PDA

View Full Version : Warning: "Shop at home agent"



XyZspineZyX
07-20-2003, 07:06 PM
Peeps,

I clicked on a link in this forum, about a guy's experience with an outfit in Colorado that provides dogfighting in real planes.

Immediately, my firewall notified me that:

"C:\Windows\System\SahAgent.exe" was trying to contact the internet.

I have a very good firewall, Norton.

I kept getting this message, as this program continued to try to go online from my computer.

You may want to check and see if you have the above file. If you do, you will notice under file properties that the file comes from Russia.

Also check here:

http://www.doxdesk.com/parasite/ShopAtHomeSelect.html

for removal instructions.

By the way, Ad-Aware did not spot this spyware.

Good luck,

Zip

<center>BlitzPig_Zip

http://homepage.ntlworld.com/gingernuts/blitz_anim.gif </center>

XyZspineZyX
07-20-2003, 07:06 PM
Peeps,

I clicked on a link in this forum, about a guy's experience with an outfit in Colorado that provides dogfighting in real planes.

Immediately, my firewall notified me that:

"C:\Windows\System\SahAgent.exe" was trying to contact the internet.

I have a very good firewall, Norton.

I kept getting this message, as this program continued to try to go online from my computer.

You may want to check and see if you have the above file. If you do, you will notice under file properties that the file comes from Russia.

Also check here:

http://www.doxdesk.com/parasite/ShopAtHomeSelect.html

for removal instructions.

By the way, Ad-Aware did not spot this spyware.

Good luck,

Zip

<center>BlitzPig_Zip

http://homepage.ntlworld.com/gingernuts/blitz_anim.gif </center>

XyZspineZyX
07-20-2003, 07:18 PM
Removal was quite easy, as "Control Panel\Install\Uninstall" had a choice for shop at home.

I rebooted, and removed the files as directed by that web site I showed a link for.

Then I let Norton Utilities do its thing, and it cleaned up the registry for me.

I'm not sure where the file came from. It might have been the link I clicked on this forum, or it might have been from somewhere else.

At any rate, it's worth checking to see if you have it, so you can get rid of it.

Zip

<center>BlitzPig_Zip

http://homepage.ntlworld.com/gingernuts/blitz_anim.gif </center>

XyZspineZyX
07-20-2003, 07:18 PM
Not that I actually clicked the link, good stuff anyway and well spotted!

S! Simon.
<center>


<font color="#000000">It's my attitude not my aptitude that determines my altitude.</font>
http://extremeone.4t.com/images/sig.jpg

XyZspineZyX
07-20-2003, 07:42 PM
it was in add/remove programs? sounds like maybe you accidentally clicked yes on one of those popup install things.

http://avg-pbs.freewebspace.com/pbssig1.jpg

XyZspineZyX
07-20-2003, 09:32 PM
PBS_DangerMouse wrote:
- it was in add/remove programs? sounds like maybe
- you accidentally clicked yes on one of those popup
- install things.

DM,

I can't be sure, as other people use this computer. I had not seen any notices from my firewall until I clicked on a link in this forum.

I'm glad I have a good firewall, that notified me of the problem.

By the way, neither Norton Anti-virus, nor Ad-Aware 6.0 spotted the existence of this "parasite."

Zip


<center>BlitzPig_Zip

http://homepage.ntlworld.com/gingernuts/blitz_anim.gif </center>

XyZspineZyX
07-20-2003, 10:53 PM
Norton is pretty much bloat-ware in and of itself. /i/smilies/16x16_smiley-wink.gif

Try using a free anti-virus like AVG Anti-Virus and a real firewall like Zone-Alarm (also free) and save yourself some resources. /i/smilies/16x16_smiley-happy.gif



<center>http://members.rogers.com/4xtreme/chbanner.jpg

XyZspineZyX
07-21-2003, 12:32 AM
And while you're at it, try exchanging AdAware with SpyBot http://ubbxforums.ubi.com/infopop/emoticons/icon_smile.gif It runs nicely with AVG and ZoneAlarm...