Results 1 to 17 of 17
  1. #1
    Newbie
    Join Date
    January 18th, 2005
    Posts
    7
    Hi guys,
    I'm new to this forum and excuse me if I've posted this in the wrong spot.

    I've been trying for several days now to remove Shopnav off my computer. I've downloaded their removal program which of course bombs when it runs. I've removed all the objects from the registry and directories as suggested in various sites, but the stupid thing is still here alive and annoying.
    Any suggestions will be greatly appreciated.

    Thanks,

    JMuniz
    www.amazingbutterflies.com

    JMuniz
    www.amazingbutterflies.com

  2. #2
    Full Member ellen-s4y's Avatar
    Join Date
    January 18th, 2005
    Posts
    489
    Have you reset your browser to their normal search settings? Internet Options > Programs > Reset Web Settings

  3. #3
    Newbie
    Join Date
    January 18th, 2005
    Posts
    7
    Tried it, but it's still coming up when the url can't be found.

    JMuniz
    www.amazingbutterflies.com

  4. #4
    ABW Ambassador
    Join Date
    January 18th, 2005
    Posts
    1,663
    Have you looked at the removal hints at doxdesk.com? http://www.doxdesk.com/parasite/ShopNav.html
    There may be something there that you didn't try yet.
    Good luck.

    Wayne

  5. #5
    Resident Genius and Staunch Capitalist Leader's Avatar
    Join Date
    January 18th, 2005
    Location
    Florida
    Posts
    12,817
    When the URL doesn't come up, IE sometimes tries it as a "search" instead of just returning a 404. So it sounds like ShopNav made itself your default "search engine," since it's appearing then. This may help rectify that:

    http://www.pcmag.com/article2/0,4149,1047161,00.asp

    It's the most wonderful time of the year!~Old Christmas Song

  6. #6
    2005 Linkshare Golden Link Award Winner  ecomcity's Avatar
    Join Date
    January 18th, 2005
    Location
    St Clair Shores MI.
    Posts
    17,328
    This one is distributed with versions of Grokster from March 2003. Not mentioned in (the over 30,000 words of) licence agreement.

    www.srng.net & apps.webservicehost.com are the backend perps.

    Organization:
    ShopNav
    Contact Info
    250 Montgomery Street
    San Francisco, CA 94111

    Organization:
    srng.net
    Contact Info
    250 Montgomery Street
    San Francisco, CA 94111
    US
    Phone: 415.760.8615
    Fax..: 415.760.8615
    Email: wvinc2003@yahoo.com

    Registrar Name....: Register.com
    Registrar Whois...: whois.register.com
    Registrar Homepage: http://www.register.com

    Domain Name: SRNG.NET

    Created on..............: Thu, Apr 03, 2003
    Expires on..............: Sat, Apr 03, 2004
    Record last updated on..: Fri, Dec 12, 2003

    Administrative Contact:
    srng.net
    Contact Info
    250 Montgomery Street
    San Francisco, CA 94111
    US
    Phone: 415.760.8615
    Fax..: 415.760.8615
    Email: wvinc2003@yahoo.com


    US
    Phone: 415.760.8615
    Fax..: 415.760.8615
    Email: support@shopnav.com

    Registrar Name....: Register.com
    Registrar Whois...: whois.register.com
    Registrar Homepage: http://www.register.com

    Domain Name: SHOPNAV.COM

    Created on..............: Thu, Apr 03, 2003
    Expires on..............: Sat, Apr 03, 2004
    Record last updated on..: Fri, Dec 12, 2003

    Administrative Contact:
    ShopNav
    Contact Info
    250 Montgomery Street
    San Francisco, CA 94111
    US
    Phone: 415.760.8615
    Fax..: 415.760.8615
    Email: support@shopnav.com



    This one seems interesting .....
    Registrant:
    Google Inc.
    (DOM-304650)
    2400 E. Bayshore Pkwy
    Mountain View
    CA
    94043
    US

    Domain Name: webservicehost.com

    Registrar Name: Alldomains.com
    Registrar Whois: whois.alldomains.com
    Registrar Homepage: http://www.alldomains.com

    Administrative Contact:
    DNS Admin
    (NIC-1467103)
    Google Inc.
    2400 E. Bayshore Pkwy
    Mountain View
    CA
    94043
    US
    dns-admin@google.com
    +1.6503300100
    Fax- +1.6506188571
    Technical Contact, Zone Contact:
    DNS Admin
    (NIC-1467103)
    Google Inc.
    2400 E. Bayshore Pkwy
    Mountain View
    CA
    94043
    US
    dns-admin@google.com
    +1.6503300100
    Fax- +1.6506188571

    Created on..............: 2003-Jan-29.
    Expires on..............: 2007-Jan-29.
    Record last updated on..: 2003-Jul-08 14:20:32.

    From this spamming/BHO infested hosting firm
    Domain servers in listed order:

    SCA03.AUTH.DNS.EXODUS.NET 216.32.104.10
    SCA04.AUTH.DNS.EXODUS.NET 209.185.253.230



    Mike & Charlie ...

    If they won't adopt and feed a bird ..flip them one! BBQ some Gator and remember to flush WhenU..

  7. #7
    Newbie
    Join Date
    January 18th, 2005
    Posts
    7
    I've tried all the suggestions and it's still coming up.
    I find it very interesting that their url registration has a free yahoo email address for contacting them. Like they even check it.

    I think I'll contact register.com and see if they can do something about this. I doubt it very much, but enough complaining and something might happen.

    Thanks for everyones great help on this one.

    JMuniz
    www.amazingbutterflies.com

  8. #8
    ABW Ambassador
    Join Date
    January 18th, 2005
    Posts
    742
    Go here: Online Tonight and download the free Spyware Removal (link is about 3/4's down on the right side). It's free.

    Found a lot of things on my PC that I didn't even know were there. Goes through all your files and your registry and even captures hidden code.

  9. #9
    Newbie
    Join Date
    January 18th, 2005
    Posts
    7
    I downloaded Spy Killer and it removed many, many parasites off my machine. I was so happy that it was cleaned up. Then came the test, and @#*%!!!! SHOPNAV is still the default search page to show up when a url can't be found. I've sent flaming emails to support@shopnav and their yahoo address with cc's to yahoo and register.com to see if I can get some action on this. Doubt it very much, but it's worth a try.
    Thanks again to all..

    JMuniz
    www.amazingbutterflies.com

  10. #10
    Newbie
    Join Date
    January 18th, 2005
    Posts
    38
    quote:
    Originally posted by bob95603:
    Go here: http://www.online-tonight.com/ and download the free Spyware Removal (link is about 3/4's down on the right side). It's free.



    Bob, the REMOVE function is not free. Scanning is. However, when I selected for those damn parasites to be removed, it says that I have to PURCHASE the remover function.

    Till now, fastsearch is my default browser. To hell with that site.

    Melvin Ng

    "Do NOT bite the hand that FEEDS you."

  11. #11
    ABW Adviser Panel Dynamoo's Avatar
    Join Date
    January 18th, 2005
    Location
    Opposite the Slough of Despond
    Posts
    5,465
    Spybot S&D is free at http://security.kolla.de/ (make a donation if you can). I use it myself.. it's really good.

    You could try using the Google .reg file listed at http://www.google.com/options/defaults.html under "Make Google Your Default Search Engine" - that will change the default search engine keys in the registry.

    ________
    "All your commission are belong to us." - Slimeware Corporation

  12. #12
    ABW Ambassador Andy's Avatar
    Join Date
    January 18th, 2005
    Posts
    4,178
    Nothing makes me madder than a remove function that doesn't work! I always feel it was intentional on the part of the developer.

    The @yahoo contact address doesn't seem very corporate, either. They probably don't bother to check it - ever. Let us know if you ever hear from them, and good luck in ridding your computer of this pest!

    Andy

    _______________
    Call the Exterminators! We've Got PARASITES!

  13. #13
    Newbie
    Join Date
    January 18th, 2005
    Posts
    38
    Hmmm....I finally found a software that I think did the trick...SpyHunter (I forgot where I downloaded it, but you can do a search on Google).

    Somehow, as part of the protection, it prohibits your home page to be modified... BUT the greatest joke was on me! My home page at that time was still FastSearch! And now, I do not know how to disable that function. I'm STUCKED! I even tried uninstalling the SpyHunter but it just didn't help. Luckily, I had another shortcut that opens up IE with a more acceptable home page.

    But I would still like to be able to edit my 'home page' option. Anyone with this experience before?

    Melvin Ng

    "Do NOT bite the hand that FEEDS you."

  14. #14
    ABW Ambassador
    Join Date
    January 18th, 2005
    Posts
    742
    You downloaded it from my post above. You knocked it and said it was no good and you had to pay for it and now you're giving it raves???? Think you've had too much Christmas eggnog.

  15. #15
    Newbie
    Join Date
    January 18th, 2005
    Posts
    38
    Bob, I was knocking on what? I was knocking down fastsearch. To hell (fastsearch) with that site.

    As for the remover function? I'm not knocking that...just stating a fact.

    Melvin Ng

    "Do NOT bite the hand that FEEDS you."

  16. #16
    ABW Adviser Panel Dynamoo's Avatar
    Join Date
    January 18th, 2005
    Location
    Opposite the Slough of Despond
    Posts
    5,465
    How about this.. this removes all ISP customisations (logos, title bars, graphics etc) from IE and sets it back to the standard IE skin:

    • Close all browser windows.
    • Go to Start
    • Choose Run
    • In the Run dialog box type or paste:
      rundll32 iedkcs32.dll,Clear
    • Hit Enter.
    • Done[/list]

      ________
      "All your commission are belong to us." - Slimeware Corporation

  17. #17
    2005 Linkshare Golden Link Award Winner  ecomcity's Avatar
    Join Date
    January 18th, 2005
    Location
    St Clair Shores MI.
    Posts
    17,328
    Description:
    A vulnerability has been identified in Internet Explorer, which can be exploited by malicious people to display a fake URL in the address and status bars.

    The vulnerability is caused due to an input validation error, which can be exploited by including the "%01" and "%00" URL encoded representations after the username and right before the "@" character in an URL.

    Successful exploitation allows a malicious person to display an arbitrary FQDN (Fully Qualified Domain Name) in the address and status bars, which is different from the actual location of the page.

    This can be exploited to trick users into divulging sensitive information or download and execute malware on their systems, because they trust the faked domain in the two bars.

    Example displaying only "http://www.trusted_site.com" in the two bars when the real domain is "malicious_site.com":
    http://www.trusted_site.com%01%00@ma...malicious.html

    A test is available at:
    http://www.secunia.com/internet_expl...spoofing_test/

    The vulnerability has been confirmed in version 6.0, and version 5.x is also affected according to Microsoft's knowledge base article.

    NOTE: This vulnerability is currently being exploited on the Internet via scam emails!

    Solution:
    Filter malicious characters and character sequences in a proxy server or firewall with URL filtering capabilities.

    Don't follow links from untrusted sources.

    See Microsoft knowledge base article for other workarounds and ways to identify a spoofed website.

    Provided and/or discovered by:
    Originally discovered by:
    Zap The Dingbat

    Status bar variant reported by:
    Chris Hall

    Changelog:
    2003-12-11: Linked to test. Added information regarding variant, which makes it possible to spoof URL in the status bar as well.
    2003-12-14: Microsoft has issued a knowledge base article concerning the issue. This also reports that version 5.x is affected.
    2003-12-19: Scams mails exploiting the vulnerability are now circulating the Internet.

    Other References:
    Microsoft Knowledge Base Article - 833786:
    http://support.microsoft.com/?id=833786

    Mike & Charlie ...

    If they won't adopt and feed a bird ..flip them one! BBQ some Gator and remember to flush WhenU..

  18. Newsletter Signup

+ Reply to Thread

Similar Threads

  1. Link Removal
    By specusa in forum Search Engine Optimization
    Replies: 6
    Last Post: July 18th, 2013, 01:04 PM
  2. Removal
    By shimmy in forum ShareASale - SAS
    Replies: 35
    Last Post: April 5th, 2013, 01:50 PM
  3. Account Removal
    By freelance007 in forum Commission Junction - CJ
    Replies: 0
    Last Post: July 5th, 2007, 03:00 PM
  4. Zango removal
    By Catwoman in forum Suspicious Activity!
    Replies: 2
    Last Post: October 11th, 2006, 10:51 PM
  5. Parasite Removal
    By jackson992 in forum Fix the Fixes
    Replies: 13
    Last Post: May 11th, 2003, 04:51 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •