Your computer is infected with malicious software? Do you have popups on your PC?
If so, search this blog for removal instructions or find computer threats by category.

Thursday, December 26, 2013

How to Remove "Nation Zoom" Homepage Malware (nationzoom.com)

Tell your friends:
Nation Zoom (nationzoom.com) is a browser hijacker that will hijack your homepage and change your default search engine provider that you've probably never heard of. Browser "hijacking" is a common problem. If you download software from unfamiliar or even fake websites, chances are you have unknowingly installed a few hidden applications that can alter your browser settings and as a result your web browser has been hijacked. Browser "hijacking" is a growing problem. Such browser hijackers as Nation Zoom, Aartemis, Delta Search or Qvo6 are extremely widespread and are increasingly used by scammers to spy on your web browsing habits and deliver targeted ads, sometimes very misleading. Needless to say, you are better off without it. To remove Nation Zoom hijack, please follow the steps in the removal guide below.


Malware that alerts your browser settings is usually distributed through fake Java, Flash or web browser update web pages. Once installed, it will add a few web browser extensions and append the argument http://www.nationzoom.com to all web browser shortcuts on your computer. The malicious web browser extensions are extremely persistent, for example one of those is called Extended Protection (clearly to mislead users) which must be removed manually. Resetting your web browser settings won't work since it re-installs itself once you restart your browser, Chrome for instance.

Furthermore, Nation Zoom has no apparent uninstall application that could be used to uninstall the browser hijacker and restore browser settings. It's usually installed under a different name, so instead of looking for Nation Zoom or nationzoom.com find a program named WPM17.8.0.3159 and uninstall it. Then manually, remove the Extended Protection extension and reset your web browser settings. Last, but not least, remove nationzoom.com argument from browser shortcuts. This is the proper way to remove this browser hijacker and related malware from your computer. See the removal guide below for more details.

And once again, it's very important that you pay attention to the license agreements and installation screens when installing anything. Trust me, reading the the license agreements carefully will save you time and headache in the long run. If an installation screen offers you Custom or Advanced installation options, it is a good idea to select these as they will typically disclose what other 3rd party software will also be installed and allow you to opt out of them. If you have any questions, please leave a comment below. Good luck and be safe online!

Written by Michael Kaur, http://deletemalware.blogspot.com


Nation Zoom removal instructions:

1. First of all, download recommended anti-malware software and run a full system scan. It will detect and remove this infection from your computer. You may then follow the manual removal instructions below to remove the leftover traces of this infection. Hopefully you won't have to do that.







Also, please feel free to call us (toll free) and we'll be happy to help you on the phone.


2. Remove Nation Zoom related programs from your computer using the Add/Remove Programs control panel (Windows XP) or Uninstall a program control panel (Windows 7 and Windows 8).

Go to the Start Menu. Select Control PanelAdd/Remove Programs.
If you are using Windows Vista or Windows 7, select Control PanelUninstall a Program.



If you are using Windows 8, simply drag your mouse pointer to the right edge of the screen, select Search from the list and search for "control panel".



Or you can right-click on a bottom left hot corner (formerly known as the Start button) and select Control panel from there.



3. When the Add/Remove Programs or the Uninstall a Program screen is displayed, scroll through the list of currently installed programs and remove the WPM17.8.0.3159 program.



If you are using Windows Vista, Windows 7 or Windows 8, click Uninstall up near the top of that window. When you're done, please close the Control Panel screen.


Remove Nation Zoom from Google Chrome:

1. Click on Chrome menu button. Go to ToolsExtensions.



2. Ensure that the Developer mode checkbox in the top right-hand corner is checked. Go to Chrome extensions directory and delete the folder Extended Protection extension is loaded from.



3. Then select Settings. Scroll down the page and click Show advanced settings.


4. Find the Reset browser settings section and click Reset browser settings button.


5. In the dialog that appears, click Reset. Close Chrome.

6. Right-click Google Chrome shortcut you are using to open your web browser and select Properties.

7. Select Shortcut tab and remove "http://www.nationzoom.com...." from the Target field and click OK to save changes. Basically, there should be only the path to Chrome executable file.




Remove Nation Zoom from Mozilla Firefox:

1. Open Mozilla Firefox. In the URL address bar, type about:config and hit Enter.



Click I'll be careful, I promise! to continue.



In the search filter at the top, type: nationzoom



Now, you should see all the preferences that were changed by Nation Zoom. Right-click on the preference and select Reset to restore default value. Reset all found preferences!



4. Right-click the Mozilla Firefox shortcut you are using to open your web browser and select Properties.

5. Select Shortcut tab and remove "http://www.nationzoom.com...." from the Target field and click OK to save changes. Basically, there should be only the path to Firefox executable file.




Remove Nation Zoom from Internet Explorer:

1. Open Internet Explorer. Go to ToolsManage Add-ons.



2. Select Search Providers. First of all, choose Live Search search engine and make it your default web search provider (Set as default).

3. Select Nationzoom and click Remove to remove it. Close the window.



4. Right-click the Internet Explorer shortcut you are using to open your web browser and select Properties.

5. Select Shortcut tab and remove "http://www.nationzoom.com...." from the Target field and click OK to save changes. Basically, there should be only the path to Internet Explorer executable file.



6. Finally, go to ToolsInternet Options and restore your home page to default. That's it!

15 comments:

Anonymous said...

Thank you very much!
I had problems with this virus for days, and with the help of your blog I could fix it.
I'm from Brazil and, as much as I search for the blogs of my country, none of them were more helpful than yours.
Thank you.

Anonymous said...

THANK YOU SO MUCH !!! all steps are very clear.. and HELPFUL ! i finally could remove the malware

Anonymous said...

¡¡¡Muchas Gracias!!!

Funcionó. Saludos desde México.

Anonymous said...

Thanks sooooo much!

Anonymous said...

Thanks man.

Anonymous said...

Thank you very much guys!
You are doing a valuable work!
We really need more people than you in Internet!
God bless you!

Joshua Ishihara said...

Thank you so much! It worked and was really straight forward!

Anonymous said...

Thank you very much. Your guide was very easy to follow and worked :-)

Anonymous said...

thanks a ton .... realy helped a lot

pkr said...

thank you very much for helping me to get rid of nation zoom virus after resetting Google chrome :)

Anonymous said...

Many many thanks for your instructions, it helped!

Anonymous said...

Found this under the name 22find.com, same insstructions helped me remove it. Thanks!

ReservoirDogs said...

Thanks a ton
I did'nt want to install a malware remover software and remove it as I was afraid that , the place from where I install the malware might not be a proper sight ;) . I managed to remove it by going to the add/remove programs in control panel and there was nationZoom program installed. Clicked it and uninstalled it.After that it stopped coming up in my browser. But even after that , there was this WMP17 installer.It was detected as a non-trusted software installer. I removed that and Voila !!! My comp is now malware free

Anonymous said...

Thank you very much!

It was very clear and very helpful for removing this virus

Anonymous said...

Many thanks for your help