Aces High Bulletin Board

Help and Support Forums => Technical Support => Topic started by: LtMagee on January 27, 2004, 10:41:43 AM

Title: Shopnav Bug (Browser Hijacker)
Post by: LtMagee on January 27, 2004, 10:41:43 AM

I have been hit! Read the following info and tell me if any of you guys have it and which, if any, of the mentioned removel tools work! Thanks!

Full Name: ShopNav Websearch
Type: Browser Hijacker
Also Known as: Srng
Danger Level:  4 [Explain]  
Official Description: ShopNav is a search-hijacker implemented as an Internet Explorer Browser Helper Object, with an updater process run at startup.

Address bar searches, the Search explorer bar, unknown domains, and, in some variants, non-www server names entered into the address bar without the preceding 'http://' will be sent to Srng's controlling server http://www.srng.net, which redirects to a search service at apps.webservicehost.com.

 
Comment: When installed it sends details including your Windows account name and your previous search settings to its controlling server.
 
   
Information URL: http://srng.net/
   
Properties: Stays resident in background
Stealth: hides itself from user
Makes changes to browser settings
Connects to the internet by itself
 
Manual removal: They now supply a remover program on their site:
http://www.shopnav.com/shopnav/files/downloads/unspnv.exe

Manually: Open a DOS command prompt window (from Start->Programs->Accessories) and enter the following commands, for the IE variant:

cd "%WinDir%\System"
regsvr32 /u "\Program Files\Srng\SearchHook.dll"
regsvr32 /u "\Program Files\Srng\IEHelper.dll"
Or for the SN variant:

cd "%WinDir%\System"
regsvr32 /u "\Program Files\Srng\SNHelper.dll"
Removal tools: List of products that detect/remove/protect against ShopNav:

X-Cleaner
RegBlock

Title: Shopnav Bug (Browser Hijacker)
Post by: quig on January 27, 2004, 07:17:25 PM

This baby right here is handy: HiJack This

http://www.spywareinfo.com/~merijn/files/HijackThis.exe

You can read all about the prog here:

http://www.spywareinfo.com/~merijn/downloads.html

If you know how to read the log (which is pretty simple), it'll tell ya what you have and let you get rid of it. You have to be careful with it though...make sure you know what you are "fixing" before you "fix" it :D

If it run into something you are not sure about just Google it

Title: Shopnav Bug (Browser Hijacker)
Post by: LtMagee on January 28, 2004, 12:12:07 AM

That program worked and it was free! Thanks!

Title: Shopnav Bug (Browser Hijacker)
Post by: quig on January 29, 2004, 02:33:02 AM

YW!

Since you had that, might wanna check out some other free gems:

http://www.lavasoftusa.com/

http://www.safer-networking.org/

http://www.diamondcs.com.au/index.php?page=regprot

If I could just stay off the porn sites I wouldn't need all that :D