Remove “Nation Zoom” hijack (Virus Removal Guide)

Nation Zoom is a browser hijacker, which is promoted via other free downloads, and once installed it will change your browser homepage to and default search engine to
This in itself is not considered malicious as there are many legitimate programs that change these settings as well. What is considered malicious, though, is that it will also append the argument to random Windows shortcuts on your desktop and your Windows Start Menu.
[Image: Nation Zoom virus]
The Nation Zoom homepage will display advertisements and sponsored links in your search results, and may collect search terms from your search queries. The Nation Zoom hijack is used to boost advertising revenue, as in the use of blackhat SEO, to inflate a site’s page ranking in search results.

Nation Zoom it’s technically not a virus, but it does exhibit plenty of malicious traits, such as rootkit capabilities to hook deep into the operating system, browser hijacking, and in general just interfering with the user experience. The industry generally refers to it as a “PUP,” or potentially unwanted program.
Nation Zoom is an ad-supported (users may see additional banner, search, pop-up, pop-under, interstitial and in-text link advertisements) cross web browser plugin for Internet Explorer (BHO) and Firefox/Chrome (plugin) and distributed through various monetization platforms during installation. The browser extension includes various features that will modify the default or custom settings of the browser including the home page, search settings and in some cases will modify Internet Explorer’s load time threshold, place a lock file within Firefox to prevent competing software from changing its settings as well as disable the browser’s Content Security Policy in order to allow for cross site scripting of the plugin.

Nation Zoom homepage got on your computer after you have installed a freeware software (video recording/streaming, download-managers or PDF creators) that had bundled into their installation this browser hijacker.
For example, when you install VPlay, you will also agree to change your browser homepage to and default search engine to
[Image: Nation Zoom redirect]
However when you uninstall VPlay from your computer, your web browser’s default settings will not be restored. This means that you’ll have to remove Nation Zoom homepage from your favorite web browser manually.

You should always pay attention when installing software because often, a software installer includes optional installs, such as this Nation Zoom browser hijacker. Be very careful what you agree to install.
Always opt for the custom installation and deselect anything that is not familiar, especially optional software that you never wanted to download and install in the first place. It goes without saying that you should not install software that you don’t trust.

Nation Zoom Homepage – Virus Removal Guide

This page is a comprehensive guide, which will remove Nation Zoom from your Internet Explorer, Firefox and Google Chrome.
Please perform all the steps in the correct order. If you have any questions or doubt at any point, STOP and ask for our assistance.
STEP 1: Uninstall Nation Zoom malicious programs from your computer
STEP 2: Remove Nation Zoom from Internet Explorer, Firefox and Chrome
STEP 3:Clean up the various Windows shortcuts that have been hijacked by Nation Zoom virus
STEP 4: Remove Nation Zoom browser hijacker from your computer with AdwCleaner
STEP 5: Remove Nation Zoom virus with Malwarebytes Anti-Malware Free
STEP 6: Double-check for the Nation Zoom infection with HitmanPro

STEP 1 : Uninstall Nation Zoom malicious programs from your computer

The Nation Zoom browser hijacker is usually installed with other malicious programs, which will either protect this infection from being removed from your computer or will display pop-up ads within web browser.
In this first step, we will try to identify and remove any malicious program that might be installed on your computer.

  1. To uninstall the programs responsible for the Nation Zoom redirect, click the Start button, then select Control Panel, and click on Uninstall a program.
    If you are using Windows 8, simply drag your mouse pointer to the right edge of the screen, select Search from the list and search for “control panel“. Or you can right-click on a bottom left hot corner (formerly known as the Start button) and select Control Panel from there, then select Uninstall a program.
    [Image: Uninstall a program]
  2. When the Add/Remove Programs or the Uninstall a Program screen is displayed, scroll through the list of currently installed programs and uninstall Wsys Control, Extended Protection, eSave Security Control, Desk 365, Nation Zoom browser protection and any other recently installed or unknown programs from your computer.
    [Image: Uninstall Nation Zoom malicious programs from Windows]

If you are having issues while trying to uninstall the Nation Zoom malicious programs, you can use Revo Uninstaller to completely remove this unwanted program from your machine.

Depending on what program has installed the Nation Zoom homepage, the above program may have a different name or not be installed on your computer. If you cannot find any unwanted or unknown programs on your machine, then you can proceed with the next step.

STEP 2 : Remove Nation Zoom from Internet Explorer, Firefox and Chrome

Remove Nation Zoom from Internet Explorer

  1. Open Internet Explorer, click on the gear icon [Image: icongear.jpg] (Tools for Windows XP users) at the top (far right), then click again on Internet Options.
    Internet Options in IE
  2. In the Internet Options dialog box, click on the Advanced tab, then click on the Reset button.
    Reset Internet Explorer
  3. In the Reset Internet Explorer settings section, check the Delete personal settings box, then click on Reset.
    Internet Explorer back to its default settings to remove Nation Zoom
  4. When Internet Explorer finishes resetting, click Close in the confirmation dialogue box and then click OK.
  5. Close and open Internet Explorer.

Remove Nation Zoom from Mozilla Firefox

  1. Remove Nation Zoom extensions from Firefox.
    At the top of the Firefox window, click the orange Firefox button, then select Add-ons.
    Firefox addon menu
    Select the Extensions tab, then remove Nation Zoom, Extended Protection and any other unknown extensions from Mozilla Firefox.
    As a general rule, if you have not installed a Firefox extensions, then you can remove it from your web browser.
    [Image: Nation Zoom Firefox extension]
  2. Reset your default search engine and homepage from to their default.
    To reset your search engine and homepage to their default, we will use the SearchReset extension.This add-on is very simple: on installation, it backs up and then resets your search preferences and home page to their default values, and then uninstalls itself. This affects the search bar, URL bar searches, and the home page.
    You can download SearchReset from the below link, and then we will just need to install it to revert Firefox to its default settings.
    SEARCHRESET DOWNLOAD LINK (This link will open another web page from where you can download the SearchReset Firefox extension)
    [Image: SearchReset extension]

Remove Nation Zoom from Google Chrome

  1. Remove Nation Zoom extensions from Google Chrome.
    Click the Chrome menu Chrome menu  button on the browser toolbar, select Tools and then click on Extensions.
    Google Chrome Extensions
    In the Extensions tab, remove Extended Protection 1.9, Lightning Newtab  and any other unknown extensions by clicking the trash can [Image: Remove an extension from Chrome] icon.
    Basically, if you have not installed a Chrome extension, you should remove it from your web browser.
    [Image: Nation Zoom Chrome extension]
  2. Set Google Chrome default search engine from Yahoo Search to Google.
    Click the Chrome menu Chrome menu  button, then select Settings and click on Manage search engines in the Search section.
    In the Search Engines dialog that appears, select Google and click the Make Default button that appears in the row.
    [Image: Yahoo Search in Google Chrome]
    Search for Yahoo Search in the Search Engines list, and click the X button that appears at the end of the row.
    [Image: Yahoo Search Chrome removal]
  3. Change Google Chrome homepage from to its default.
    Nation Zoom has modified your Google settings to open their webpage whenever you start your browser, so we will need to revert this change.
    Click the Chrome menu Chrome menu  button, then select Settings and click on One the New Tab page in the On Startup section.
    [Image: Change Google Chrome homepage to its default]

STEP 3: Clean up the various Windows shortcuts that have been hijacked by Nation Zoom virus

The Nation Zoom infection will hijack your browser shortcuts, so that each time you will click on the browser icon, you will be automatically redirected to
In this third step we will clean your browser shortcuts by removing the argument from the Target field.

  1. Search for your browser shortcut (Desktop, Taskbar or Start Menu Shortcut), then right-click on it and select Properties.
    [Image: Firefox Shortcut properties]
    To view the Properties menu for the browser shortcuts pinned to your taskbar, right-click on the browser shortcut from the Taskbar, then right-click again on the browser icon as see in the below image.
    [Image: taskbar shortcut hijacker]
  2. In the Shortcut tab, in the Target field, remove the argument. Basically, there should be only the path to browser executable file. Nothing more.
    [Image: Nation Zoom hijack]

These are the default shortcut path that should be in your Target box, if the Nation Zoom argument is in there, then you should remove it.

  • For Internet Explorer: “C:\Program Files\Internet Explorer\iexplore.exe” for Windows 32-bit or “C:\Program Files\Internet Explorer (x86)\iexplore.exe” for Windows 64-bit.
  • For Mozilla Firefox: “C:\Program Files\Mozilla Firefox\firefox.exe” for Windows 32-bit or “C:\Program Files (x86)\Mozilla Firefox\firefox.exe” for Windows 64-bit.
  • For Google Chrome: “C:\Program Files\Google\Chrome\Application\chrome.exe”

STEP 4: Remove Nation Zoom browser hijacker with AdwCleaner

The AdwCleaner utility will scan your computer for Nation Zoom malicious files that may have been installed on your computer without your knowledge.

  1. You can download AdwCleaner utility from the below link.
    ADWCLEANER DOWNLOAD LINK (This link will automatically download AdwCleaner on your computer)
  2. Before starting AdwCleaner, close all open programs and internet browsers, then double-click on the AdwCleaner icon.
    [Image: AdwCleaner Icon]
    If Windows prompts you as to whether or not you wish to run AdwCleaner, please allow it to run.
  3. When the AdwCleaner program will open, click on the Scan button as shown below.
    [Image: Adwcleaner Scan]
    AdwCleaner will now start to search for Nation Zoom malicious files that may be installed on your computer.
  4. To remove the Nation Zoom malicious files that were detected in the previous step, please click on the Clean button.
    [Image: AdwCleaner removing infections]
    AdwCleaner will now prompt you to save any open files or data as the program will need to reboot the computer. Please do so and then click on the OK button.

STEP 5: Remove Nation Zoom virus from your computer with Malwarebytes Anti-Malware Free

Malwarebytes Anti-Malware Free utilizes Malwarebytes powerful technology to detect and remove all traces of malware including worms, trojans, rootkits, rogues, dialers, spyware and more.

  1. You can download Malwarebytes Anti-Malware Free from the below link,then double click on it to install this program.
    MALWAREBYTES ANTI-MALWARE DOWNLOAD LINK (This link will open a download page in a new window from where you can download Malwarebytes Anti-Malware Free)
  2. When the installation begins, keep following the prompts in order to continue with the setup process.
    Do not make any changes to default settings and when the program has finished installing, click on the Finish button.
    [Image: Malwarebytes Anti-Malware final installation screen]
  3. On the Scanner tab, select Perform quick scan and then click on the Scan button to start scanning your computer.
    [Image: Malwarebytes Anti-Malware Quick Scan]
  4. Malwarebytes’ Anti-Malware will now start scanning your computer as shown below.
    [Image: Malwarebytes Anti-Malware scanning for Nation Zoom virus
  5. When the Malwarebytes scan will be completed,click on Show Result.
    [Image: Malwarebytes Anti-Malware scan results]
  6. You will now be presented with a screen showing you the malware infections that Malwarebytes’ Anti-Malware has detected.Please note that the infections found may be different than what is shown in the image.Make sure that everything is Checked (ticked) and click on the Remove Selected button.
    [Image:Malwarebytes removing malware]

STEP 6: Double check for the Nation Zoom infection with HitmanPro

HitmanPro is a second opinion scanner, designed to rescue your computer from malware (viruses, trojans, rootkits, etc.) that have infected your computer despite all the security measures you have taken (such as anti virus software, firewalls, etc.).

  1. You can download HitmanPro from the below link, then double click on it to start this program.
    HITMANPRO DOWNLOAD LINK (This link will open a new web page from where you can download HitmanPro)
  2. HitmanPro will start and you’ll need to follow the prompts (by clicking on the Next button) to start a system scan with this program.
    HitmanPro installation
  3. HitmanPro will start scanning your computer for malware, as seen in the image below.
    HitmanPro scanning for Nation Zoom virus
  4. Once the scan is complete,you’ll see a screen which will display all the infected files that this utility has detected, and you’ll need to click on Next to remove these malicious files.
    HitmanPro scan results
  5. Click Activate free licenseto start the free 30 days trial and remove all the malicious files from your computer.
    HitmanPro 30 days activation button

Your computer should now be free of the Nation Zoom infection. If your current anti-virus solution let this infection through, you may want to consider purchasing the PRO version of Malwarebytes Anti-Malware to protect against these types of threats in the future.
If you are still experiencing problems while trying to remove Nation Zoom hijacker from your machine, please start a new thread in our Malware Removal Assistance forum.


If we have managed to help with your computer issues, then please let other people know that this article will help them!
You can share this article on Facebook,Twitter or Google Plus by using the below buttons.


I am the creator and owner of MalwareTips. I am passionate about computer security and technology. I have an experience of 9 years working as a security researcher.

My area of expertise includes Malware Analysis and Computer Forensics. I'm active in the various online anti-malware communities where I do researches for new malware threats as they are released.


All our malware removal guides and utilities are completely free! We do not request any kind of payment for our services, however if you like to support us (with this website maintenance costs), you can make a small donation.
Any amount is appreciated, and will support our fight against malware.

  • raphael ibrahim

    Thank’s for this info

  • Nation Zoom Can Rot With Satin

    Though this took a while for my slow computer, it wiped out every last remainder of Nation Zoom.

  • Die Nation Zoom

    man…you don’t know how long I’ve been trying to get rid of nationzoom…I appreciate all the tips

  • lol

    Thanks man my other viruses are deleted to so thanks alot!

  • curlzz

    thank s a lottt

  • JMK

    thanks alot. however, when I ran the hitman pro, it left NationZoom. I ran the scan again and manually selected delete. It is a truly resistant piece of software. I hope it is removed now.

  • Robert

    Thanks Stelian. It all works perfect again

  • Gopinath Maruthai

    Thank you very much for your help dude. Nation zoom has gone.

  • Margarita

    Hi, I wanted to say a HUUUGE thank you . 2 hours wasted trying to get rid of the greatest nuisance of all times, and only your tips have helped. However, I have one question left – is it necessary to proceed with Step 6 (Hitman)? All of the other previous steps completed, no sign of Nation Zoom anymore – so can I just skip the last Step? Thanks in advance for your reply, and all of the best!

  • sai

    thanks !!!

  • siere

    Thank you so much!! you really helped me :)

  • Mel Richards

    Thanks very much for this. Seems to have worked perfectly.

  • joying0

    Thanks for your help.

  • Rabia Kaur

    thanku ……. it was of great help:)

  • hugo Portugal

    thank you very must for your were great..thanks for you time..realy..god bless you and your family >)

  • Shin

    Thank You very much for being my hero!

  • Nitin Mane


  • Alex

    Thanks a lot. It was install like a jawa actualization an keeps me away from my work for few hours.

  • Abhijeet Chindhe

    Thanks a lot man.. worked like charm.. that bloody virus was a nightmare to my life… Thanks a ton. I owe u a beer, man !! ;)

  • Denis

    Now that’s worth a quadruple thumbs up! Really, I’ve been losing my head over that Lightning Newsh*** for months now.
    Perfect step by step instruction, thanks!

  • Christopher

    Thank You Very Much Bro…… For all people, just follow the steps…..

  • Ninja

    Thanks much Stelian. You saved my PC!

  • Megan

    Thank you,, and God bless you!

  • Karina

    Thanks so much. You have saved me from unwanted crap from Nation Zoom.

  • Arjun Babu

    great work .. thanx

  • Serena

    I could just hug you!!! THANK YOU!!!!!!!!!!!!!!

  • P.

    handy and useful!!!!

  • Hope

    This was the only website that fixed this issue for me! I am in IT and had tried everything else on my on, including malware and adware scans. It was the file extensions under Properties that finally fixed it. Thanks so much!

  • cristiane

    Muito obrigada, sua explicação foi a única que conseguiu me ajudar, meu pc além de ficar livre do nation zoom, ficou mto melhor… obrigada

  • Andres

    Muchas gracias por la ayuda

  • chatrapathy

    thank u so much for ur kind information

  • Psytrance

    Thank you very much! :)

  • Jill

    Thank you very much!

  • Nicholas T.

    You saved my bacon, sir! Thank you VERY much!

  • Stelian Pilici

    Yes, you can uninstall any programs that we have used in this guide. :)

  • Stelian Pilici

    Lets reset Firefox to its default settings:
    1.At the top of the Firefox window, click the Firefox button, go over to the Help sub-menu (on Windows XP, click the Help menu at the top of the Firefox window), and select Troubleshooting Information.

    2.Click the Reset Firefox button in the upper-right corner of the Troubleshooting Informationpage.

    3.To continue, click Reset Firefox in the confirmation window that opens.

    4.Firefox will close and be reset. When it’s done, a window will list the information that was imported. Click Finish

  • etm567

    Okay. I just posted that I had gotten rid of it except in IE. THen was re-reading here. I had checked my shortcuts, but I don’t have a shortcut for explorer, so I thought maybe I had missed that. SO I checked IE and yes, the target was that awful wrong line that I had found elsewhere. So I took that out and restarted IE and it seems to be gone.

    (One funny thing, IE opened with Bing as the search engine, although I had just looked in manage add-ons and such and it is listed as Google. That’s for another day, and maybe not, as I don’t even use IE….)

    Too many words to say yes, you are right, doublecheck step 3 for IE. At least, that worked for me. At least, for the time being.


  • etm567

    I have done this list. Thank you very much. It has helped. I have done parts of it several times. At the moment, nationzoom seems to be gone from Firefox and Chrome, but it is still working in Explorer.

    Under “Manage extensions” in Explorer, it is listed as enabled, but grayed out so I cannot disable it. The publisher is “Not Available”. I asked for more information, and got this folder —

    C:Program files (x86)SearchNewTab

    and this file —


    But cannot either folder or file, even when I go to cmd and run as administrator and ask WIndows to display all hidden files and folders.

    I have run Adwcleaner again, and Hitman. Adwcleaner did find something in Explorer, and I asked it to clean it, but nationzoom still seems to be there. I don’t use IE, if I can avoid it, so do not know much about it. But I fear if nationzoom is still there it will spread itself again.

    • Stelian Pilici

      Did you reset your Internet Explorer settings as seen in STEP 2?

  • Caysie

    I completed all of these steps, but when I open a new tab in Firefox, Nation Zoom still pops up!

    Please help!!

    • Stelian Pilici

      Did you reset your Firefox settings? Please re-do STEP 3, and this time please post the Target path in your next reply. Please make sure you get the path from the actual icon that you are using to start your browser.

  • Kristen


  • Lee

    Thanks for this – really helpful. A couple of notes:

    1) When changing the ‘Target’ in the Properties of each browser, I eventually realised that I had changed the setting on the shortcut rather than the program itself, so what I did was remove all shortcuts (desktop icons, icons pinned to Start Menu, etc) and then edit the Target in the actual program, then re-create the shortcuts.

    2) I also noticed a Microsoft C++ thing that had been downloaded at the same time as the other things. As this was apparently from a reliable source I didn’t remove it. But then it seemed that Nation Zoom kept coming back to IE… so I deleted the C++ thing and it seemed to help. Maybe it was an executable?

    Anyway, your info here is really detailed and extremely helpful – thanks very much!

  • jim

    did not work for me grrr here is my target path “C:Program FilesInternet Exploreriexplore.exe”

    • Stelian Pilici

      Did you reset your Internet Explorer settings? Also, the path for the Internet Explorer browser,is the one that you are actually clicking on right?

  • Turkish Girl

    You are amazing.. Thank you so much ..

  • Hannah Dougherty

    Thank you! Thank you so much!!!! I hated seeing that awful nation zoom page….thank you!!!!!!! The ADW Cleaner did the trick. I had tried so many other programs including malware bytes but they did not stop it from changing from my home page. LOOOOOOOOOOOOOOOOVE you!!!!

  • Stelian Pilici

    Did you manage to remove this infection? :)

  • Claudine

    I have tried these steps and I cannot get rid of this.

    • Stelian Pilici

      Please pay attention to STEP 3 as this infection will hijack your browser shortcuts!!
      Can you please right-click on your browser shortcut and copy/paste the content of the Target box, so that I may see what’s going on.
      Stay safe!

  • Modico

    thank you for this guide, it helped a lot.

  • Matt

    Thanks a lot!!!

  • brett

    I followed all the steps but it still pops up as a browser… ARGHHHH

    • Stelian Pilici

      Please pay attention to STEP 3 as this infection will hijack your browser shortcuts!!
      Can you please right-click on your browser shortcut and copy/paste the content of the Target box, so that I may see what’s going on.
      Stay safe!

  • innka

    Thank you very much for your help! One question: are steps 5 and 6 necessary or optional in removing the nationzone?

  • Tammy Tanner Chadwick

    Thank you so much for the wonderful help! My computer no longer has the “Nation Zoom virus.” :)

  • Adri

    What if you are SYSTEMLY unable to complete the steps, you have a WINDOWS 8 pc and the properties have no indication of nation zoom.. AND you cant download all the virus removers, and you’re a 13 year old child who’s crying and afraid if her dad finds out she’ll get yelled at and he won’t be able to fix you hundreds of dollars worth touchscreen pc… and you’re crying desperately trying to fix this.

    • Stelian Pilici

      Hello Adri,
      First off all, stay calm… This is not as bad as it looks. I will help you clean this infection.

      Lets try these steps:
      Can you please run a scan with Combofix and post the logs here so that I can get an idea on what’s going on:

      You can download ComboFix from here:

      VERY IMPORTANT !!! Save as Combo-Fix.exe during the download.ComboFix must be renamed before you download to your Desktop

      Close any open browsers.

      Very Important!!!> Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause “unpredictable results”.

      WARNING: Combofix will disconnect your machine from the Internet as soon as it starts

      Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.

      If there is no internet connection after running Combofix, then restart your computer to restore back your connection.

      1. Double click on ComboFix.exe & follow the prompts.

      2. Accept the disclaimer and allow to update if it asks

      3. When finished, it shall produce a log for you.


      Do not mouse-click Combofix’s window while it is running. That may cause it to stall.

      Do not “re-run” Combofix. If you have a problem, reply back for further instructions.

      If after the reboot you get errors about programs being marked for deletion then reboot, that will cure it.

      Please post the Combofix, so that I can get an idea on what’s going on.

      STEP 3: Please take a look at STEP 3 from this guide…. And copy/paste here the content of the Target field from your browser shortcut.

      Send me all the AdwCleaner and Junkware log, and the content of the Target field from your browser shortcut.

      Stay safe!

  • Missy

    Thank you! I tried 2-3 other websites and wasn’t successful in removing Nation Zoom. Your blog page walked me through several steps the others didn’t. I’m happy to say my computer is healthy again!!!

    • Stelian Pilici

      Thank you! And stay safe!

  • Joeyj

    hi my search engine (explore) still make nation zoom my home page. help. I have followed all the steps.

    • Stelian Pilici

      Please pay attention to STEP 3 as this infection will hijack your browser shortcuts!!
      Can you please right-click on your Internet Explorer shortcut and copy/paste the content of the Target box, so that I may see what’s going on.
      Stay safe!

  • KuroLove

    Muchas gracias por la ayuda por un momento creí que podría eliminar esta porquería pero resulta que cometí un error al parecer elimine Windows Update y me pide este componente para utilizar adwcleaner no sé que hacer estoy desesperada por deshacer este virus, help me please!

  • Stelian Pilici

    So everything is working fine now? Right? :)

    Stay safe!

    • Stacey Moran

      yes :)

  • Nemish

    Thanks a lot

  • Tazsmc24

    Thanks, very helpful

  • CalPolyStudent

    Thank you so much for the help. I am a student w/o my parents to financially support me and this was an excellent resource to the Nation Zoom virus I ran into. I really like the manual approach to fixing problems and this was exactly what I was looking for. After hours of worrying, I can now be at peace knowing my personal info is safe. Thank you Stelian Pilici and all those who make this website possible. With the donation I could afford, I hope that you’re greatly appreciated.