ShopNav Hijacker

Discussion in 'SpywareBlaster & Other Forum' started by david96, Jul 21, 2003.

Thread Status:
Not open for further replies.
  1. david96

    david96 Registered Member

    Joined:
    Jun 28, 2003
    Posts:
    1
    Vendor ShopNav Highjacker
    Type Regkey
    Category Malware
    Object HKEY_CLASSES_ROOT:Shearchook\
    .1\
    URL Search
    URL Search
    4 Keys 674bytes
    AdAware6.0 will find itand delete. It does not seem to be in SG and SB databases.SpyBot does not locate it either.Any ideas where it comes from?
     
  2. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,331
    Location:
    Netherlands
    Hi david 96,

    I found this about it:
    http://www.doxdesk.com/parasite/ShopNav.html
    Seems to come bundled with Grokster (maybe others as well).

    Regards,

    Pieter
     
  3. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,350
    Location:
    The Netherlands
    ShopNav/SRNG is however in the SpyBot S&D database, and it ought to remove it as well, once properly updated.
     

    Attached Files:

    • SN.jpg
      SN.jpg
      File size:
      34.8 KB
      Views:
      581
  4. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,350
    Location:
    The Netherlands
    However, I noticed all you posted was one registry entry. SB may have overlooked it.
    It's not the Hijacker itself.

    SpyBot should however detect and remove the Program Files\SRNG folder, the hijacked ShopNav search and Start pages, and the associated IEhelper.dll and the more recent Snhelper.dll browser plugins.
     
Thread Status:
Not open for further replies.