What is NavExcel

Download WiperSoft Antispyware Malware Remediation Tool

Remove NavExcel manually

Uninstall NavExcel from Windows 10

Uninstall NavExcel from Windows 8/8.1

Uninstall NavExcel from Windows 7

Get Professional Support

Read Comments

Threat's profile

NavExcel intrusion method

NavExcel installs on your PC along with free software. This method is called "bundled installation". Freeware offers you to install additional module (NavExcel). Then if you fail to decline the offer it starts hidden installation. NavExcel copies its file(s) to your hard disk. Its typical file name is XTServiceUpdate.exe . Sometimes it creates new startup key with name NavExcel and value XTServiceUpdate.exe . You can also find it in your processes list with name XTServiceUpdate.exe or NavExcel. Also, it can create folder with name NavExcel under C:\Program Files\ or C:\ProgramData. After installation NavExcel starts displaying ads, pop-ups, banners on your PC or in browsers. It is recommended to remove NavExcel immediately.

Download Wipersoft Antispyware

Download this advanced removal tool and solve problems with NavExcel and XTServiceUpdate.exe (download of fix will start immediately):

* WiperSoft Antispyware was developed to remove threats like NavExcel in automatic mode. Remover has active module to protect PC from hijackers, trojans, ransomware and other viruses. Trial version of Wipersoft provides detection of computer viruses for FREE. To remove malware, you have to purchase the full version of Wipersoft.

Features of WiperSoft Antispyware

Removes all files created by viruses.

Removes all registry entries created by viruses.

You can activate System and Network Guards and forget about malware.

Can fix browser problems and protect browser settings.

Removal is guaranteed - if Wipersoft fails ask for FREE support.

24/7 Spyware Helpdesk Support included into the package.

Try MalwareBytes Premium

Download antimalware designed specifically to remove threats like NavExcel and XTServiceUpdate.exe (download of fix will start immediately):

Features of MALWAREBYTES PREMIUM

Removes all files created by NavExcel.

Removes all registry entries created by NavExcel.

Fixes browser redirection and hijack if needed.

"Toolbar Remover" tool will help you get rid of unwanted browser extensions.

Removal is guaranteed - if MALWAREBYTES PREMIUM fails ask for FREE support.

24/7 Helpdesk Support and 5 hours of Remote Support via GoToAssist included into the package.

Let our support team solve your problem with NavExcel and remove NavExcel right now!

Submit support ticket below and describe your problem with NavExcel. Support team will offer you solution in several minutes and give a step-by-step instruction on how to remove NavExcel. Trouble-free tech support with over 10 years experience removing malware.

Submit support ticket

Threat's description and solution are developed by Security Stronghold security team.

Here you can also learn:

Technical details of NavExcel threat.

Manual NavExcel removal.

Download NavExcel Removal Tool.

How to remove NavExcel manually

This problem can be solved manually by deleting all registry keys and files connected with NavExcel, removing it from starup list and unregistering all corresponding DLLs. Additionally missing DLL's should be restored from distribution in case they are corrupted by NavExcel.

To get rid of NavExcel, you should:

1. Kill the following processes and delete the appropriate files:

• navapp.exe
• navexcel.txt
• nhuninstaller.exe-02d4f01f.pf
• rundll32.exe-3ae7dc34.pf.
• nhelper.dll
• nhelper.htm
• nhuninstaller.exe
• nhupdater.exe
• nxstinst.exe
• remover.dll
• navexcelbar.dll
• v2.0.4c.cab

Warning: you should delete only those files which checksums are listed as malicious. There may be valid files with the same names in your system. We recommend you to use WiperSoft Antispyware Malware Remediation Tool for safe problem solution.

**Trial version of Wipersoft provides detection of computer viruses for FREE. To remove malware, you have to purchase the full version of Wipersoft.

2. Delete the following malicious folders:

• %programfiles%\navexcel\navhelper\v2.0.4c\
• %programfiles%\nh\
• %profile%\fleok\
• %programfiles%\navexcel\
• %programfiles%\navexcel\navhelper\
• %programfiles%\navexcel\navhelper\v2.0.2\
• %programfiles%\navexcel search toolbar\
• %programfiles%\navexcel\navhelper\v2.0.4\
• %programfiles%\navexcel\navhelper\v2.0.4c\

3. Delete the following malicious registry entries and\or values:

• Key: CLSID\{b5ef836b-7582-4d82-9246-17f6c40ddf0f}
• Key:
  clsid\{c1e58a84-95b3-4630-b8c2-d06b77b7a0fc} appid {710bcb5b-8c6c-483e-a4f5-faf083b13184}
  Value: @
• Key: navexcel.navhelper navhelper class\software\classes\navexcel.navhelper
  Value: @
• Key: navexcel.navhelper.1 navhelper class
  Value: @
• Key: software\microsoft\windows\currentversion\explorer\browser helper objects
  \{c1e58a84-95b3-4630-b8c2-d06b77b7a0fc}
  Value: @
• Key: software\classes\appid\nhelper.dll\appid
  Value: @
• Key: SOFTWARE\Classes\CLSID\{C1E58A84-95B3-4630-B8C2-D06B77B7A0FC}
• Key: software\classes\clsid\{c1e58a84-95b3-4630-b8c2-d06b77b7a0fc}\appid
  Value: @
• Key: software\classes\interface\{20f36af3-3486-4bb6-8bcb-f1f8abe74d07}
  Value: @
• Key: software\classes\typelib\{fa4de133-d3c3-4ed4-92d1-cd4dde839ab3}
  Value: @
• Key: SOFTWARE\Microsoft\Code Store Database\Distribution Units\NavCab
• Key: software\microsoft\code store database\distribution units\navcab\contains
  \files\c:\windows\downloaded program files\conflict.1\navinst2.ocx
  Value: @
• Key: software\microsoft\code store database\distribution units\navcab\contains
  \files\c:\windows\downloaded program files\conflict.2\navinst2.ocx
  Value: @
• Key: software\microsoft\code store database\distribution units\navcab\contains
  \files\c:\windows\downloaded program files\conflict.4\navinst2.ocx
  Value: @
• Key: software\microsoft\code store database\distribution units\navcab\contains
  \files\c:\windows\downloaded program files\navinst2.ocx
  Value: @
• Key: software\microsoft\code store database\distribution units\navcab\downloadinformation
  \codebase
  Value: @
• Key: software\microsoft\code store database\distribution units\navcab\downloadinformation
  \osd
  Value: @
• Key:
  software\microsoft\code store database\distribution units\navcab\installedversion
  Value: @
• Key: software\microsoft\code store database\distribution units\navcab\installedversion
  \lastmodified
  Value: @
• Key:
  software\microsoft\code store database\distribution units\navcab\installer
  Value: @
• Key:
  software\microsoft\code store database\distribution units\navcab\systemcomponent
  Value: @
• Key: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
  \{C1E58A84-95B3-4630-B8C2-D06B77B7A0FC}
• Key: software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/conflict.1/navinst2.ocx
  \.owner
  Value: @
• Key: software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/conflict.1/navinst2.ocx
  \navcab
  Value: @
• Key: software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/conflict.2/navinst2.ocx
  \.owner
  Value: @
• Key: software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/conflict.2/navinst2.ocx
  \navcab
  Value: @
• Key: software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/conflict.4/navinst2.ocx
  \.owner
  Value: @
• Key: software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/conflict.4/navinst2.ocx
  \navcab
  Value: @
• Key: software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/navinst2.ocx
  \.owner
  Value: @
• Key: software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/navinst2.ocx
  \navcab
  Value: @
• Key: software\microsoft\windows\currentversion\shareddlls\c:\windows\downloaded program files
  \conflict.4\navinst2.ocx
  Value: @
• Key: SOFTWARE\NavExcel
• Key: software\navexcel\navhelper\v2.0.4c nhelper.dll nhelper.dll\software\classes
  \navexcel.navhelper
  Value: @
• Key: software\navexcel\navhelper\v2.0.4c\nhelper.dll
  Value: @
• Key: software\navexcel\navhelper\v2.0.4c\nhelper.htm
  Value: @
• Key: software\navexcel\navhelper\v2.0.4c\nhuninstaller.exe
  Value: @
• Key: software\navexcel\navhelper\v2.0.4c\nhupdater.exe
  Value: @
• Key: software\navexcel\navhelper\v2.0.4c\v2.0.4c.cab
  Value: @
• Key: AppID\{710BCB5B-8C6C-483E-A4F5-FAF083B13184}
• Key: CLSID\{5AA06644-BC46-4220-A460-47A6EB47C96D}
• Key: Interface\{20F36AF3-3486-4BB6-8BCB-F1F8ABE74D07}
• Key: navexcel.navhelper
• Key: navexcel.navhelper.1
• Key: navinst2.ocx
• Key: navinstaller2.installer
• Key: navinstaller2.installer.1
• Key: nhelper.dll
• Key: TYPELIB\{2f9ce842-f13d-41cb-a977-378ad75f11af}
• Key: TypeLib\{FA4DE133-D3C3-4ED4-92D1-CD4DDE839AB3}
• Key: TypeLib\{209B1CEA-8B2E-4596-9B35-A4A7DB611EB2}\1.0
• Key: TypeLib\{209B1CEA-8B2E-4596-9B35-A4A7DB611EB2}\1.0\FLAGS
• Key: TypeLib\{209B1CEA-8B2E-4596-9B35-A4A7DB611EB2}\1.0\0\win32
• Key: TypeLib\{209B1CEA-8B2E-4596-9B35-A4A7DB611EB2}\1.0\HELPDIR
• Key: Interface\{508EBE65-E39D-4363-8041-E647B4F6F4E1}
• Key: Interface\{508EBE65-E39D-4363-8041-E647B4F6F4E1}\ProxyStubClsid
• Key: Interface\{508EBE65-E39D-4363-8041-E647B4F6F4E1}\ProxyStubClsid32
• Key: Interface\{508EBE65-E39D-4363-8041-E647B4F6F4E1}\TypeLib
  Value: Version
• Key: Interface\{4D6CED50-D6AE-40DA-B87F-235593FC1F28}
• Key: Interface\{4D6CED50-D6AE-40DA-B87F-235593FC1F28}\ProxyStubClsid
• Key: Interface\{4D6CED50-D6AE-40DA-B87F-235593FC1F28}\ProxyStubClsid32
• Key: Interface\{4D6CED50-D6AE-40DA-B87F-235593FC1F28}\TypeLib
  Value: Version
• Key: SOFTWARE\NavExcel Ltd\NavExcel Search Toolbar\InstallShow
• Key: SOFTWARE\NavExcel Ltd\NavExcel Search Toolbar\InstallPosition
• Key: SOFTWARE\NavExcel Ltd\NavExcel Search Toolbar\ShowIntro
• Key: Software\NavExcel Ltd\NavExcel Search Toolbar\LastUpdateCheck
• Key: CLSID\{5AA06644-BC46-4220-A460-47A6EB47C96D}\ProgID
• Key: CLSID\{5AA06644-BC46-4220-A460-47A6EB47C96D}\VersionIndependentProgID
• Key: CLSID\{5AA06644-BC46-4220-A460-47A6EB47C96D}\InprocServer32
  Value: ThreadingModel
• Key: CLSID\{5AA06644-BC46-4220-A460-47A6EB47C96D}\TypeLib
• Key: CLSID\{D80C4E21-C346-4E21-8E64-20746AA20AEB}
• Key: CLSID\{D80C4E21-C346-4E21-8E64-20746AA20AEB}\ProgID
• Key: CLSID\{D80C4E21-C346-4E21-8E64-20746AA20AEB}\VersionIndependentProgID
• Key: CLSID\{D80C4E21-C346-4E21-8E64-20746AA20AEB}\InprocServer32
  Value: ThreadingModel
• Key: CLSID\{D80C4E21-C346-4E21-8E64-20746AA20AEB}\TypeLib
• Key:
  SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NavExcel Search Toolbar
  Value: DisplayName
• Key:
  SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NavExcel Search Toolbar
  Value: UninstallString
• Key:
  SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NavExcel Search Toolbar
  Value: NoModify
• Key:
  SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NavExcel Search Toolbar
  Value: NoRepair
• Key: SOFTWARE\NavExcel Ltd\NavExcel Search Toolbar
  Value: AutoUpdate
• Key:
  SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NavExcel Search Toolbar
  Value: UninstallString
• Key: software\NavExcel Ltd\\NavExcel Search Toolbar
  Value: SList
• Key: software\NavExcel Ltd\\NavExcel Search Toolbar
  Value: InstallShow
• Key: software\NavExcel Ltd\\NavExcel Search Toolbar
  Value: Updating
• Key: software\NavExcel Ltd\\NavExcel Search Toolbar
  Value: AutoUpdate
• Key: software\NavExcel Ltd\\NavExcel Search Toolbar
  Value: LastSearch
• Key: Software\Microsoft\Internet Explorer\Toolbar
  Value: {5AA06644-BC46-4220-A460-47A6EB47C96D}

Warning: if value is listed for some registry entries, you should only clear these values and leave keys with such values untouched. We recommend you to use WiperSoft Antispyware Malware Remediation Tool for safe problem solution.

Uninstall NavExcel related programs from Control Panel

We recommend you to check list of installed programs and search for NavExcel entry or other unknown and suspicious programs. Below are instructions for different version if Windows. In some cases adware programs are protected by malicious service or process and it will not allow you to uninstall it. If NavExcel won't uninstall or gives you error message that you do not have sufficient rights to do this perform below instructions in Safe Mode or Safe Mode with Networking or use WiperSoft Antispyware Malware Remediation Tool.

Windows 10

• Click on the Start menu and choose Settings

• Then click on System and choose Apps & Features in the left column

• Find NavExcel under in the list and click Uninstall button near it.

• Confirm by clicking Uninstall button in opened window if necessary.

Windows 8/8.1

• Right click on the bottom left corner of the screen (while on your desktop)

• In the menu choose Control Panel

• Click Uninstall a program under Programs and Features.

• Locate NavExcel or other related suspicious program.

• Click Uninstall button.

• Wait until uninstall process is complete.

Windows 7/Vista

• Click Start and choose Control Panel.

• Choose Programs and Features and Uninstall a program.

• In the list of installed programs find NavExcel

• Click Uninstall button.

Windows XP

• Click Start

• In the menu choose Control Panel

• Choose Add / Remove Programs.

• Find NavExcel related entries.

• Click Remove button.

Protect computer and browsers from infection

Adware threats like NavExcel are very wide-spread, and unfortunatelly many antiviruses fail to detect it. To protect your computer from future infection we recommend you to use SpyHunter, it has active protection module and browser settings guard. It does not conflict with any antiviruses and creates additional shield against threats like NavExcel.