Deleting BHOs

Here's the list:

--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---



{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} ()
BHO name:
CLSID name:
description: Adobe Acrobat reader
classification: Legitimate
known filename: AcroIEhelper.ocx<br>AcroIEhelper.dll
info link: http://www.adobe.com/products/acrobat/readstep2.html
info source: TonyKlein

{549B5CA7-4A86-11D7-A4DF-000874180BB3} ()
BHO name:
CLSID name:
Path:
Long name: __BHODemonDisabled

{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
BHO name:
CLSID name: SSVHelper Class
Path: C:\Program Files\Java\jre1.5.0_09\bin\
Long name: ssv.dll
Short name:
Date (created): 10/12/2006 3:10:58 AM
Date (last access): 12/10/2006 1:39:26 PM
Date (last write): 10/12/2006 3:25:44 AM
Filesize: 434279
Attributes: archive
MD5: D62E335F137D9E0F9F4DBE09564959B1
CRC32: 72699310
Version: 5.0.90.3

{A8F38D8D-E480-4D52-B7A2-731BB6995FDD} (NAV Helper)
BHO name: NAV Helper
CLSID name: CNavExtBho Class
Path: C:\Program Files\Norton AntiVirus\
Long name: NAVSHEXT.DLL
Short name:
Date (created): 9/23/2005 6:37:48 PM
Date (last access): 12/10/2006 1:06:58 PM
Date (last write): 10/17/2006 1:44:30 PM
Filesize: 140960
Attributes: archive
MD5: BE517CE3FCE02A4701DC63D0C9949C0F
CRC32: F60FBE38
Version: 12.6.0.1

{BDF3E430-B101-42AD-A544-FADC6B084872} ()
BHO name:
CLSID name:
description: Norton Antivirus
classification: Legitimate
known filename: NavShExt.dll
info link: http://www.symantec.com/nav/nav_9xnt/
info source: TonyKlein

{FDD3B846-8D59-4ffb-8758-209B6AD74ACC} ()
BHO name:
CLSID name:
description: Microsoft Money
classification: Open for discussion
known filename: mnyviewer.dll
info link: http://www.microsoft.com/money/default.asp
info source: TonyKlein
Path:
Long name: __BHODemonDisabled

Can I delete acrobat reader BHO? I uninstalled Acrobat reader a while ago, and use Foxit. I do have Adobe photoshop elements.

Second one 549B5CA7-4A86-11D7-A4DF-000874180BB3 was disbled when I had the program BHO Demon. Now I don't now if I can delete it? No idea what program it was associated with.

FDD3B846-8D59-4ffb-8758-209B6AD74ACC For Microsoft Money. Do I need to keep that? I don't use the program. Would it recreate itself if needed, if I decided to use Money? It was disabled by BHO Demon too.

If it's okay to delete these, where is the best place to delete them? Using SpyBot, Winpatrol? Startup list?

 

None are needed? If some of the software I have use BHOs will they just be recreated?

 

My guess is that the MS Money one is used for online banking purposes. If you don't use it, it's not needed. However, if in the future you decided to try it (online banking) , my guess is you'd have to reinstall it using the Money CD.

The Acrobat Reader one isn't necessary either if you use Foxit. If you ever went back to Acrobat Reader, it would be installed again when you installed Acrobat Reader.

The one that you don't know what it belongs to? Well, if it were me and I'd had it disabled for a while and never missed it, I wouldn't be afraid to get rid of it. You'll have to be the judge though.

 

I deleted the one for Acrobat Reader and the one I didn't know which program it had been associated with. It has been disabled for a very long time so I probably won't miss it. I left the one associated with Money.

So do these BHO's get installed with installation of a program? Or is there another way they get installed?

 

Hi Alicia,

Yes, that's how they get installed.

Regards - Charles

 

They can also be installed via drive by downloads, by malicious sites, without you being aware, if you have no protection.

The BHOs you mentioned are of course, not malicious programs.

The second BHO in the list can be deleted. It is classified as an 'unidentifiable regsitry key' installed by malware. And it's been that way since I have ever done HJT analysis. Odd that no one has ever been able to associate the BHO with any type of application.

 

Thanks for all your help guys.