Friggin ShopNAV Spyware - Removal????

[D67]

ANYone know how to remove this POS Spyware?.

I'm having a hell of a time doing so.

TIA

Drew Dawg

[RickM]

Try Spysweeper from WWW.Webroot.com? Free and works very well. When at the site you can do a quick and free spyware scan...top right of the screen.

[id10t]

Try booting in safe mode, with no network support. Keeps many things from autostarting ... If you know what hte process name is, you can use process explorer to find out exactly where the executable file is... boot with a boot floppy or CD or a Linux CD and remove the executable when your "normal" copy of windows isn't even running.

[RickM]

Here's the manual way to remove but be careful (Try Spysweeper first):

http://www.doxdesk.com/parasite/ShopNav.html


Open the registry (click 'Start', choose 'Run', and type 'regedit'), and find the key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run. In the list of values on the right, delete the 'srng' entry.

Next, open a DOS command prompt window (from Start->Programs->Accessories) and enter the following commands, for the IE variant:

cd "%WinDir%\System"
regsvr32 /u "\Program Files\Srng\SearchHook.dll"
regsvr32 /u "\Program Files\Srng\IEHelper.dll"
Or for the SN variant:

cd "%WinDir%\System"
regsvr32 /u "\Program Files\Srng\SNHelper.dll"
Restart the machine and you should be able to delete the 'Srng' folder inside the Program Files folder. You can also open the registry (Start->Run->regedit) and delete key HKEY_LOCAL_MACHINE\SOFTWARE\Srng, and delete the 'words.lst' file in the Windows folder to clean up if you like.

Finally, restore the normal search settings (Internet Options->Programs->Reset Web Settings).

[Wrecked944]

Also for the future, I can highly recommend getting a copy of Firefox. It is free and since installing it, I have had ZERO (repeat ZERO) spyware problems. And I surf a LOT of porn. So that is an impressive data point.

[asphaltgambler]

Let me guess. Net surfing one day, all of a sudden your hard drive starts churing like a corn grinder. Then the machine freezes. Hard re-set power-off-on. Now your web browser has been high-jacked with some piece of s--t search engine and every time you open a new web page a warning comes up right?

So you heed the warning about your sudden spyware issue, go to the directed site and download their 'fix' then at the very end you think no big deal. All problems have been identified and are ready for removal at no expense. You hit 'OK' and it takes you to a secure web page that for a fee of something like $35-50 the program will 'finish' and rid your machine of the 'infections'!!!???


I'm a partial computer guy, it happened to me. Two ways to get rid of it. Save all of your important data/ files to a disc or seperate external drive. Then use your machines restoration disc and completely overwrite and begine anew. Install an external router so that you will have a real firewall. Then when back up and running go to www.mozilla.com and download their free web browser. It is a much improved web browser with none of the security holes that M/S IE has.

Option two. None. The problem is too embedded in the basic Windows operating system to really correct completely. If you choose to hand over your $$ to those f-----king pirates they will finish installing their full-on spyware and will 'see' every web page you visit plus EVERY KEY STROKE you do including usernames and passwords.

Our gov just busted a firm running this scam out of NV and fined them big time but there is still a few others running this bull-s--t scam.

[D67]

The manual removal doesnt work -

The free webroot service doesnt remove it as well - (Already have that installed)

This POS Hijacker is really starting to PISS me off.

[Neilk]

Go to download.com and download and install
Ad-Aware
Spybot Search and Destroy.

Install both of them and get all the updates for them.

Go to Symantec's page for detailed instructions on how to remove the POS.

Reboot in Safe mode and follow Symantec's instructions. Reboot into safe mode and run Ad-aware and then Spybot. Hopefully you will have removed everything. I am sure you will other crap as well.

Lastly get Firefox. GOOD LUCK

[jrdavid68]

Originally posted by asphaltgambler
I'm a partial computer guy...........

Option two. None.

Hmmm...

Vist the Security forum on www.techsupportguy.org . If you can't find the answers you need, go ahead and register, download the HiJackThis program and post your log. These guys will get it straigtened out.

If you get positive results, donate (even though some may consider this a tip, the site is run on donations).

[cegerer]

I fixed a similar problem once by doing a simple "System Restore" to an earlier date. Very easy to do with XP. Only takes a few minutes - might be worth a try. Another time it did nothing and I had to run a bunch of anti-spyware software. I've since switched to Mozilla Firefox and have ZERO problems.

[red ufo]

Drew don't listen to these guys!

I'm the master as this crap. Haven't had spyware on any of my machines for 9 months now.

[D67]

Red - glad your my friend cause you make me laugh! LOL

Neilk - Spybot search and destroy fixed that stupid POS Spyware ShopNav. The best part of it all - it was FREE!

Thanks for the Heads Up!

Very much appreciated!