a search function and provides search results for paid advertisers -> Track browsing habits -> Adds a third-party utility bar to the web browser -> Changes browser0

Additional information might be found here:

google Search at Google for NHFA
bing Search at Bing for NHFA
yahoo Search at Yahoo for NHFA

Processes Running:

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\nhfa\UNWISE.EXE 153088 Application
C:\Program Files\nhfa\tbnhfa.dll 1182744 Application Extension

Folder information Created after Installation:

Folder Location

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_CURRENT_USER Software hfa oolbar Visible
HKEY_LOCAL_MACHINE SOFTWARE hfa oolbar WebServerUrl
HKEY_LOCAL_MACHINE SOFTWARE hfa oolbar Write us link