Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Infected with nationzoom

  • Please log in to reply
3 replies to this topic

#1 kcguru


  • Members
  • 82 posts
  • Local time:05:24 AM

Posted 11 December 2013 - 11:53 PM

I have my best friend's father-in-law's laptop which has the nationzoom redirect virus going on. I have run malwarebytes and it comes back no infections but then when I open Internet Explore or Chrome, it's still there. Need help!!! Laptop is running Windows 7.

BC AdBot (Login to Remove)


#2 noknojon


  • Banned
  • 10,871 posts
  • Gender:Not Telling
  • Local time:08:24 PM

Posted 12 December 2013 - 01:50 AM

Hello -

Please click on Follow this topic at the top right side so you will not lose track of replies -


Nation Zoom is a small advertising program that has been downloaded with another program.

You need to agree to load it, and agree to it, but the mention of it is often disguised.


Download Screen317 Security Check and save it to your Desktop.
* Double-click SecurityCheck.exe
* Follow the onscreen instructions inside of the black box.
* A Notepad document should open automatically called checkup.txt
* Please post the contents of that document.
Note:: If any security program requests permission to access the Internet, allow it to do so.


Please download MiniToolBox to Desktop and run it.
Checkmark following boxes:
* List content of Hosts
* List last 10 Event Viewer log
* List Installed Programs
* List Devices (do NOT change any settings here)
* List Users, Partitions and Memory size
Click Go and post the result. (result.txt)


We will try and see if it is shown in Programs -


Next -

Please download and run RKill by Grinler. A black DOS box will briefly flash and then disappear.
This is normal and indicates the tool ran successfully.

At most the tool will run for about 2 minutes

Important: Do not reboot your computer until you complete the next step.


* Please download AdwCleaner by Xplode and save to your Desktop.

* NOTE - Close or save all open programs / work, as your computer will be re-booted -
* Double-click on AdwCleaner.exe to run the tool.
* Vista/Windows 7/8 users right-click and select Run As Administrator.
* Click on the Scan button (only once)
* AdwCleaner will begin...be patient as the scan may take some time to complete.
* After the scan has finished, click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
* NOW - Click on the Clean button (only once)
* Press OK when asked to close all programs and follow the onscreen prompts.
* Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
* After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
* Copy and paste the contents of that logfile in your next reply.
* A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.


Next -

Please download Junkware Removal Tool by thisisu and save it to your Desktop.
* Close all open programs and shut down any protection/security software now to avoid potential conflicts.
* Double-click on JRT.exe to run the tool.
* Vista/Windows 7/8 users right-click and select Run As Administrator.
* The tool will open and start scanning your system.
* Please be patient as this can take a while to complete depending on your system's specifications.
* On completion, a log file named JRT.txt will automatically open and be saved to your Desktop.
* Copy and paste the contents of JRT.txt in your next reply.
These tools will search for and remove many potentially unwanted programs (PUPs), adware, toolbars, browser hijackers, extensions, add-ons, browser helper objects (BHOs) and other junkware to include many related registry entires (values, keys)


Now -

Clear Cache / Temp Files
Download TFC by Old Timer to your desktop
• Please double-click TFC.exe to run it.
For Vista, Win 7 / 8 right-click on the file and choose Run As Administrator.
• It will close all programs when run, so make sure you have saved all your work before you begin.
• Click the Start button to begin the process.
• Once it's finished it may reboot your machine.
• If it does not, please manually reboot the machine yourself to ensure a complete clean.

NOTE - It will not produce a log, so do not look for one.



Do NOT run any Registry Cleaner as you will cause damage to your data and system -


Thank You -

Edited by noknojon, 12 December 2013 - 01:52 AM.

#3 ConiMari98


  • Members
  • 2 posts
  • Local time:03:24 AM

Posted 16 December 2013 - 03:57 AM

I got this virus on my computer, but it was a new computer.  I opted to restore to factory settings since it was so new and I wasn't losing any data.  It appears to be gone, should I be comfortable in believing that the reinstall of the OS got rid of it?

#4 noknojon


  • Banned
  • 10,871 posts
  • Gender:Not Telling
  • Local time:08:24 PM

Posted 16 December 2013 - 03:08 PM

Hello ConiMari -


Please start a New Topic so that we know what you mean -


Thank You -

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users