Solved

Nation Zoom virus

Posted on 2013-12-10
7
635 Views
Last Modified: 2013-12-10
I have a badly infected system with Nation Zoom.   It doesn't appear that doing a system restore gets rid of it which suggests that all of the restore points may be infected.   Has anyone of the EE's advisors found a successful way to completely rid a Windows 7 system of the virus?  I've used all of the normal things...virus engine, malwarebytes, ccleaner etc. etc.  I have not tried combo fix and tend to stay away from that until I have no other mechanism.  Any ideas will be appreciated.
0
Comment
Question by:tonyadam
  • 3
  • 2
  • 2
7 Comments
 
LVL 24

Expert Comment

by:aadih
Comment Utility
It's an add on (plugin). Please follow the instructions at the following page to remove it:

< http://malwaretips.com/blogs/nation-zoom-removal/ >
0
 

Author Comment

by:tonyadam
Comment Utility
I already did that and it did not remove it from the IE browser.  It did help with removing it from Chrome and Firefox.  Will try again.  I'm doing another system restore right now to the oldest one I can ID to see if the virus is embedded in that restore point as well. Hopefully, it isn't.  Will post again when I get the restore point up and running.
0
 
LVL 24

Accepted Solution

by:
aadih earned 250 total points
Comment Utility
Try scanning your PC with AdwCleaner:

< http://www.bleepingcomputer.com/download/adwcleaner/ >
0
How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

 
LVL 14

Assisted Solution

by:comfortjeanius
comfortjeanius earned 250 total points
Comment Utility
windows key + r

Type: inetcpl.cpl
Advanced tab -----> Reset.... ------> check "Delete personal settings" ------> Reset ------> click "OK" -----> click "Close

Remove Nation Zoom extensions from Firefox

Tools ---> Add-ons ----> Extensions tab -----> "Remove Nation Zoom, Extended Protection and any other unknown extensions from Mozilla Firefox.

Reset your default search engine and homepage from NationZoom.com to default on Firefox, by installing the SearchReset extension add-on


If you have Chrome  Go to Tools ----> Extensions tab -------> remove " Extended Protection"


Right-click the Internet Explorer Icon -------> Properties --------> Shortcut -------> Target  "Check to see if a nationzoom.com URL is after the iexplore.exe"

Do the same for Firefox if it is install, and probably for Chrome.



    For Internet Explorer: “C:\Program Files\Internet Explorer\iexplore.exe” for Windows 32-bit or “C:\Program Files\Internet Explorer (x86)\iexplore.exe” for Windows 64-bit.

    For Mozilla Firefox: “C:\Program Files\Mozilla Firefox\firefox.exe” for Windows 32-bit or “C:\Program Files (x86)\Mozilla Firefox\firefox.exe” for Windows 64-bit.

    For Google Chrome: “C:\Program Files\Google\Chrome\Application\chrome.exe”

Now Scan with Bleeping Computer Adwcleaner

Since you already scan with Malwarbytes

Try HitmanPro


Plus if you get lost in the instruction here some help
0
 

Author Closing Comment

by:tonyadam
Comment Utility
I elected to award points to both of you for your prompt response.  Basically, I restored the oldest restore point I could find and that fixed the problem.  I did run Adw and the other recommendations to ensure Nation Zoom was not present.  ADW did remove lots of junk which should help. All seems OK now.  Thanks again.
0
 
LVL 24

Expert Comment

by:aadih
Comment Utility
Great. You did it. :-)
0
 
LVL 14

Expert Comment

by:comfortjeanius
Comment Utility
Good Job!!!

@(^_^)@
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
Windows could not search for new updates Error code 80072F8F 5 291
CBS.LOG 2 131
Norton antivirus 11 65
robocopy vs xcopy vs copy 8 54
To Remove Security Suite for Windows Malware from a Windows XP Machine:  Restart computer in Safe Mode (to do this see http://tinyurl.com/me78p) Login as Administrator Go to My Computer /Tools/ Folder Options/ View/  check mark the selectio…
Citrix XenApp, Internet Explorer 11 set to Enterprise Mode and using central hosted sites.xml file.
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now