Severity scale  
  (43/100)

ShopNav. How to Remove? (Uninstall Guide)

removal by - -   | Type: Browser Hijackers
12
ShopNav is a browser hijacker that modifies web browser's essential search settings. It changes default search and error pages, alters address bar search options and affects user Internet experience. The threat redirects a web browser to ShopNav controlling servers. It also collects information about performed web searches and user system account and sends it to a predetermined remote server. ShopNav may download and install arbitrary applications and can silently update itself via the Internet. The threat is bundled with some parasites and advertising-supported products such as Grokster file sharing program. It automatically runs on every Windows startup. ShopNav properties:
• Changes browser settings
• Connects itself to the internet
• Hides from the user
• Stays resident in background

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use. By downloading any of provided Anti-spyware software you agree with our Privacy Policy and Agreement of Use.
Do it now!
Download
Reimage - remover Happiness
Guarantee
Compatible with Microsoft Windows
What to do if failed?
If you failed to remove infection using Reimage Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall ShopNav. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Reimage is recommended to uninstall ShopNav. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

More information about this program can be found in Reimage review.
Not using OS X? Download a remover for Windows.
Press Mentions on Reimage
Alternate Software
Alternate Software
Plumbytes
We are testing Plumbytes's efficiency (2005-09-03 07:55)
Malwarebytes Anti Malware
We are testing Malwarebytes Anti Malware's efficiency (2005-09-03 07:55)
Hitman Pro
Webroot SecureAnywhere AntiVirus

ShopNav manual removal

Kill processes:
adrsb.exe, srng.exe, srngutil.exe, svchost.exe, waladhpr.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\kugoo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\srng
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Search Bar=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Search Page=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Use Custom Search URL=0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Use Search Asst=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\CustomizeSearch
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\Search Assistant=[site address]
HKEY_CURRENT_USER\Microsoft\Internet Explorer\Main\Search Bar=[site address]
HKEY_CURRENT_USER\Microsoft\Internet Explorer\Main\Search Page=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\Search Assistant=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURL\provider=msn
HKEY_CURRENT_USER\Software\Microsoft\SearchAssistant\DefaultSearchURL=[site address]
HKEY_CURRENT_USER\Software\Srng
HKEY_LOCAL_MACHINE\SOFTAWRE\Kugoo
HKEY_LOCAL_MACHINE\SOFTWARE\Srng
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PCID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SNHlprObj.SNHlprObj
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{14B3D246-6274-40B5-8D50-6C2ADE2AB29B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{CE7C3CEF-4B15-11D1-ABED-709549C10000}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{CE7C3CE2-4B15-11D1-ABED-709549C10000}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{14B3D246-6274-40B5-8D50-6C2ADE2AB29B}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{14B3D246-6274-40B5-8D50-6C2ADE2AB29B}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\shnv
Unregister DLLs:
iehelper.dll, iehelper02.dll, searchhook.dll, snhelper.dll

Delete files:
adrsb.exe, srng.exe, srngutil.exe, svchost.exe, waladhpr.exe, iehelper.dll, iehelper02.dll, searchhook.dll, snhelper.dll, ieshnv.ini
Delete directories:
C:\Program Files\Kugoo
C:\Program Files\Snrg
Misc:
[site address] is an address of a web site on the 2020search.com or pop.popuptoast.com domain.

Exact file location:
adrsb.exe, svchost.exe, waladhpr.exe - C:\Windows or C:\Winnt
srng.exe, srngutil.exe, iehelper.dll, iehelper02.dll, searchhook.dll, snhelper.dll - C:\Program Files\Srng or C:\Program Files\Kugoo
ieshnv.ini - C:\Program Files

Geolocation of ShopNav

Map reveals the prevalence of ShopNav. Countries and regions that have been affected the most are: United States.

Information updated:

Comments on ShopNav

0
0
Guest
I want it remove off my computer please.
0
0
Guest
There is an additional website that you can go to to remove ShopNav, http://shopnav.com/support.html. There are instruction for removing the Desktop Search Assistant as well as resetting the IE search buttons. Make sure you do both b/c only doing one will not repair the IE search buttons completely. Best of luck!
~ thebigd18
0
0
Guest
I agree with Sanjay, but a little less violently.
It is extremely annoying to see shopnav keep popping up, time and time again, after successful removal. Yes, there should be extreme punishment, but rather than hanging, I think financial punishment and imprisonment would be more appropriate! I would claim that removing shop nav has cost me at least 4 hours of my life and would like to see if anyone would like to start a class action lawsuit against the shitheads who do this to us!
Use "Adaware". It is free and very good!
0
0
Guest
I tried everything above, what a mess.I lost a whole days work over shopnav and xlime.optimizer which I got a the same time. Hijackthis even restored my search values. Yaaaaaa!!!!!
0
0
Guest
Microsoft recommends this free adware software removal, ( lavasoftusa.com ). I used it and it found 36. I deleted all but 6 or 7, the info said that they where part of Internet Explorer.

Then I tried a search using address bar where URL link is. I typed in " toy collecting " the address bar & clicked enter key, and I got the "cannot find" page. Before I would get the Shopnav search engine. So Now What?????

I went to Microsoft.com and searched for an answer to repair my Internet Explorer 6 Service Pack 1. And I found it at this link. " http://support.microsoft.com/default.aspx?scid=kb;en-us;318378 ".

I scrolled down the page to " Windows XP and Windows XP SP1: Edit the registry and install Internet Explorer 6 ". When you are modifying your registry, be SURE TO FOLLOW exact instructions....

If this works. I will come right back and post.

Tks for this site
CJSmall
Indiana
0
0
Guest
Just download that SpyHunter software, scan your drives and MANUALLY delete every friggn thing it finds!

:)

Link to download is up at the top of this page, etc:

ShopNav automatic removal:

download removal software



Yeah I hate this ShopNav. Pretty pointless software..
0
0
Guest
I am not a PC whiz. Will someone explain exactly what I am to type in on command prompt. I have XP home edition, and when I go to DOS command prompt. What exactly am I supposed to type in after " c:Documents and Settinguser name "


Below is part of the instructions I do not really totally understand....

Next, open a DOS command prompt window (from Start->Programs->Accessories) and enter the following commands, for the IE variant:

cd "%WinDir%System"
regsvr32 /u "Program FilesSrngSearchHook.dll"
regsvr32 /u "Program FilesSrngIEHelper.dll"
Or for the SN variant:

cd "%WinDir%System"
regsvr32 /u "Program FilesSrngSNHelper.dll"
0
0
Guest
Go to this link, its where you can file a complaint with the FCC on Shopnav.

Just copy/paste this link

http://www.ifccfbi.gov/index.asp
0
0
Guest
Go to this site to find your state attorneys office link...Then make a camplaint



http://www.mbecellular.com/state.html



Underneath your address line, click MSN.com and copy/paste this address. This will let you search on MSN browser and block Shopnav
0
0
Guest
Thank you sooo much for this website.
I had removed and fixed everything but still had one more fill other websited failed to mention:
systb.dll and after doing a search found :
systb with a red icon= the actual program that kept changing browser setting upon startup of windows!! Thanks again
More comments »

Post a comment

Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name



«

(All fields are required)