Quick Links: SpywareGuide Greynets Blog | SpywareGuide Product Database | SpywareGuide Company Database | SpywareGuide Categories
Search SpywareGuide Database & Site
Security Email Alerts & Updates
SpywareGuide powered by FaceTime Security Labs
Full Name:
ShopNav Websearch   Read More
Type: Adware
Also Known as: Srng
Created by: SRNG
SG Index: 5 [Explain]
Removal tools: List of products that detect/remove/protect against ShopNav:
  • Desktop Anti-malware: Pro User: X-Cleaner
  • Control IM and P2P use, block spyware and other malware: RTGuardian
  • Endpoint Spyware Remediation: Greynet Enterprise Manager
  • IM, P2P control, malware prevention and web filtering in single appliance: Unified Security Gateway
  • Category Description: Program that delivers advertisements on your PC.

    Note that many websites have their own advertising, unrelated to adware.

    Adware is any software application in which advertising is displayed while the program is running. The authors of these applications include additional code that delivers the ads, which can be viewed through pop-up windows or through a bar that appears on a computer screen and sometimes through text links or in integrated search results. Adware may or may not track personal information. It may also gather information anonymously or in aggregate only. Users should check the EULA and Privacy policy to ensure if the adware on their machines conforms to their standards.
    Official Description: ShopNav is a hijacker or it's distributed as an Internet Explorer Browser Helper Object. This program also launches an updater process run at startup to ensure all files are present on the infected computer.

    Address bar searches, the Search explorer bar, unknown domains, and, in some variants, non-www server names entered into the address bar without the preceding 'http://' will be sent to Srng's controlling server www.srng.net, which redirects to a search service at apps.webservicehost.com.
    pqnelhleyy 40d0b641 4882534f

    Comment: When installed it sends details including your Windows account name and your previous search settings to its controlling server.

    Note: 11-30-05
    It appears that Shopnav have taken their products down from there site. When visited it reads this:

    Thank you for your interest in our search enhancing products. Unfortunately, these products are no longer available.
    If you wish to uninstall, please click here.

    Information URL: http://www.srng.net/
       
    Manual removal: They now supply a remover program on their site:
    http://www.shopnav.com/shopnav/files/downloads/unspnv.exe

    Manually: Open a DOS command prompt window (from Start->Programs->Accessories) and enter the following commands, for the IE variant:

    cd "%WinDir%\System"
    regsvr32 /u "\Program Files\Srng\SearchHook.dll"
    regsvr32 /u "\Program Files\Srng\IEHelper.dll"
    Or for the SN variant:

    cd "%WinDir%\System"
    regsvr32 /u "\Program Files\Srng\SNHelper.dll"

    Removal instructions from the vendor.
    http://www.shopnav.com/uninstall2.html
    Properties:
  •  Autostarts/Stays Resident
  •  Changes browser
  •  Connects to the internet
  •  Redirects searches
  •  Stealth Tactics
  • Click here to leave feedback for this product

    Help with the BUST!
    Click here and give us what details you have and let our international research team take it from there. If you desire your report will remain anonymous.
    Recent Blog Posts
  • Homer's Odyssey
  • Homer Simpson and the Kimya Botnet
  • Twitter Spam
  • Malware Install Hides Behind Fake Blue Screen Of Death
  • More Websites Asking For MSN Logins...
  • How Can I Find Them? They Haven't Gone Missing!
  • "Interesting" Advert Placements On Facebook
  • Content Scrapers And Security Blogs
  • Your 419 Mail Roundup
  • Social Networking: When It All Goes Horribly Wrong
  • Recent Modifications
    2008-7-18  SmsDialer
    2008-7-18  winvestigator
    2008-7-17  Internet Exploiter
    2008-7-15  Snapshot Spy
    2008-7-14  FlashGet
    2008-7-12  OnlineRegistryScan.org
    2008-7-11  Gator
    2008-7-10  Kimya
    2008-7-9  Fake.AV
    2008-7-8  Proxy based anonymizers
     

    Site EULA | Site Map | Contact Us | About Us | Site and Spyware FAQ | Advertise | RSS Feeds  | Link To Us | SpywareGuide Japan Japanese

    © Copyright 2007, FaceTime Communications, Inc. All rights reserved.