Jump to content

Welcome to Geeks to Go
Geeks to Go Welcome
Create Account Login to Account
Photo

Removal instructions for Zoo Toolbar

- - - - -

  • Please log in to reply
1 reply to this topic

#1
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 32,131 posts

Content is republished with permission from Malwarebytes.

 

What is Zoo Toolbar?
 
The Malwarebytes research team has determined that Zoo Toolbar is a browser hijacker. These so-called "hijackers" alter your startpage or searchscopes so that the effected browser visits their site or one of their choice. This one also displays advertisements.
 
How do I know if my computer is affected by Zoo Toolbar?
 
This is how the start- and search-page looks:
 
startpage.png
 
And you may see these add-ons/extensions:
 
warning1.png
 
warning2.png
 
warning3.png
 
or this warning: 
 
main.png
 
and this entry in your list of installed programs:
 
warning4.png
 
 
How did Zoo Toolbar get on my computer?
 
Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.
 
How do I remove Zoo Toolbar?
 
Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted program.
  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
  • Enable free trial of Malwarebytes Anti-Malware Premium
  • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
  • Reboot your computer if prompted.
  •  
     
    Is there anything else I need to do to get rid of Zoo Toolbar?
     
  • The Chrome extension can now safely be removed. Open "Settings" > "Extensions" and click the bin behind the Zoo Toolbar listing. Then confirm removal.
  • The hijacker adds itself at the top of the list of search providers in Chrome. We will show you how to choose another one and change the startpage.
  •  
    Look at the replies to this topic for the additional guides.
     
    How would the full version of Malwarebytes Anti-Malware help protect me?
     
    We hope our application and this guide have helped you eradicate this hijacker.  
     
    As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Zoo Toolbar rogue.  It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

    protection1.png

    Technical details for experts
     
    Signs in a HijackThis log:
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=
    R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s
    R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s
    O2 - BHO: Zoo Toolbar - {2ba6d84b-9aee-4261-b9e1-37b3716514db} - C:\Program Files\ZooToolbar\IE\ZooToolbar.dll
    O3 - Toolbar: Zoo Toolbar - {2ba6d84b-9aee-4261-b9e1-37b3716514db} - C:\Program Files\ZooToolbar\IE\ZooToolbar.dll
    
     
    Alterations made by the installer:
    File system details  
    ---------------------------------------------
        Adds the folder C:\Program Files\Mozilla Firefox\searchplugins
           Adds the file Zoo Search.xml"="7/29/2014 7:17 PM, 2193 bytes, A
        Adds the folder C:\Program Files\ZooToolbar
           Adds the file cinshlpr.dll"="7/20/2014 3:05 AM, 195376 bytes, A
           Adds the file InstallHelper.dll"="7/20/2014 3:05 AM, 136256 bytes, A
           Adds the file Interop.IWshRuntimeLibrary.dll"="6/27/2013 7:14 AM, 55368 bytes, A
           Adds the file Microsoft.Win32.TaskScheduler.dll"="6/27/2013 7:14 AM, 176712 bytes, A
           Adds the file Microsoft.Win32.TaskScheduler.xml"="6/13/2013 5:59 AM, 213366 bytes, A
           Adds the file ProtectedSearch.exe"="4/9/2014 7:55 AM, 91208 bytes, A
           Adds the file ProtectedSearch.ico"="6/13/2013 5:58 AM, 4286 bytes, A
           Adds the file setupicon.ico"="7/20/2014 5:17 AM, 5430 bytes, A
           Adds the file stinst.dat"="7/29/2014 7:14 PM, 3336 bytes, A
           Adds the file STInst.exe"="7/20/2014 3:05 AM, 126768 bytes, A
           Adds the file stinst.wls"="7/29/2014 7:17 PM, 308 bytes, A
           Adds the file stinst.xml"="7/29/2014 7:16 PM, 113780 bytes, A
           Adds the file STInst32.dll"="7/20/2014 3:05 AM, 1226032 bytes, A
           Adds the file System.Data.SQLite.dll"="6/27/2013 7:14 AM, 923720 bytes, A
           Adds the file SystemSockets.exe"="1/9/2014 8:16 AM, 34376 bytes, A
           Adds the file TaskSchedulerCreator.exe"="2/4/2014 6:36 AM, 22600 bytes, A
           Adds the file TBUpdater.dll"="7/20/2014 3:05 AM, 122672 bytes, A
           Adds the file TBUpdater.exe"="7/3/2014 3:21 AM, 12864 bytes, A
           Adds the file ToolbarUninstall.exe"="4/9/2014 7:55 AM, 13384 bytes, A
           Adds the file unins000.dat"="7/29/2014 7:14 PM, 108349 bytes, A
           Adds the file unins000.exe"="7/29/2014 7:13 PM, 1175509 bytes, A
        Adds the folder C:\Program Files\ZooToolbar\IE
           Adds the file ZooToolbar.dll"="7/20/2014 5:16 AM, 1102704 bytes, A
        Adds the folder C:\Program Files\ZooToolbar\[email protected]
           Adds the file chrome.manifest"="7/20/2014 5:15 AM, 521 bytes, A
           Adds the file install.js"="7/20/2014 5:15 AM, 775 bytes, A
           Adds the file install.rdf"="7/20/2014 5:15 AM, 1331 bytes, A
           Adds the file pop.htm"="7/20/2014 5:15 AM, 2270 bytes, A
        Adds the folder C:\Program Files\ZooToolbar\[email protected]\chrome
           Adds the file ZooToolbar_25496.jar"="7/20/2014 5:15 AM, 962211 bytes, A
        Adds the folder C:\Program Files\ZooToolbar\[email protected]\components
           Adds the file wtb_complete.js"="7/20/2014 5:15 AM, 6845 bytes, A
        Adds the folder C:\Program Files\ZooToolbar\[email protected]\plugins
           Adds the file npwiddit.dll"="4/9/2014 7:56 AM, 1250880 bytes, A
        Adds the folder C:\Users\{username}\AppData\LocalLow\SimplyTech\Toolbar
           Adds the file settings.dat"="7/29/2014 7:20 PM, 17247 bytes, A
        Adds the folder C:\Users\{username}\AppData\LocalLow\ZooToolbar
        Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}
           Adds the file chrome.manifest"="7/20/2014 5:15 AM, 521 bytes, A
           Adds the file install.js"="7/20/2014 5:15 AM, 775 bytes, A
           Adds the file install.rdf"="7/20/2014 5:15 AM, 1331 bytes, A
           Adds the file pop.htm"="7/20/2014 5:15 AM, 2270 bytes, A
           Adds the file ZooToolbar_25496.sqlite"="7/29/2014 7:17 PM, 2048 bytes, A
        Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\chrome
           Adds the file ZooToolbar_25496.jar"="7/20/2014 5:15 AM, 962211 bytes, A
        Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\components
           Adds the file wtb_complete.js"="7/20/2014 5:15 AM, 6845 bytes, A
        Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\plugins
           Adds the file npwiddit.dll"="4/9/2014 7:56 AM, 1250880 bytes, A
        Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\searchplugins
           Adds the file Zoo Search.xml"="7/29/2014 7:17 PM, 2193 bytes, A
        In the existing folder C:\Windows
           Adds the file Launcher.exe"="4/9/2014 7:55 AM, 34376 bytes, A
        Adds the folder C:\Windows\System32\Tasks\Browser Updater
           Adds the file Browser Updater"="7/29/2014 7:14 PM, 4008 bytes, A
        Adds the folder C:\Windows\System32\Tasks\ProtectedSearch
           Adds the file Protected Search"="7/29/2014 7:14 PM, 4022 bytes, A
        Adds the folder C:\Windows\System32\Tasks\SystemSockets
           Adds the file SystemSockets"="7/29/2014 7:14 PM, 4008 bytes, A
     
    Registry details  
    ------------------------------------------
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{3FC27B34-0C19-49DA-875E-1875DDD4A6B2}]
           "(Default)"="REG_SZ", "wtb"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\ZooToolbar.DLL]
           "AppID"="REG_SZ", "{3FC27B34-0C19-49DA-875E-1875DDD4A6B2}"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}]
           "(Default)"="REG_SZ", "Zoo Toolbar"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}\Implemented Categories]
           "(Default)"="REG_SZ", ""
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]
           "(Default)"="REG_SZ", ""
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}]
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}]
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}\InprocServer32]
           "(Default)"="REG_SZ", "C:\Program Files\ZooToolbar\IE\ZooToolbar.dll"
           "ThreadingModel"="REG_SZ", "Apartment"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}\ProgID]
           "(Default)"="REG_SZ", "wtb.Band.1"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}\Programmable]
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}\TypeLib]
           "(Default)"="REG_SZ", "{8196140c-1800-47c5-97d3-85c30cce222a}"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}\VersionIndependentProgID]
           "(Default)"="REG_SZ", "wtb.Band"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3c15b3cc-e19e-4bb3-8d13-0b87d33afb88}]
           "(Default)"="REG_SZ", "NotificationSource Class"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3c15b3cc-e19e-4bb3-8d13-0b87d33afb88}\InprocServer32]
           "(Default)"="REG_SZ", "C:\Program Files\ZooToolbar\IE\ZooToolbar.dll"
           "ThreadingModel"="REG_SZ", "Apartment"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3c15b3cc-e19e-4bb3-8d13-0b87d33afb88}\ProgID]
           "(Default)"="REG_SZ", "wtb.NotificationSource.1"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3c15b3cc-e19e-4bb3-8d13-0b87d33afb88}\Programmable]
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3c15b3cc-e19e-4bb3-8d13-0b87d33afb88}\TypeLib]
           "(Default)"="REG_SZ", "{8196140c-1800-47c5-97d3-85c30cce222a}"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3c15b3cc-e19e-4bb3-8d13-0b87d33afb88}\VersionIndependentProgID]
           "(Default)"="REG_SZ", "wtb.NotificationSource"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4e25e940-f768-475f-b5c3-264c10c1dbc9}]
           "(Default)"="REG_SZ", "ToolbarInfo Class"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4e25e940-f768-475f-b5c3-264c10c1dbc9}\InprocServer32]
           "(Default)"="REG_SZ", "C:\Program Files\ZooToolbar\IE\ZooToolbar.dll"
           "ThreadingModel"="REG_SZ", "Apartment"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4e25e940-f768-475f-b5c3-264c10c1dbc9}\ProgID]
           "(Default)"="REG_SZ", "wtb.ToolbarInfo.1"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4e25e940-f768-475f-b5c3-264c10c1dbc9}\Programmable]
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4e25e940-f768-475f-b5c3-264c10c1dbc9}\TypeLib]
           "(Default)"="REG_SZ", "{8196140c-1800-47c5-97d3-85c30cce222a}"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4e25e940-f768-475f-b5c3-264c10c1dbc9}\VersionIndependentProgID]
           "(Default)"="REG_SZ", "wtb.ToolbarInfo"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9bcdc129-0d7d-4dac-a6b0-42f1f8c64015}]
           "(Default)"="REG_SZ", "SourceSinkImpl Class"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9bcdc129-0d7d-4dac-a6b0-42f1f8c64015}\InprocServer32]
           "(Default)"="REG_SZ", "C:\Program Files\ZooToolbar\IE\ZooToolbar.dll"
           "ThreadingModel"="REG_SZ", "Apartment"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9bcdc129-0d7d-4dac-a6b0-42f1f8c64015}\ProgID]
           "(Default)"="REG_SZ", "wtb.SourceSinkImpl.1"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9bcdc129-0d7d-4dac-a6b0-42f1f8c64015}\Programmable]
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9bcdc129-0d7d-4dac-a6b0-42f1f8c64015}\TypeLib]
           "(Default)"="REG_SZ", "{8196140c-1800-47c5-97d3-85c30cce222a}"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9bcdc129-0d7d-4dac-a6b0-42f1f8c64015}\VersionIndependentProgID]
           "(Default)"="REG_SZ", "wtb.SourceSinkImpl"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A928E66C-F501-4E66-9953-855C712F93B2}]
           "(Default)"="REG_SZ", "PSFactoryBuffer"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A928E66C-F501-4E66-9953-855C712F93B2}\InProcServer32]
           "(Default)"="REG_SZ", "C:\Program Files\ZooToolbar\IE\ZooToolbar.dll"
           "ThreadingModel"="REG_SZ", "Both"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}]
           "(Default)"="REG_SZ", "ISourceSinkImpl"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}\NumMethods]
           "(Default)"="REG_SZ", "12"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}\ProxyStubClsid]
           "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}\ProxyStubClsid32]
           "(Default)"="REG_SZ", "{A928E66C-F501-4E66-9953-855C712F93B2}"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}\TypeLib]
           "(Default)"="REG_SZ", "{8196140C-1800-47C5-97D3-85C30CCE222A}"
           "Version"="REG_SZ", "1.0"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}]
           "(Default)"="REG_SZ", "INotificationSource"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}\NumMethods]
           "(Default)"="REG_SZ", "9"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}\ProxyStubClsid]
           "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}\ProxyStubClsid32]
           "(Default)"="REG_SZ", "{A928E66C-F501-4E66-9953-855C712F93B2}"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}\TypeLib]
           "(Default)"="REG_SZ", "{8196140C-1800-47C5-97D3-85C30CCE222A}"
           "Version"="REG_SZ", "1.0"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}]
           "(Default)"="REG_SZ", "IBand"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}\NumMethods]
           "(Default)"="REG_SZ", "7"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}\ProxyStubClsid]
           "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}\ProxyStubClsid32]
           "(Default)"="REG_SZ", "{A928E66C-F501-4E66-9953-855C712F93B2}"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}\TypeLib]
           "(Default)"="REG_SZ", "{8196140C-1800-47C5-97D3-85C30CCE222A}"
           "Version"="REG_SZ", "1.0"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}]
           "(Default)"="REG_SZ", "IToolbarInfo"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}\NumMethods]
           "(Default)"="REG_SZ", "16"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}\ProxyStubClsid]
           "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}\ProxyStubClsid32]
           "(Default)"="REG_SZ", "{A928E66C-F501-4E66-9953-855C712F93B2}"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}\TypeLib]
           "(Default)"="REG_SZ", "{8196140C-1800-47C5-97D3-85C30CCE222A}"
           "Version"="REG_SZ", "1.0"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}]
           "(Default)"="REG_SZ", "ISourceInt"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}\NumMethods]
           "(Default)"="REG_SZ", "87"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}\ProxyStubClsid]
           "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}\ProxyStubClsid32]
           "(Default)"="REG_SZ", "{A928E66C-F501-4E66-9953-855C712F93B2}"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}\TypeLib]
           "(Default)"="REG_SZ", "{8196140C-1800-47C5-97D3-85C30CCE222A}"
           "Version"="REG_SZ", "1.0"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
           "Tabs"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main]
           "AutoSearch"="REG_DWORD", 1
           "Default_Search_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="
           "Search Bar"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="
           "Search Page"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="
           "Start Default_Page_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"
           "Start Page"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search]
           "Default_Search_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="
           "Search Bar"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="
           "Search Page"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="
           "Start Default_Page_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"
           "Start Page"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
           "DefaultScope"="REG_SZ", "{afdbddaa-5d3f-42ee-b79c-185a7020515b}"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}]
           "DisplayName"="REG_SZ", "Zoo Search"
           "SuggestionsURL_JSON"="REG_SZ", "http://api.widdit.com/suggestions/?format=ffplugin&ua=ie&src=addon&si=64843&gid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&dbCode=1&command={searchTerms}"
           "TopResultURLFallback"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q={searchTerms}"
           "URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q={searchTerms}"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchURI]
           "(Default)"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchUrl]
           "(Default)"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing]
           "NewTabPageShow"="REG_DWORD", 1
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{8196140C-1800-47C5-97D3-85C30CCE222A}\1.0]
           "(Default)"="REG_SZ", "wtb 1.0 Type Library"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{8196140C-1800-47C5-97D3-85C30CCE222A}\1.0\0\win32]
           "(Default)"="REG_SZ", "C:\Program Files\ZooToolbar\IE\ZooToolbar.dll"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{8196140C-1800-47C5-97D3-85C30CCE222A}\1.0\FLAGS]
           "(Default)"="REG_SZ", "0"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{8196140C-1800-47C5-97D3-85C30CCE222A}\1.0\HELPDIR]
           "(Default)"="REG_SZ", "C:\Program Files\ZooToolbar\IE"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.Band]
           "(Default)"="REG_SZ", "Zoo Toolbar"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.Band\CLSID]
           "(Default)"="REG_SZ", "{2ba6d84b-9aee-4261-b9e1-37b3716514db}"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.Band\CurVer]
           "(Default)"="REG_SZ", "wtb.Band.1"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.Band.1]
           "(Default)"="REG_SZ", "Zoo Toolbar"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.Band.1\CLSID]
           "(Default)"="REG_SZ", "{2ba6d84b-9aee-4261-b9e1-37b3716514db}"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.NotificationSource]
           "(Default)"="REG_SZ", "NotificationSource Class"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.NotificationSource\CLSID]
           "(Default)"="REG_SZ", "{3c15b3cc-e19e-4bb3-8d13-0b87d33afb88}"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.NotificationSource\CurVer]
           "(Default)"="REG_SZ", "wtb.NotificationSource.1"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.NotificationSource.1]
           "(Default)"="REG_SZ", "NotificationSource Class"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.NotificationSource.1\CLSID]
           "(Default)"="REG_SZ", "{3c15b3cc-e19e-4bb3-8d13-0b87d33afb88}"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.SourceSinkImpl]
           "(Default)"="REG_SZ", "SourceSinkImpl Class"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.SourceSinkImpl\CLSID]
           "(Default)"="REG_SZ", "{9bcdc129-0d7d-4dac-a6b0-42f1f8c64015}"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.SourceSinkImpl\CurVer]
           "(Default)"="REG_SZ", "wtb.SourceSinkImpl.1"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.SourceSinkImpl.1]
           "(Default)"="REG_SZ", "SourceSinkImpl Class"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.SourceSinkImpl.1\CLSID]
           "(Default)"="REG_SZ", "{9bcdc129-0d7d-4dac-a6b0-42f1f8c64015}"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.ToolbarInfo
           "(Default)"="REG_SZ", "ToolbarInfo Class"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.ToolbarInfo\CLSID
           "(Default)"="REG_SZ", "{4e25e940-f768-475f-b5c3-264c10c1dbc9}"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.ToolbarInfo\CurVer]
           "(Default)"="REG_SZ", "wtb.ToolbarInfo.1"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.ToolbarInfo.1]
           "(Default)"="REG_SZ", "ToolbarInfo Class"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.ToolbarInfo.1\CLSID]
           "(Default)"="REG_SZ", "{4e25e940-f768-475f-b5c3-264c10c1dbc9}"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\behdklnbkeffkfmlenbcnneladadmfli]
           "install_parameter"="REG_SZ", "&si=64843&tid=25496&ver=6.6&bd=1406654042126&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&ts=1&th=1&cobrand=ofaz2"
           "update_url"="REG_SZ", "https://clients2.google.com/service/update2/crx"
           "version"="REG_SZ", "6.6"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\epajhldhoemggkfgjjieggffipdidhgh]
           "install_parameter"="REG_SZ", "&si=64843&tid=25496&ver=6.6&bd=1406654042126&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&ts=1&th=1&cobrand=ofaz2"
           "update_url"="REG_SZ", "https://clients2.google.com/service/update2/crx"
           "version"="REG_SZ", "6.6"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\pbfegpllikaohlddbiinjlcdbhonjnmj]
           "install_parameter"="REG_SZ", "&si=64843&tid=25496&ver=6.6&bd=1406654042126&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&ts=1&th=1&cobrand=ofaz2"
           "update_url"="REG_SZ", "https://clients2.google.com/service/update2/crx"
           "version"="REG_SZ", "6.6"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
           "Tabs"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{cfd485f0-96bd-47cd-bb6d-cd7dda95f102}]
           "AppName"="REG_SZ", "Launcher.exe"
           "AppPath"="REG_SZ", "C:\Windows"
           "Policy"="REG_DWORD", 3
        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN]
           "AutoSearch"="REG_DWORD", 1
           "Default_Search_URL
            REG_SZ, "http://go.microsoft.com/fwlink/?LinkId=54896" ==> REG_SZ, "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="
           "Search Bar"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="
           "Search Page
            REG_SZ, "http://go.microsoft.com/fwlink/?LinkId=54896" ==> REG_SZ, "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="
           "Start Default_Page_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"
           "Start Page
            REG_SZ, "http://www.google.com" ==> REG_SZ, "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search]
           "Default_Search_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="
           "Search Bar"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="
           "Search Page"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="
           "Start Default_Page_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"
           "Start Page"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
           "DefaultScope
            REG_SZ, "{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" ==> REG_SZ, "{afdbddaa-5d3f-42ee-b79c-185a7020515b}"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}]
           "DisplayName"="REG_SZ", "Zoo Search"
           "SuggestionsURL_JSON"="REG_SZ", "http://api.widdit.com/suggestions/?format=ffplugin&ua=ie&src=addon&si=64843&gid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&dbCode=1&command={searchTerms}"
           "TopResultURLFallback"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q={searchTerms}"
           "URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q={searchTerms}"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchURI]
           "(Default)"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchUrl]
           "(Default)"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s"
        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing
           "NewTabPageShow"="REG_DWORD", 1
        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
           "{2ba6d84b-9aee-4261-b9e1-37b3716514db}"="REG_BINARY, (zero length data)
        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\2324_RASAPI32
           "ConsoleTracingMask"="REG_DWORD", -65536
           "EnableConsoleTracing"="REG_DWORD", 0
           "EnableFileTracing"="REG_DWORD", 0
           "FileDirectory"="REG_EXPAND_SZ, "%windir%\tracing"
           "FileTracingMask"="REG_DWORD", -65536
           "MaxFileSize"="REG_DWORD", 1048576
        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\2324_RASMANCS]
           "ConsoleTracingMask"="REG_DWORD", -65536
           "EnableConsoleTracing"="REG_DWORD", 0
           "EnableFileTracing"="REG_DWORD", 0
           "FileDirectory"="REG_EXPAND_SZ, "%windir%\tracing"
           "FileTracingMask"="REG_DWORD", -65536
           "MaxFileSize"="REG_DWORD", 1048576
        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\offer0_RASAPI32]
           "ConsoleTracingMask"="REG_DWORD", -65536
           "EnableConsoleTracing"="REG_DWORD", 0
           "EnableFileTracing"="REG_DWORD", 0
           "FileDirectory"="REG_EXPAND_SZ, "%windir%\tracing"
           "FileTracingMask"="REG_DWORD", -65536
           "MaxFileSize"="REG_DWORD", 1048576
        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\offer0_RASMANCS]
           "ConsoleTracingMask"="REG_DWORD", -65536
           "EnableConsoleTracing"="REG_DWORD", 0
           "EnableFileTracing"="REG_DWORD", 0
           "FileDirectory"="REG_EXPAND_SZ, "%windir%\tracing"
           "FileTracingMask"="REG_DWORD", -65536
           "MaxFileSize"="REG_DWORD", 1048576
        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\ProtectedSearch_RASAPI32]
           "ConsoleTracingMask"="REG_DWORD", -65536
           "EnableConsoleTracing"="REG_DWORD", 0
           "EnableFileTracing"="REG_DWORD", 0
           "FileDirectory"="REG_EXPAND_SZ, "%windir%\tracing"
           "FileTracingMask"="REG_DWORD", -65536
           "MaxFileSize"="REG_DWORD", 1048576
        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\ProtectedSearch_RASMANCS]
           "ConsoleTracingMask"="REG_DWORD", -65536
           "EnableConsoleTracing"="REG_DWORD", 0
           "EnableFileTracing"="REG_DWORD", 0
           "FileDirectory"="REG_EXPAND_SZ, "%windir%\tracing"
           "FileTracingMask"="REG_DWORD", -65536
           "MaxFileSize"="REG_DWORD", 1048576
        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\STInst_RASAPI32]
           "ConsoleTracingMask"="REG_DWORD", -65536
           "EnableConsoleTracing"="REG_DWORD", 0
           "EnableFileTracing"="REG_DWORD", 0
           "FileDirectory"="REG_EXPAND_SZ, "%windir%\tracing"
           "FileTracingMask"="REG_DWORD", -65536
           "MaxFileSize"="REG_DWORD", 1048576
        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\STInst_RASMANCS]
           "ConsoleTracingMask"="REG_DWORD", -65536
           "EnableConsoleTracing"="REG_DWORD", 0
           "EnableFileTracing"="REG_DWORD", 0
           "FileDirectory"="REG_EXPAND_SZ, "%windir%\tracing"
           "FileTracingMask"="REG_DWORD", -65536
           "MaxFileSize"="REG_DWORD", 1048576
        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2ba6d84b-9aee-4261-b9e1-37b3716514db}]
        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97a33a2d-cdf4-4e5f-b52a-73f9bdb0202c}_is1]
           "DisplayIcon"="REG_SZ", "C:\Program Files\ZooToolbar\setupicon.ico"
           "DisplayName"="REG_SZ", "Zoo Toolbar 6.6"
           "DisplayVersion"="REG_SZ", "6.6"
           "EstimatedSize"="REG_DWORD", 7692
           "Inno Setup: App Path"="REG_SZ", "C:\Program Files\ZooToolbar"
           "Inno Setup: Icon Group"="REG_SZ", "Zoo Toolbar"
           "Inno Setup: Language"="REG_SZ", "en"
           "Inno Setup: Setup Version"="REG_SZ", "5.4.3 (u)"
           "Inno Setup: User"="REG_SZ", "Malwarebytes"
           "InstallDate"="REG_SZ", "20140729"
           "InstallLocation"="REG_SZ", "C:\Program Files\ZooToolbar\"
           "MajorVersion"="REG_DWORD", 6
           "MinorVersion"="REG_DWORD", 6
           "NoModify"="REG_DWORD", 1
           "NoRepair"="REG_DWORD", 1
           "Publisher"="REG_SZ", "InfoSpace LLC"
           "QuietUninstallString"="REG_SZ", ""C:\Program Files\ZooToolbar\unins000.exe" /SILENT"
           "UninstallString"="REG_SZ", ""C:\Program Files\ZooToolbar\unins000.exe""
        [HKEY_CURRENT_USER\Software\AppDataLow\Software\Simplytech\Toolbar\Settings\GLOBAL]
           "protect"="REG_SZ", "1"
        [HKEY_CURRENT_USER\Software\AppDataLow\Software\Simplytech\ZooToolbar]
           "ConfigUpdate"="REG_DWORD", 1406654307
           "SearchBoxSize"="REG_DWORD", 200
           "UserID"="REG_SZ", "C873827A5562422D8993C3D7D9EC3C57"
        [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\AboutURLs]
           "Tabs"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"
        [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
           "AutoSearch"="REG_DWORD", 1
           "Default_Search_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="
           "Search Bar"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="
           "Search Page
            REG_SZ, "http://go.microsoft.com/fwlink/?LinkId=54896" ==> REG_SZ, "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="
           "Start Default_Page_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"
           "Start Page
            REG_SZ, "http://www.google.com" ==> REG_SZ, "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"
           "Window_Placement
            REG_BINARY, ,..................... ==> REG_BINARY, ,.....................
        [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
           "Default_Search_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="
           "Search Bar"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="
           "Search Page"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="
           "Start Default_Page_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"
           "Start Page"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"
        [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes]
           "DefaultScope
            REG_SZ, "{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" ==> REG_SZ, "{afdbddaa-5d3f-42ee-b79c-185a7020515b}"
        [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}]
           "DisplayName"="REG_SZ", "Zoo Search"
           "SuggestionsURL_JSON"="REG_SZ", "http://api.widdit.com/suggestions/?format=ffplugin&ua=ie&src=addon&si=64843&gid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&dbCode=1&command={searchTerms}"
           "TopResultURLFallback"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q={searchTerms}"
           "URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q={searchTerms}"
        [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURI]
           "(Default)"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s"
        [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
           "(Default)"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s"
        [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2ba6d84b-9aee-4261-b9e1-37b3716514db}]
           "Flags"="REG_DWORD", 1024
        [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]
           "{2ba6d84b-9aee-4261-b9e1-37b3716514db}"="REG_SZ", "1"
        [HKEY_CURRENT_USER\Software\SimplyTech]
           "noclean"="REG_SZ", "AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAAb48DfcSKkmNsdpukGjGFwAAAAACAAAAAAAQZgAAAAEAACAAAABUpaAPP6L9MCKYXhuaT2GOdc1r7cNhRSwMz2Yi1FK1twAAAAAOgAAAAAIAACAAAABuV0FSxNtaSZySe63dsnQTLsiTTSDVY6KzzRfvIU3PITAAAADQhKcy4O83yj2wdn8OmU8IYhwl4xXhsSoWYETQXn8aMgrN8C0hOfzXxdOY2g5VIlRAAAAAULbLk+WNQEdv8xRU03IJj+pTBFQId3b2Ls3oYnbTHIhN+lS7ZA3G9jOWWHmvMM6mNZzAZbv8kfk8w8Y4dJGE3g=="
           "protect"="REG_SZ", "1"
           "sd"="REG_SZ", "2014-7-29"
           "ver"="REG_SZ", "6.6"
        [HKEY_CURRENT_USER\Software\SimplyTech\ZooToolbar]
           "(Default)"="REG_SZ", ""
        [HKEY_CURRENT_USER\Software\ZooToolbar]
           "b0"="REG_SZ", "1"
           "b1"="REG_SZ", "1"
           "b2"="REG_SZ", "1"
           "b3"="REG_SZ", "1"
           "cs"="REG_SZ", "True"
           "dir"="REG_SZ", "C:\Program Files\ZooToolbar"
           "iid"="REG_SZ", "64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"
           "lidate"="REG_SZ", "29/7/2014_19:14:38"
           "sd"="REG_SZ", "2014-7-29"
           "si"="REG_SZ", "64843"
           "success"="REG_SZ", "1"
           "ti"="REG_SZ", "25496"
           "ver"="REG_SZ", "6.6"
     
     
    
     
    Malwarebytes Anti-Malware log:
    Malwarebytes Anti-Malware
    www.malwarebytes.org
     
    Scan Date: 7/29/2014
    Scan Time: 7:23:51 PM
    Logfile: mbamZooToolbar.txt
    Administrator: Yes
     
    Version: 2.00.2.1012
    Malware Database: v2014.07.29.05
    Rootkit Database: v2014.07.17.01
    License: Free
    Malware Protection: Disabled
    Malicious Website Protection: Disabled
    Self-protection: Disabled
     
    OS: Windows 7 Service Pack 1
    CPU: x86
    File System: NTFS
    User: Malwarebytes
     
    Scan Type: Threat Scan
    Result: Completed
    Objects Scanned: 248983
    Time Elapsed: 3 min, 2 sec
     
    Memory: Enabled
    Startup: Enabled
    Filesystem: Enabled
    Archives: Enabled
    Rootkits: Disabled
    Heuristics: Enabled
    PUP: Enabled
    PUM: Enabled
     
    Processes: 2
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\ProtectedSearch.exe, 2740, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e]
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\SystemSockets.exe, 3908, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e]
     
    Modules: 4
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\cinshlpr.dll, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\cinshlpr.dll, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\InstallHelper.dll, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\System.Data.SQLite.dll, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e], 
     
    Registry Keys: 28
    PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], 
    PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{8196140c-1800-47c5-97d3-85c30cce222a}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], 
    PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], 
    PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{A928E66C-F501-4E66-9953-855C712F93B2}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], 
    PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], 
    PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], 
    PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{FCA8936E-403A-4487-A966-70F80F1D5A6A}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], 
    PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\wtb.Band.1, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], 
    PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\wtb.Band, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], 
    PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{2BA6D84B-9AEE-4261-B9E1-37B3716514DB}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], 
    PUP.Optional.SimplyTech.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{2BA6D84B-9AEE-4261-B9E1-37B3716514DB}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], 
    PUP.Optional.SimplyTech.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{2BA6D84B-9AEE-4261-B9E1-37B3716514DB}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], 
    PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\CLSID\{3c15b3cc-e19e-4bb3-8d13-0b87d33afb88}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], 
    PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\wtb.NotificationSource.1, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], 
    PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\wtb.NotificationSource, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], 
    PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\CLSID\{4e25e940-f768-475f-b5c3-264c10c1dbc9}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], 
    PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\wtb.ToolbarInfo.1, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], 
    PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\wtb.ToolbarInfo, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], 
    PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\CLSID\{9bcdc129-0d7d-4dac-a6b0-42f1f8c64015}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], 
    PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\wtb.SourceSinkImpl.1, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], 
    PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\wtb.SourceSinkImpl, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], 
    PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\CLSID\{A928E66C-F501-4E66-9953-855C712F93B2}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], 
    PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\CLSID\{2BA6D84B-9AEE-4261-B9E1-37B3716514DB}\INPROCSERVER32, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], 
    PUP.Optional.ZooToolBar.A, HKLM\SOFTWARE\CLASSES\APPID\ZooToolbar.DLL, Quarantined, [35148520c1ba0333f46f74bbd33137c9], 
    PUP.Optional.ZooToolBar.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\ZooToolbar, Quarantined, [0b3e7e27512a320400656dc2c73dbe42], 
    PUP.Optional.SimplyTech.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\SIMPLYTECH\Toolbar, Quarantined, [e960e3c2d0abed493ef8cd0d1fe309f7], 
    PUP.Optional.ZooToolBar.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SIMPLYTECH\ZooToolbar, Quarantined, [05449015b0cb37ff34303af5a85c6e92], 
    PUP.Optional.ZooTB.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{97a33a2d-cdf4-4e5f-b52a-73f9bdb0202c}_is1, Quarantined, [3712d5d07605c670efe16e5446bca25e], 
     
    Registry Values: 2
    PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{2BA6D84B-9AEE-4261-B9E1-37B3716514DB}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], 
    PUP.Optional.AdvancedSystemProtector.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{2ba6d84b-9aee-4261-b9e1-37b3716514db}, Quarantined, [1f2a6c39116a78bed3cd5545be44dd23], 
     
    Registry Data: 13
    PUP.Optional.ZooSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\ABOUTURLS|Tabs, http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F),Replaced,[96b3871e5328a98de54e5e5cb84c1fe1]
    PUP.Optional.ZooSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F),Replaced,[07422f76a0db68ce072a7149659fc040]
    PUP.Optional.ZooSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=),Replaced,[52f7970e7dfe1d19d6597e3c3acabf41]
    PUP.Optional.ZooSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=),Replaced,[9eabd1d4770493a388a1328823e137c9]
    PUP.Optional.ZooSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=),Replaced,[2425b2f36f0c37ff42e9a515966e8878]
    PUP.Optional.ZooSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=),Replaced,[f158eabbb7c41c1aab7c9c1e9d6708f8]
    PUP.Optional.ZooSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s),Replaced,[ca7fadf8a8d3bd7942e300ba8d77c63a]
    PUP.Optional.ZooSearch.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=),Replaced,[54f5e9bc2c4f999dd951f2c89f657789]
    PUP.Optional.ZooSearch.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F),Replaced,[2c1d5e476318a78fbb7718a2d82ce11f]
    PUP.Optional.ZooSearch.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=),Replaced,[84c5545185f652e432fe308ab351738d]
    PUP.Optional.ZooSearch.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=),Replaced,[95b42580cab1b3832c00f2c81ee639c7]
    PUP.Optional.ZooSearch.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=),Replaced,[f653079e55266ec87cac9624f410e51b]
    PUP.Optional.ZooSearch.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s),Replaced,[99b07d28fb807bbb31f5bcfe22e26f91]
     
    Folders: 11
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\IE, Quarantined, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\[email protected], Quarantined, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\[email protected]\chrome, Quarantined, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\[email protected]\components, Quarantined, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\[email protected]\plugins, Quarantined, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\chrome, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\components, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\plugins, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
     
    Files: 63
    PUP.Optional.SimplyTech.A, C:\Program Files\ZooToolbar\IE\ZooToolbar.dll, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\Desktop\offer0.exe, Quarantined, [c8816e377efd2b0b00ec1789dd24f50b], 
    PUP.Optional.ZooSearch.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\searchplugins\Zoo Search.xml, Quarantined, [0b3eeeb75823a98d66fc1a1545bf768a], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\STInst.exe, Quarantined, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\cinshlpr.dll, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\InstallHelper.dll, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\Interop.IWshRuntimeLibrary.dll, Quarantined, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\Microsoft.Win32.TaskScheduler.dll, Quarantined, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\Microsoft.Win32.TaskScheduler.xml, Quarantined, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\ProtectedSearch.exe, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\ProtectedSearch.ico, Quarantined, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\setupicon.ico, Quarantined, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\stinst.dat, Quarantined, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\stinst.wls, Quarantined, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\stinst.xml, Quarantined, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\STInst32.dll, Quarantined, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\System.Data.SQLite.dll, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\SystemSockets.exe, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\TaskSchedulerCreator.exe, Quarantined, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\TBUpdater.dll, Quarantined, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\TBUpdater.exe, Quarantined, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\ToolbarUninstall.exe, Quarantined, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\unins000.dat, Quarantined, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\unins000.exe, Quarantined, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\[email protected]\chrome.manifest, Quarantined, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\[email protected]\install.js, Quarantined, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\[email protected]\install.rdf, Quarantined, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\[email protected]\pop.htm, Quarantined, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\[email protected]\chrome\ZooToolbar_25496.jar, Quarantined, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\[email protected]\components\wtb_complete.js, Quarantined, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\[email protected]\plugins\npwiddit.dll, Quarantined, [3712d5d07605c670efe16e5446bca25e], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\chrome.manifest, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\install.js, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\install.rdf, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\pop.htm, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\wtb_ff.bin, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\ZooToolbar_25496.sqlite, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\chrome\ZooToolbar_25496.jar, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\components\wtb_complete.js, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\1154284306.gif, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\1811652334.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\1856656659.gif, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\1X16_Trans.gif, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\482924561.jpg, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\568926401.jpg, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\contact.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\default_search_button.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\default_search_provider12.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\default_search_provider16.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\help.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\home.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\images.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\privacy.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\refresh.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\uninstall.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\video.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\plugins\npwiddit.dll, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], 
    PUP.Optional.ZooSearch.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: (      "startup_urls": [ "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F" ],), Replaced,[3316c5e03e3dbc7a3622509a9371b947]
    PUP.Optional.ZooSearch.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: (   "homepage": "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F",), Replaced,[0a3ffbaa6b1005312633dc0efa0a1fe1]
    PUP.Optional.ZooSearch.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: (      "search_url": "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q={searchTerms}",), Replaced,[3b0ecbda5c1f2313fe5ccd1d24e0827e]
    PUP.Optional.ZooSearch.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("browser.startup.homepage", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F");), Replaced,[5fea30757a01bf7760f509e18f75a35d]
    PUP.Optional.ZooSearch.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("browser.newtab.url", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F");), Replaced,[c38625802358a3933b1bd4169d67738d]
    PUP.Optional.ZooSearch.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("keyword.URL", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=");), Replaced,[1e2bddc8e794fb3b91c6e901020248b8]
     
    Physical Sectors: 0
    (No malicious items detected)
     
     
    (end)
    
     
    As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
    We use different ways of protecting your computer(s):
  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
  • Save yourself the hassle and get protected.

    • 0

    Advertisements


    #2
    Metallica

    Metallica

      Spyware Veteran

    • GeekU Moderator
    • 32,131 posts
    How to change the startpage and organize the search providers in Chrome
     
    Click the button that opens the customize and control menus in Chrome.
     
    ChromeSettings.png
     
    Click "Settings" and the "Set pages" link in the "On Start-up" section.
    Add a new page that you want to see first and delete the Zoo Search entry. (click the X at the end of the line)
     
    ChromeSettings1.png
     
    Then click OK and scroll down in the Settings menu to "Appearance" and "Search"
     
    ChromeSettings2.png
     
    Click the "Change" link behind "Show Home button" to alter the URL that button will produce.
    Then click the "Manage Search Engines" button in the "Search" section.
    Select a search engine and click the "Make Default" Button that will show up;
     
    ChromeMD.png
     
    Rightclick and delete the Zoo Search entry.(click the X at the end of the line)
     
    ChromeSE.png
     
    For some reason the delete does not always work, but make sure to delete al least the URL from that line.
    Then click "Done" and close the "Settings" tab.

    • 0




    0 user(s) are reading this topic

    0 members, 0 guests, 0 anonymous users

    As Featured On:

    featured
    Malware Removal How to Guides Windows 7 System Building Download Files Register welcome

    Never used a forum? Learn how.