x
48h OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
SPECIAL OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
HALLOWEEN OFFER
take advantage of our
terrific discounts
BUY NOW AND GET A 50% OFF
x
CHRISTMAS OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 40% OFF
x
SPECIAL OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 50% OFF
x
BLACKFRIDAY OFFER
Buy the best antivirus
at the best price
TODAY ONLY UP TO 70% OFF
x
CYBERMONDAY OFFER
Buy the best antivirus
at the best price
(Only for homeusers)
TODAY ONLY UP TO 70% OFF
Active Scan. Scan your PC free
Panda Protection

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

SAHAgent

Threat LevelModerate threatDamageHighDistributionNot widespread
Common name:SAHAgent
Technical name:Adware/SAHAgent
Threat level:Low
Type:Spyware
Subtype: Adware
Effects:  

It obtains information about user's Internet connection, modifies the search results showed in the browser and displays advertising pop-ups. It exploits vulnerabilities in order to be automatically downloaded when accessing certain websites or can be bundled with certain Internet programs.

Affected platforms:

Windows XP/2000/NT/ME/98

First detected on:Jan. 14, 2004
Detection updated on:May 2, 2009
StatisticsNo
Proactive protection:
Yes, using TruPrevent Technologies

Brief Description 

    

SAHAgent is an adware program that installs itself as LSP (Layered Service Provider) on the affected computer, in order to harvest users' information about their connection, such as Internet usage, pages viewed, phone connection details, inventory of the applications installed in the computer, etc; to modify the search results obtained through the web browser.

Additionally, it displays advertising pop-ups on screen.

SAHAgent can be installed in the affected computer without user consent, as it is automatically downloaded while accessing certain malicious websites that use vulnerability exploits in order to affect computers or it also can be bundled with certain Internet programs, such as peer-to-peer (P2P) file sharing networks, among others.

 

Note:

LSP (Layered Service Provider) is a Windows feature that allows to specify a number of programs, in order to process all the TCP/IP traffic taking place between Internet and the applications that are accessing Internet (such as the web browser, the email client, etc.).

For example, it could be specified a computer security program, which analyses the traffic in search for viruses or other threats before transferring it to the final application of the traffic.

However, this structure can also be used by adware and spyware programs, in order to intercept the communication across the Internet, and, what is worse, if they are deleted without taking precautions, the Internet connection will stop working indefinitely.

Visible Symptoms 

    

SAHAgent is difficult to recognize, as it does not display any messages or warnings that indicate it has reached the computer.

However, if advertising pop-ups are displayed on screen while browsing the Internet, your computer may be affected by SAHAgent.