ShopNav Hijacker

Discussion in 'SpywareBlaster & Other Forum' started by david96, Jul 21, 2003.

Thread Status:
Not open for further replies.
  1. david96

    david96 Registered Member

    Joined:
    Jun 28, 2003
    Posts:
    1
    Vendor ShopNav Highjacker
    Type Regkey
    Category Malware
    Object HKEY_CLASSES_ROOT:Shearchook\
    .1\
    URL Search
    URL Search
    4 Keys 674bytes
    AdAware6.0 will find itand delete. It does not seem to be in SG and SB databases.SpyBot does not locate it either.Any ideas where it comes from?
     
    david96, Jul 21, 2003
    #1
  2. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,491
    Location:
    Netherlands
    Hi david 96,

    I found this about it:
    http://www.doxdesk.com/parasite/ShopNav.html
    Seems to come bundled with Grokster (maybe others as well).

    Regards,

    Pieter
     
    Pieter_Arntz, Jul 21, 2003
    #2
  3. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,361
    Location:
    The Netherlands
    ShopNav/SRNG is however in the SpyBot S&D database, and it ought to remove it as well, once properly updated.
     

    Attached Files:

    • SN.jpg
      SN.jpg
      File size:
      34.8 KB
      Views:
      583
    TonyKlein, Jul 21, 2003
    #3
  4. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,361
    Location:
    The Netherlands
    However, I noticed all you posted was one registry entry. SB may have overlooked it.
    It's not the Hijacker itself.

    SpyBot should however detect and remove the Program Files\SRNG folder, the hijacked ShopNav search and Start pages, and the associated IEhelper.dll and the more recent Snhelper.dll browser plugins.
     
    TonyKlein, Jul 21, 2003
    #4
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...