Nation Zoom / It is still there

[kuttus]

Please proceed with Default Settings.

 

[Niels B]

Here is the txt file. CCCleaner writes : select a program from the list you want to remove from your computer. Which program do I select ?
Nation zoom is still there.
Is it possible that original malware is gone and a rest of nation zoom is installed somewere in chrome.exe ?

 

[kuttus]

That is what happening. It seems it is gone from the computer and not from Google Chrome. Please check and send me a Screen shots of Google Chrome Plugins installed on your computer.

Copy and Paste this address in Google Chrome and Hit on Enter. Send me a Screenshots of it also.

chrome://settings/

chrome://extensions/

 

[Niels B]

It was just an idear.
Ekstra info : if I open Google Chrome, Nation Zoom shows up in a second window. If I let this stay open and open a new side of Goggle Chrome, Nation Zoom doesn´t show.

Here is the screen shots. Sorry it is in Danish.

 

[kuttus]

Once Again you have to do this..

Press on Windows Key and R key all together on your keyboard. Now you will get a Run window. Inside that one Type Chrome and press on Ok. Now it will open a Google Chrome. Check if you are you facing issues in that one.

 

[Niels B]

Yes it is still there. However if google chrome is open and I do what you say and open a new google chrome window, it doesn´t show up.

I guess that if I uninstall Google Chrome and reinstall, it won´t help. If I was the Nation Zoom creators, I would make sure that Nation Zoom will come back. I could imagine that when you uninstall Google Chrome, a exe file will be created. When you reinstall Google Chrome, the Nation Zoom malware will install it self again.

What do you think about that teory ?

 

[kuttus]

It is a Add on on your computer. In the scan It is not showing up. Do you Re install Google Chrome?

STEP 1: Run a scan with AdwCleaner

1. Download AdwCleaner from the below link.
   ADWCLEANER DOWNLAOD LINK (This link will automatically download Security Check on your computer)
   
2. Close all open programs and internet browsers.
3. Double click on adwcleaner.exe to run the tool.
4. Click on Scan,then confirm each time with Ok.
5. After the Scan is Over press on Clean ,then confirm each time with Ok.
6. Your computer will be rebooted automatically. A text file will open after the restart.
7. Please post the contents of that logfile with your next reply.
8. You can find the logfile at C:\AdwCleaner[S1].txt as well.

------------------------------------------------------------------------------------------------------------------------------

 

[kuttus]

Copy and Paste this address in Google Chrome and Hit on Enter after that remove HD for Youtube from there.

chrome://extensions/

 

[Niels B]

Still there. Her is the file.

 

[Niels B]

Hit man pro found this - see log file.

 

[Niels B]

I tryed to uninstall Google Chrome and then reinstall. To my surprice my bookmarks and ad-ons was reinstalled after a short while. Then Nationzoom showed up when I restarted Chrome. I think that where ever the info about bookmarks and ad-ons is hidden, is the same place for the Nationzoom malware.

 

[kuttus]

Do you delete the Add on HD for Youtube ?

 

[Niels B]

Yes I did. That one didn´t show up again.

 

[kuttus]

Okay. Remove Google Chrome from your computer fully and run OTL.

OTL DOWNLOAD LINK (This link will automatically download OTL on your computer)

 

[Niels B]

Here is the log file from OTL

 

[kuttus]

Hi Niels B,
How comfortable you are with editing registry ?

 

[Niels B]

I am ok. Done that before. Have you found something ?

 

[kuttus]

All those Logs are good...
Let's check in Registry... Do you know how to Open Registry ?

 

[kuttus]

Step -1 --- Backup the registry using Registry Editor

1. Please press the Windows key and R key on your keyboard together.
2. Now you will get a Run window.
3. Inside that Run Windows type REGEDIT and press on Ok.
4. Now your will get a Registry Editor window.
5. Inside that Registry Editor Select the My Computer in the Left Panel and press on File Menu and Presson Export.
6. It will ask you where do you want to save this file.
7. Save that file on your C drive with a name RegistryBackUp.reg

Please be very careful. If something wrong happen it may make your computer unstable. Make sure you do the above step-1 before you proceed with Steps-2

Step -2

After the back up. Click "Edit" then click "Find" in the search box type in "Nationzoom" and press on Ok. It will start searching your Windows Registry. If it found Nationzoom in registry delete it and press on F3. If we press F3 it will start searching the registry once again. To check if there is any other sign of Nationzoom . If it found anything else delete all those.

 

[Niels B]

I did try that some time ago. I did it again and "Nationzoom" wasn´t there. it must be some sort of program that is called something else.
Where is the info chrome uses to re-install ad-ons, bookmarks etc. when you re-install Chrome.