ThreatExpert's Statistics for not-a-virus:AdWare.Win32.IEHlpr.aa [Kaspersky Lab]:

not-a-virus:AdWare.Win32.IEHlpr.aa [Kaspersky Lab] is also known as:

Threat Alias	Number of Incidents
not-a-virus:AdWare.Win32.Agent.ap [Kaspersky Lab]	2
Trojan-Downloader.Win32.Agent.bcd [Kaspersky Lab]	2
Adware.IEhlpr [Symantec]	1
not-a-virus:AdWare.Win32.Boran.z [Kaspersky Lab]	1
not-a-virus:AdWare.Win32.Cinmus.j [Kaspersky Lab]	1
not-a-virus:AdWare.Win32.WSearch.j [Kaspersky Lab]	1
not-a-virus:Downloader.Win32.Agent.g [Kaspersky Lab]	1
TROJ_MULDROP.LX [Trend Micro]	1
Trojan.Win32.VB.sj [Kaspersky Lab]	1
Trojan-Downloader.Win32.Agent.aww [Kaspersky Lab]	1
Trojan-Downloader.Win32.Delf.beq [Kaspersky Lab]	1
Trojan-Downloader.Win32.QQHelper.va [Kaspersky Lab]	1

not-a-virus:AdWare.Win32.IEHlpr.aa [Kaspersky Lab] has the following possible countries of origin:

Origin		Number of Incidents
	China	1
	Ireland	1

not-a-virus:AdWare.Win32.IEHlpr.aa [Kaspersky Lab] is known to be created as:

%CommonAppData%\microsoft\office\navdata\webnav_2001.dll

Note: %CommonAppData% is a variable that refers to the file system directory containing application data for all users. A typical path is C:\Documents and Settings\All Users\Application Data.