Author Topic: Shopping Sidekick plug in-how do I remove it?  (Read 10023 times)

0 Members and 1 Guest are viewing this topic.

mompea

  • Guest
Shopping Sidekick plug in-how do I remove it?
« on: June 01, 2013, 10:51:34 PM »
This plug in is a nuisance and it pops up every time I go to a new  page, click on an italicized word, a blue link, everything! I found a site that initially tells you it is a free removal tool, but as you go along of course there's a $20.00 charge for the "free" tool. I don't know where it came from. Avast has never picked it up as a virus, which I understand it is. Can you help me? Also please understand I have very limited knowledge of this machine so please be patient with me.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user
Re: Shopping Sidekick plug in-how do I remove it?
« Reply #1 on: June 01, 2013, 11:17:32 PM »
run AdwCleaner.... click delete button....
then run a quick scan with Malwarebytes....click remove selected if anything is detected

you find them here.  http://forum.avast.com/index.php?topic=53253.0

post logs here

is problem gone?


mompea

  • Guest
Re: Shopping Sidekick plug in-how do I remove it?
« Reply #2 on: June 04, 2013, 12:12:56 AM »
I ran the adw cleaner, clicked on delete and in getting here I had at least 5 pop ups from Shopping Sidekick, so I assume it isn't gone. It was in the list of the programs that the adw cleaner program found and was supposed to delete. Sorry to be so dense, but how do I attach the notepad list as you asked? I have not yet run the Malwarebytes Anti-Malware. My home page has totally changed, I can't get to the opening page that allows me to check my email. It's accessed through yahoo.com, but when I enter that on the search site nothing happens.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user
Re: Shopping Sidekick plug in-how do I remove it?
« Reply #3 on: June 04, 2013, 12:42:53 AM »
Quote
but how do I attach the notepad list as you asked?
below the txt box you write in here...click attachment and other options

if you still have problems after runnig AdwCleaner and Malwarebytes, then follow the instructions for OTL
attach that log and one of the removal experts will remove it for you when they arrive here tomorrow



mompea

  • Guest
Re: Shopping Sidekick plug in-how do I remove it?
« Reply #4 on: June 04, 2013, 07:44:22 PM »
Thank you for all your assistance. Here is the notebook of the AdwCleaner. I will do the Mal ware cleaner and send the results of that when it finishes.

mompea

  • Guest
Re: Shopping Sidekick plug in-how do I remove it?
« Reply #5 on: June 05, 2013, 06:37:38 PM »
Here are the results of the scans. My start page is gone/missing. Should I run the Rogue Killer program next?

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user
Re: Shopping Sidekick plug in-how do I remove it?
« Reply #6 on: June 05, 2013, 06:41:24 PM »
malware removers are notified, wait fore advice


Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Shopping Sidekick plug in-how do I remove it?
« Reply #7 on: June 05, 2013, 07:48:18 PM »
You will need to reset your start page manually

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following


Code: [Select]
:OTL
IE - HKLM\..\SearchScopes\{597b1823-7ff0-4cd3-8095-9d8cba514992}: "URL" = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=XNxdm0037Kus&ptb=6303A287-0A70-4D95-83A3-550185E271F8&psa=&ind=2011031105&ptnrS=XNxdm0037Kus&si=&st=sb&n=77dde641&searchfor={searchTerms}
IE - HKU\S-1-5-21-3570802679-2674771948-3592112652-1000\..\SearchScopes\{597b1823-7ff0-4cd3-8095-9d8cba514992}: "URL" = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=XNxdm0037Kus&ptb=6303A287-0A70-4D95-83A3-550185E271F8&psa=&ind=2011031105&ptnrS=XNxdm0037Kus&si=&st=sb&n=77dde641&searchfor={searchTerms}
[2013/05/06 21:14:46 | 000,000,000 | ---D | M] ("Shopping Sidekick Plugin") -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\ada919i2.default\extensions\extension21802@extension21802.com
[2013/05/06 21:14:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\ada919i2.default\extensions\extension21802@extension21802.com\chrome
[2013/05/06 21:14:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\ada919i2.default\extensions\extension21802@extension21802.com\defaults
[2013/05/06 21:14:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\ada919i2.default\extensions\extension21802@extension21802.com\locale
[2013/05/06 21:14:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\ada919i2.default\extensions\extension21802@extension21802.com\skin
[2013/05/06 21:14:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\ada919i2.default\extensions\extension21802@extension21802.com\chrome\content\extensionCode
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O4 - HKLM..\Run: [CouponXplorer Search Scope Monitor] C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zSrchMn.exe (MindSpark)
[2013/05/31 14:27:53 | 000,356,352 | ---- | C] (eSellerate Inc.) -- C:\Windows\eSellerateEngine.dll
[2013/05/31 14:27:53 | 000,081,920 | ---- | C] (eSellerate Inc.) -- C:\Windows\eSellerateControl350.dll
[2013/05/23 02:24:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CouponXplorer_5z

:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

mompea

  • Guest
Re: Shopping Sidekick plug in-how do I remove it?
« Reply #8 on: June 11, 2013, 10:38:50 PM »
I tried to run OTL and got this message: .....OTL has stopped working. A problem caused the program to stop working correctly. Windows will close the program and notify you if a solution is available......Of course I've never heard and I still have the bloody pop ups occurring. What now?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Shopping Sidekick plug in-how do I remove it?
« Reply #9 on: June 11, 2013, 11:46:09 PM »
Could you retry the fix from safe mode please

mompea

  • Guest
Re: Shopping Sidekick plug in-how do I remove it?
« Reply #10 on: June 13, 2013, 11:24:02 PM »
I could not connect to the internet in the safe mode. I couldn't run the fix because I couldn't access this forum. Now what? Is there any other way I could have accessed the program you wanted me to run without being internet connected?

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user
Re: Shopping Sidekick plug in-how do I remove it?
« Reply #11 on: June 13, 2013, 11:29:34 PM »
Quote
I could not connect to the internet in the safe mode.
did you try safemode with networking?

or copy the fix to notepad now....if able to, and save to desktop
then start in safemode, run OTL...copy the fix from the notpad you saved


mompea

  • Guest
Re: Shopping Sidekick plug in-how do I remove it?
« Reply #12 on: June 14, 2013, 12:10:42 AM »
I retried the OTL and this time I didn't have the Windows error come up. This is what I received

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Shopping Sidekick plug in-how do I remove it?
« Reply #13 on: June 14, 2013, 01:45:35 PM »
Is sidekick still showing ?  And how is the computer behaving

mompea

  • Guest
Re: Shopping Sidekick plug in-how do I remove it?
« Reply #14 on: June 16, 2013, 07:39:07 AM »
Sidekick still shows at almost every site. Any time there is an italicized word or a link to an associated information source if I click on it for additional information about the article I'm reading sidekick pops up.