Home Malware Programs Adware MarketResearchHelper

MarketResearchHelper

Posted: December 19, 2013

Threat Metric

Threat Level: 2/10
Infected PCs: 1,995
First Seen: December 23, 2013
Last Seen: July 12, 2023
OS(es) Affected: Windows

MarketResearchHelper is an add-on that tracks your basic browser behavior, supposedly to provide sociological research information to an unspecified group of scientists. This high-minded ideal falls flat on its face when compared with the actual functions from MarketResearchHelper, which, incongruously, are meant to load advertisements into your browser. Like any common adware program, MarketResearchHelper may be a problem for your browser's performance and for your online security, and malware experts have little difficulty in suggesting that you delete MarketResearchHelper with the anti-malware product of your choice, rather than opt in to its 'scientific research.'

The Helper that Helps Itself to Easy Money at Your Expense

MarketResearchHelper is a particularly ironic case of adware, with a website marketing plan that directly contradicts its actual set of features. Although MarketResearchHelper claims to provide research material for increasing understanding of human behavior, and explicitly claims not to use advertising to support itself, a close look at its user agreement will find that MarketResearchHelper actually uses significant advertising functions. Injecting advertisements into pages that don't host them naturally, loading pop-ups or changing your browser's settings automatically all are some of the main issues you may expect from MarketResearchHelper.

Hypocrisy isn't MarketResearchHelper's only problem, and malware analysts also have connected MarketResearchHelper to many similar adware add-ons throughout the Web. These programs appear to be designed by the same group of developers, always for the purpose of gathering advertising revenue, although these products don't mention each other – most likely an attempt to avoid being identified. Some of MarketResearchHelper's most recently confirmed relatives include Zippy Zarp, EnhanceTronic, Larparus, VeberGreat, JoomiWeb and SolteraTop.

Helping Yourself out of the MarketResearchHelper Market

With the regularity with which malware researchers see advertisements from similar programs compromising vulnerable PCs, you would have to seek arduously for a justification for not removing MarketResearchHelper. However, any removal attempts that don't use qualified anti-malware or anti-adware products may be incomplete.
Not all advertisements are equal, and dealing with MarketResearchHelper also means being cautious about potential attacks that could be delivered through its advertisements. Drive-by-download attacks disguised as software updates, fraudulent system warning pop-ups and phishing attacks disguised as valuable offers are some of the usual PC threats known to use advertisement networks. Blocking scripts and using other common browser security protocols always is encouraged by malware researchers for depriving these PC threats of easy access routes to new victims.

MarketResearchHelper may be installed by itself, with your permission, but this isn't a likely scenario. Most often, MarketResearchHelper may be installed through bundles with other programs. Safe downloading behavior that avoids known adware distribution points (such as free software sites with bad reputations) can offer an easy protection against a case of MarketResearchHelper advertisements.

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to MarketResearchHelper may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

* See Free Trial offer below. EULA and Privacy/Cookie Policy.

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES(x86)%\MarketResearchHelper\updateMarketResearchHelper.exe File name: updateMarketResearchHelper.exe
Size: 111.92 KB (111920 bytes)
MD5: 3eaf90cb698ac837a3f139c414438421
Detection count: 316
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\MarketResearchHelper
Group: Malware file
Last Updated: June 30, 2014
%PROGRAMFILES%\MarketResearchHelper\bin\utilMarketResearchHelper.exe File name: utilMarketResearchHelper.exe
Size: 80.68 KB (80688 bytes)
MD5: b48e08ec6ea6ffcf95154594e95b77a2
Detection count: 101
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\MarketResearchHelper\bin
Group: Malware file
Last Updated: June 30, 2014
%PROGRAMFILES%\MarketResearchHelper\bin\MarketResearchHelper.PurBrowse.exe File name: MarketResearchHelper.PurBrowse.exe
Size: 239.4 KB (239408 bytes)
MD5: 135b807e7216fbb814cbc9c845516b3e
Detection count: 35
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\MarketResearchHelper\bin
Group: Malware file
Last Updated: June 30, 2014

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{085C4D33-AB97-4165-9275-6174CF6B530D}{2ACC2EF3-B127-4F5B-B18C-47763737CB19}{e71ecfaa-158b-4027-9a01-1959834a82db}HKEY..\..\..\..{RegistryKeys}Software\MarketResearchHelperSoftware\Microsoft\Internet Explorer\Approved Extensions\{e71ecfaa-158b-4027-9a01-1959834a82db}SOFTWARE\Microsoft\Tracing\MarketResearchHelper_RASAPI32SOFTWARE\Microsoft\Tracing\MarketResearchHelper_RASMANCSSOFTWARE\Microsoft\Tracing\updateMarketResearchHelper_RASAPI32SOFTWARE\Microsoft\Tracing\updateMarketResearchHelper_RASMANCSSOFTWARE\Microsoft\Tracing\utilMarketResearchHelper_RASAPI32SOFTWARE\Microsoft\Tracing\utilMarketResearchHelper_RASMANCSSOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{e71ecfaa-158b-4027-9a01-1959834a82db}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{e71ecfaa-158b-4027-9a01-1959834a82db}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{e71ecfaa-158b-4027-9a01-1959834a82db}SOFTWARE\Wow6432Node\Microsoft\Tracing\MarketResearchHelper_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\MarketResearchHelper_RASMANCSSOFTWARE\Wow6432Node\Microsoft\Tracing\updateMarketResearchHelper_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\updateMarketResearchHelper_RASMANCSSOFTWARE\Wow6432Node\Microsoft\Tracing\utilMarketResearchHelper_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\utilMarketResearchHelper_RASMANCSSYSTEM\ControlSet001\services\eventlog\Application\Update MarketResearchHelperSYSTEM\ControlSet001\services\eventlog\Application\Util MarketResearchHelperSYSTEM\CurrentControlSet\services\eventlog\Application\Update MarketResearchHelperSYSTEM\CurrentControlSet\services\eventlog\Application\Util MarketResearchHelper

Additional Information

The following directories were created:
%PROGRAMFILES%\MarketResearchHelper%PROGRAMFILES(x86)%\MarketResearchHelper
Loading...
Spywareremove.com uses cookies to provide you with a better browsing experience and analyze how users navigate and utilize the Site. By using this Site or clicking on "OK", you consent to the use of cookies. Learn more.