Content is republished with permission from Malwarebytes.
What is Zoo Toolbar?
The Malwarebytes research team has determined that Zoo Toolbar is a browser hijacker. These so-called "hijackers" alter your startpage or searchscopes so that the effected browser visits their site or one of their choice. This one also displays advertisements.
How do I know if my computer is affected by Zoo Toolbar?
This is how the start- and search-page looks:
And you may see these add-ons/extensions:
or this warning:
and this entry in your list of installed programs:
How did Zoo Toolbar get on my computer?
Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.
How do I remove Zoo Toolbar?
Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted program.
Is there anything else I need to do to get rid of Zoo Toolbar?
Look at the replies to this topic for the additional guides.
How would the full version of Malwarebytes Anti-Malware help protect me?
We hope our application and this guide have helped you eradicate this hijacker.
As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Zoo Toolbar rogue. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.
Technical details for experts
Signs in a HijackThis log:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s
O2 - BHO: Zoo Toolbar - {2ba6d84b-9aee-4261-b9e1-37b3716514db} - C:\Program Files\ZooToolbar\IE\ZooToolbar.dll
O3 - Toolbar: Zoo Toolbar - {2ba6d84b-9aee-4261-b9e1-37b3716514db} - C:\Program Files\ZooToolbar\IE\ZooToolbar.dll
Alterations made by the installer:
File system details --------------------------------------------- Adds the folder C:\Program Files\Mozilla Firefox\searchplugins Adds the file Zoo Search.xml"="7/29/2014 7:17 PM, 2193 bytes, A Adds the folder C:\Program Files\ZooToolbar Adds the file cinshlpr.dll"="7/20/2014 3:05 AM, 195376 bytes, A Adds the file InstallHelper.dll"="7/20/2014 3:05 AM, 136256 bytes, A Adds the file Interop.IWshRuntimeLibrary.dll"="6/27/2013 7:14 AM, 55368 bytes, A Adds the file Microsoft.Win32.TaskScheduler.dll"="6/27/2013 7:14 AM, 176712 bytes, A Adds the file Microsoft.Win32.TaskScheduler.xml"="6/13/2013 5:59 AM, 213366 bytes, A Adds the file ProtectedSearch.exe"="4/9/2014 7:55 AM, 91208 bytes, A Adds the file ProtectedSearch.ico"="6/13/2013 5:58 AM, 4286 bytes, A Adds the file setupicon.ico"="7/20/2014 5:17 AM, 5430 bytes, A Adds the file stinst.dat"="7/29/2014 7:14 PM, 3336 bytes, A Adds the file STInst.exe"="7/20/2014 3:05 AM, 126768 bytes, A Adds the file stinst.wls"="7/29/2014 7:17 PM, 308 bytes, A Adds the file stinst.xml"="7/29/2014 7:16 PM, 113780 bytes, A Adds the file STInst32.dll"="7/20/2014 3:05 AM, 1226032 bytes, A Adds the file System.Data.SQLite.dll"="6/27/2013 7:14 AM, 923720 bytes, A Adds the file SystemSockets.exe"="1/9/2014 8:16 AM, 34376 bytes, A Adds the file TaskSchedulerCreator.exe"="2/4/2014 6:36 AM, 22600 bytes, A Adds the file TBUpdater.dll"="7/20/2014 3:05 AM, 122672 bytes, A Adds the file TBUpdater.exe"="7/3/2014 3:21 AM, 12864 bytes, A Adds the file ToolbarUninstall.exe"="4/9/2014 7:55 AM, 13384 bytes, A Adds the file unins000.dat"="7/29/2014 7:14 PM, 108349 bytes, A Adds the file unins000.exe"="7/29/2014 7:13 PM, 1175509 bytes, A Adds the folder C:\Program Files\ZooToolbar\IE Adds the file ZooToolbar.dll"="7/20/2014 5:16 AM, 1102704 bytes, A Adds the folder C:\Program Files\ZooToolbar\[email protected] Adds the file chrome.manifest"="7/20/2014 5:15 AM, 521 bytes, A Adds the file install.js"="7/20/2014 5:15 AM, 775 bytes, A Adds the file install.rdf"="7/20/2014 5:15 AM, 1331 bytes, A Adds the file pop.htm"="7/20/2014 5:15 AM, 2270 bytes, A Adds the folder C:\Program Files\ZooToolbar\[email protected]\chrome Adds the file ZooToolbar_25496.jar"="7/20/2014 5:15 AM, 962211 bytes, A Adds the folder C:\Program Files\ZooToolbar\[email protected]\components Adds the file wtb_complete.js"="7/20/2014 5:15 AM, 6845 bytes, A Adds the folder C:\Program Files\ZooToolbar\[email protected]\plugins Adds the file npwiddit.dll"="4/9/2014 7:56 AM, 1250880 bytes, A Adds the folder C:\Users\{username}\AppData\LocalLow\SimplyTech\Toolbar Adds the file settings.dat"="7/29/2014 7:20 PM, 17247 bytes, A Adds the folder C:\Users\{username}\AppData\LocalLow\ZooToolbar Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38} Adds the file chrome.manifest"="7/20/2014 5:15 AM, 521 bytes, A Adds the file install.js"="7/20/2014 5:15 AM, 775 bytes, A Adds the file install.rdf"="7/20/2014 5:15 AM, 1331 bytes, A Adds the file pop.htm"="7/20/2014 5:15 AM, 2270 bytes, A Adds the file ZooToolbar_25496.sqlite"="7/29/2014 7:17 PM, 2048 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\chrome Adds the file ZooToolbar_25496.jar"="7/20/2014 5:15 AM, 962211 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\components Adds the file wtb_complete.js"="7/20/2014 5:15 AM, 6845 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\plugins Adds the file npwiddit.dll"="4/9/2014 7:56 AM, 1250880 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\searchplugins Adds the file Zoo Search.xml"="7/29/2014 7:17 PM, 2193 bytes, A In the existing folder C:\Windows Adds the file Launcher.exe"="4/9/2014 7:55 AM, 34376 bytes, A Adds the folder C:\Windows\System32\Tasks\Browser Updater Adds the file Browser Updater"="7/29/2014 7:14 PM, 4008 bytes, A Adds the folder C:\Windows\System32\Tasks\ProtectedSearch Adds the file Protected Search"="7/29/2014 7:14 PM, 4022 bytes, A Adds the folder C:\Windows\System32\Tasks\SystemSockets Adds the file SystemSockets"="7/29/2014 7:14 PM, 4008 bytes, A Registry details ------------------------------------------ [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{3FC27B34-0C19-49DA-875E-1875DDD4A6B2}] "(Default)"="REG_SZ", "wtb" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\ZooToolbar.DLL] "AppID"="REG_SZ", "{3FC27B34-0C19-49DA-875E-1875DDD4A6B2}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}] "(Default)"="REG_SZ", "Zoo Toolbar" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}\Implemented Categories] "(Default)"="REG_SZ", "" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}] "(Default)"="REG_SZ", "" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}\InprocServer32] "(Default)"="REG_SZ", "C:\Program Files\ZooToolbar\IE\ZooToolbar.dll" "ThreadingModel"="REG_SZ", "Apartment" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}\ProgID] "(Default)"="REG_SZ", "wtb.Band.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}\Programmable] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}\TypeLib] "(Default)"="REG_SZ", "{8196140c-1800-47c5-97d3-85c30cce222a}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}\VersionIndependentProgID] "(Default)"="REG_SZ", "wtb.Band" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3c15b3cc-e19e-4bb3-8d13-0b87d33afb88}] "(Default)"="REG_SZ", "NotificationSource Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3c15b3cc-e19e-4bb3-8d13-0b87d33afb88}\InprocServer32] "(Default)"="REG_SZ", "C:\Program Files\ZooToolbar\IE\ZooToolbar.dll" "ThreadingModel"="REG_SZ", "Apartment" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3c15b3cc-e19e-4bb3-8d13-0b87d33afb88}\ProgID] "(Default)"="REG_SZ", "wtb.NotificationSource.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3c15b3cc-e19e-4bb3-8d13-0b87d33afb88}\Programmable] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3c15b3cc-e19e-4bb3-8d13-0b87d33afb88}\TypeLib] "(Default)"="REG_SZ", "{8196140c-1800-47c5-97d3-85c30cce222a}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3c15b3cc-e19e-4bb3-8d13-0b87d33afb88}\VersionIndependentProgID] "(Default)"="REG_SZ", "wtb.NotificationSource" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4e25e940-f768-475f-b5c3-264c10c1dbc9}] "(Default)"="REG_SZ", "ToolbarInfo Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4e25e940-f768-475f-b5c3-264c10c1dbc9}\InprocServer32] "(Default)"="REG_SZ", "C:\Program Files\ZooToolbar\IE\ZooToolbar.dll" "ThreadingModel"="REG_SZ", "Apartment" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4e25e940-f768-475f-b5c3-264c10c1dbc9}\ProgID] "(Default)"="REG_SZ", "wtb.ToolbarInfo.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4e25e940-f768-475f-b5c3-264c10c1dbc9}\Programmable] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4e25e940-f768-475f-b5c3-264c10c1dbc9}\TypeLib] "(Default)"="REG_SZ", "{8196140c-1800-47c5-97d3-85c30cce222a}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4e25e940-f768-475f-b5c3-264c10c1dbc9}\VersionIndependentProgID] "(Default)"="REG_SZ", "wtb.ToolbarInfo" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9bcdc129-0d7d-4dac-a6b0-42f1f8c64015}] "(Default)"="REG_SZ", "SourceSinkImpl Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9bcdc129-0d7d-4dac-a6b0-42f1f8c64015}\InprocServer32] "(Default)"="REG_SZ", "C:\Program Files\ZooToolbar\IE\ZooToolbar.dll" "ThreadingModel"="REG_SZ", "Apartment" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9bcdc129-0d7d-4dac-a6b0-42f1f8c64015}\ProgID] "(Default)"="REG_SZ", "wtb.SourceSinkImpl.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9bcdc129-0d7d-4dac-a6b0-42f1f8c64015}\Programmable] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9bcdc129-0d7d-4dac-a6b0-42f1f8c64015}\TypeLib] "(Default)"="REG_SZ", "{8196140c-1800-47c5-97d3-85c30cce222a}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9bcdc129-0d7d-4dac-a6b0-42f1f8c64015}\VersionIndependentProgID] "(Default)"="REG_SZ", "wtb.SourceSinkImpl" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A928E66C-F501-4E66-9953-855C712F93B2}] "(Default)"="REG_SZ", "PSFactoryBuffer" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A928E66C-F501-4E66-9953-855C712F93B2}\InProcServer32] "(Default)"="REG_SZ", "C:\Program Files\ZooToolbar\IE\ZooToolbar.dll" "ThreadingModel"="REG_SZ", "Both" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}] "(Default)"="REG_SZ", "ISourceSinkImpl" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}\NumMethods] "(Default)"="REG_SZ", "12" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}\ProxyStubClsid] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}\ProxyStubClsid32] "(Default)"="REG_SZ", "{A928E66C-F501-4E66-9953-855C712F93B2}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}\TypeLib] "(Default)"="REG_SZ", "{8196140C-1800-47C5-97D3-85C30CCE222A}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}] "(Default)"="REG_SZ", "INotificationSource" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}\NumMethods] "(Default)"="REG_SZ", "9" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}\ProxyStubClsid] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}\ProxyStubClsid32] "(Default)"="REG_SZ", "{A928E66C-F501-4E66-9953-855C712F93B2}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}\TypeLib] "(Default)"="REG_SZ", "{8196140C-1800-47C5-97D3-85C30CCE222A}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}] "(Default)"="REG_SZ", "IBand" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}\NumMethods] "(Default)"="REG_SZ", "7" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}\ProxyStubClsid] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}\ProxyStubClsid32] "(Default)"="REG_SZ", "{A928E66C-F501-4E66-9953-855C712F93B2}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}\TypeLib] "(Default)"="REG_SZ", "{8196140C-1800-47C5-97D3-85C30CCE222A}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}] "(Default)"="REG_SZ", "IToolbarInfo" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}\NumMethods] "(Default)"="REG_SZ", "16" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}\ProxyStubClsid] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}\ProxyStubClsid32] "(Default)"="REG_SZ", "{A928E66C-F501-4E66-9953-855C712F93B2}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}\TypeLib] "(Default)"="REG_SZ", "{8196140C-1800-47C5-97D3-85C30CCE222A}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}] "(Default)"="REG_SZ", "ISourceInt" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}\NumMethods] "(Default)"="REG_SZ", "87" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}\ProxyStubClsid] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}\ProxyStubClsid32] "(Default)"="REG_SZ", "{A928E66C-F501-4E66-9953-855C712F93B2}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}\TypeLib] "(Default)"="REG_SZ", "{8196140C-1800-47C5-97D3-85C30CCE222A}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\AboutURLs] "Tabs"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main] "AutoSearch"="REG_DWORD", 1 "Default_Search_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=" "Search Bar"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=" "Search Page"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=" "Start Default_Page_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F" "Start Page"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search] "Default_Search_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=" "Search Bar"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=" "Search Page"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=" "Start Default_Page_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F" "Start Page"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="REG_SZ", "{afdbddaa-5d3f-42ee-b79c-185a7020515b}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}] "DisplayName"="REG_SZ", "Zoo Search" "SuggestionsURL_JSON"="REG_SZ", "http://api.widdit.com/suggestions/?format=ffplugin&ua=ie&src=addon&si=64843&gid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&dbCode=1&command={searchTerms}" "TopResultURLFallback"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q={searchTerms}" "URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q={searchTerms}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchURI] "(Default)"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchUrl] "(Default)"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing] "NewTabPageShow"="REG_DWORD", 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{8196140C-1800-47C5-97D3-85C30CCE222A}\1.0] "(Default)"="REG_SZ", "wtb 1.0 Type Library" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{8196140C-1800-47C5-97D3-85C30CCE222A}\1.0\0\win32] "(Default)"="REG_SZ", "C:\Program Files\ZooToolbar\IE\ZooToolbar.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{8196140C-1800-47C5-97D3-85C30CCE222A}\1.0\FLAGS] "(Default)"="REG_SZ", "0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{8196140C-1800-47C5-97D3-85C30CCE222A}\1.0\HELPDIR] "(Default)"="REG_SZ", "C:\Program Files\ZooToolbar\IE" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.Band] "(Default)"="REG_SZ", "Zoo Toolbar" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.Band\CLSID] "(Default)"="REG_SZ", "{2ba6d84b-9aee-4261-b9e1-37b3716514db}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.Band\CurVer] "(Default)"="REG_SZ", "wtb.Band.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.Band.1] "(Default)"="REG_SZ", "Zoo Toolbar" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.Band.1\CLSID] "(Default)"="REG_SZ", "{2ba6d84b-9aee-4261-b9e1-37b3716514db}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.NotificationSource] "(Default)"="REG_SZ", "NotificationSource Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.NotificationSource\CLSID] "(Default)"="REG_SZ", "{3c15b3cc-e19e-4bb3-8d13-0b87d33afb88}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.NotificationSource\CurVer] "(Default)"="REG_SZ", "wtb.NotificationSource.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.NotificationSource.1] "(Default)"="REG_SZ", "NotificationSource Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.NotificationSource.1\CLSID] "(Default)"="REG_SZ", "{3c15b3cc-e19e-4bb3-8d13-0b87d33afb88}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.SourceSinkImpl] "(Default)"="REG_SZ", "SourceSinkImpl Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.SourceSinkImpl\CLSID] "(Default)"="REG_SZ", "{9bcdc129-0d7d-4dac-a6b0-42f1f8c64015}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.SourceSinkImpl\CurVer] "(Default)"="REG_SZ", "wtb.SourceSinkImpl.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.SourceSinkImpl.1] "(Default)"="REG_SZ", "SourceSinkImpl Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.SourceSinkImpl.1\CLSID] "(Default)"="REG_SZ", "{9bcdc129-0d7d-4dac-a6b0-42f1f8c64015}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.ToolbarInfo "(Default)"="REG_SZ", "ToolbarInfo Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.ToolbarInfo\CLSID "(Default)"="REG_SZ", "{4e25e940-f768-475f-b5c3-264c10c1dbc9}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.ToolbarInfo\CurVer] "(Default)"="REG_SZ", "wtb.ToolbarInfo.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.ToolbarInfo.1] "(Default)"="REG_SZ", "ToolbarInfo Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.ToolbarInfo.1\CLSID] "(Default)"="REG_SZ", "{4e25e940-f768-475f-b5c3-264c10c1dbc9}" [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\behdklnbkeffkfmlenbcnneladadmfli] "install_parameter"="REG_SZ", "&si=64843&tid=25496&ver=6.6&bd=1406654042126&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&ts=1&th=1&cobrand=ofaz2" "update_url"="REG_SZ", "https://clients2.google.com/service/update2/crx" "version"="REG_SZ", "6.6" [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\epajhldhoemggkfgjjieggffipdidhgh] "install_parameter"="REG_SZ", "&si=64843&tid=25496&ver=6.6&bd=1406654042126&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&ts=1&th=1&cobrand=ofaz2" "update_url"="REG_SZ", "https://clients2.google.com/service/update2/crx" "version"="REG_SZ", "6.6" [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\pbfegpllikaohlddbiinjlcdbhonjnmj] "install_parameter"="REG_SZ", "&si=64843&tid=25496&ver=6.6&bd=1406654042126&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&ts=1&th=1&cobrand=ofaz2" "update_url"="REG_SZ", "https://clients2.google.com/service/update2/crx" "version"="REG_SZ", "6.6" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs] "Tabs"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{cfd485f0-96bd-47cd-bb6d-cd7dda95f102}] "AppName"="REG_SZ", "Launcher.exe" "AppPath"="REG_SZ", "C:\Windows" "Policy"="REG_DWORD", 3 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN] "AutoSearch"="REG_DWORD", 1 "Default_Search_URL REG_SZ, "http://go.microsoft.com/fwlink/?LinkId=54896" ==> REG_SZ, "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=" "Search Bar"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=" "Search Page REG_SZ, "http://go.microsoft.com/fwlink/?LinkId=54896" ==> REG_SZ, "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=" "Start Default_Page_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F" "Start Page REG_SZ, "http://www.google.com" ==> REG_SZ, "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search] "Default_Search_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=" "Search Bar"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=" "Search Page"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=" "Start Default_Page_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F" "Start Page"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope REG_SZ, "{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" ==> REG_SZ, "{afdbddaa-5d3f-42ee-b79c-185a7020515b}" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}] "DisplayName"="REG_SZ", "Zoo Search" "SuggestionsURL_JSON"="REG_SZ", "http://api.widdit.com/suggestions/?format=ffplugin&ua=ie&src=addon&si=64843&gid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&dbCode=1&command={searchTerms}" "TopResultURLFallback"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q={searchTerms}" "URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q={searchTerms}" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchURI] "(Default)"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchUrl] "(Default)"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing "NewTabPageShow"="REG_DWORD", 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{2ba6d84b-9aee-4261-b9e1-37b3716514db}"="REG_BINARY, (zero length data) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\2324_RASAPI32 "ConsoleTracingMask"="REG_DWORD", -65536 "EnableConsoleTracing"="REG_DWORD", 0 "EnableFileTracing"="REG_DWORD", 0 "FileDirectory"="REG_EXPAND_SZ, "%windir%\tracing" "FileTracingMask"="REG_DWORD", -65536 "MaxFileSize"="REG_DWORD", 1048576 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\2324_RASMANCS] "ConsoleTracingMask"="REG_DWORD", -65536 "EnableConsoleTracing"="REG_DWORD", 0 "EnableFileTracing"="REG_DWORD", 0 "FileDirectory"="REG_EXPAND_SZ, "%windir%\tracing" "FileTracingMask"="REG_DWORD", -65536 "MaxFileSize"="REG_DWORD", 1048576 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\offer0_RASAPI32] "ConsoleTracingMask"="REG_DWORD", -65536 "EnableConsoleTracing"="REG_DWORD", 0 "EnableFileTracing"="REG_DWORD", 0 "FileDirectory"="REG_EXPAND_SZ, "%windir%\tracing" "FileTracingMask"="REG_DWORD", -65536 "MaxFileSize"="REG_DWORD", 1048576 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\offer0_RASMANCS] "ConsoleTracingMask"="REG_DWORD", -65536 "EnableConsoleTracing"="REG_DWORD", 0 "EnableFileTracing"="REG_DWORD", 0 "FileDirectory"="REG_EXPAND_SZ, "%windir%\tracing" "FileTracingMask"="REG_DWORD", -65536 "MaxFileSize"="REG_DWORD", 1048576 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\ProtectedSearch_RASAPI32] "ConsoleTracingMask"="REG_DWORD", -65536 "EnableConsoleTracing"="REG_DWORD", 0 "EnableFileTracing"="REG_DWORD", 0 "FileDirectory"="REG_EXPAND_SZ, "%windir%\tracing" "FileTracingMask"="REG_DWORD", -65536 "MaxFileSize"="REG_DWORD", 1048576 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\ProtectedSearch_RASMANCS] "ConsoleTracingMask"="REG_DWORD", -65536 "EnableConsoleTracing"="REG_DWORD", 0 "EnableFileTracing"="REG_DWORD", 0 "FileDirectory"="REG_EXPAND_SZ, "%windir%\tracing" "FileTracingMask"="REG_DWORD", -65536 "MaxFileSize"="REG_DWORD", 1048576 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\STInst_RASAPI32] "ConsoleTracingMask"="REG_DWORD", -65536 "EnableConsoleTracing"="REG_DWORD", 0 "EnableFileTracing"="REG_DWORD", 0 "FileDirectory"="REG_EXPAND_SZ, "%windir%\tracing" "FileTracingMask"="REG_DWORD", -65536 "MaxFileSize"="REG_DWORD", 1048576 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\STInst_RASMANCS] "ConsoleTracingMask"="REG_DWORD", -65536 "EnableConsoleTracing"="REG_DWORD", 0 "EnableFileTracing"="REG_DWORD", 0 "FileDirectory"="REG_EXPAND_SZ, "%windir%\tracing" "FileTracingMask"="REG_DWORD", -65536 "MaxFileSize"="REG_DWORD", 1048576 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2ba6d84b-9aee-4261-b9e1-37b3716514db}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97a33a2d-cdf4-4e5f-b52a-73f9bdb0202c}_is1] "DisplayIcon"="REG_SZ", "C:\Program Files\ZooToolbar\setupicon.ico" "DisplayName"="REG_SZ", "Zoo Toolbar 6.6" "DisplayVersion"="REG_SZ", "6.6" "EstimatedSize"="REG_DWORD", 7692 "Inno Setup: App Path"="REG_SZ", "C:\Program Files\ZooToolbar" "Inno Setup: Icon Group"="REG_SZ", "Zoo Toolbar" "Inno Setup: Language"="REG_SZ", "en" "Inno Setup: Setup Version"="REG_SZ", "5.4.3 (u)" "Inno Setup: User"="REG_SZ", "Malwarebytes" "InstallDate"="REG_SZ", "20140729" "InstallLocation"="REG_SZ", "C:\Program Files\ZooToolbar\" "MajorVersion"="REG_DWORD", 6 "MinorVersion"="REG_DWORD", 6 "NoModify"="REG_DWORD", 1 "NoRepair"="REG_DWORD", 1 "Publisher"="REG_SZ", "InfoSpace LLC" "QuietUninstallString"="REG_SZ", ""C:\Program Files\ZooToolbar\unins000.exe" /SILENT" "UninstallString"="REG_SZ", ""C:\Program Files\ZooToolbar\unins000.exe"" [HKEY_CURRENT_USER\Software\AppDataLow\Software\Simplytech\Toolbar\Settings\GLOBAL] "protect"="REG_SZ", "1" [HKEY_CURRENT_USER\Software\AppDataLow\Software\Simplytech\ZooToolbar] "ConfigUpdate"="REG_DWORD", 1406654307 "SearchBoxSize"="REG_DWORD", 200 "UserID"="REG_SZ", "C873827A5562422D8993C3D7D9EC3C57" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\AboutURLs] "Tabs"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "AutoSearch"="REG_DWORD", 1 "Default_Search_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=" "Search Bar"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=" "Search Page REG_SZ, "http://go.microsoft.com/fwlink/?LinkId=54896" ==> REG_SZ, "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=" "Start Default_Page_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F" "Start Page REG_SZ, "http://www.google.com" ==> REG_SZ, "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F" "Window_Placement REG_BINARY, ,..................... ==> REG_BINARY, ,..................... [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search] "Default_Search_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=" "Search Bar"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=" "Search Page"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=" "Start Default_Page_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F" "Start Page"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes] "DefaultScope REG_SZ, "{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" ==> REG_SZ, "{afdbddaa-5d3f-42ee-b79c-185a7020515b}" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}] "DisplayName"="REG_SZ", "Zoo Search" "SuggestionsURL_JSON"="REG_SZ", "http://api.widdit.com/suggestions/?format=ffplugin&ua=ie&src=addon&si=64843&gid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&dbCode=1&command={searchTerms}" "TopResultURLFallback"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q={searchTerms}" "URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q={searchTerms}" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURI] "(Default)"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl] "(Default)"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2ba6d84b-9aee-4261-b9e1-37b3716514db}] "Flags"="REG_DWORD", 1024 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID] "{2ba6d84b-9aee-4261-b9e1-37b3716514db}"="REG_SZ", "1" [HKEY_CURRENT_USER\Software\SimplyTech] "noclean"="REG_SZ", "AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAAb48DfcSKkmNsdpukGjGFwAAAAACAAAAAAAQZgAAAAEAACAAAABUpaAPP6L9MCKYXhuaT2GOdc1r7cNhRSwMz2Yi1FK1twAAAAAOgAAAAAIAACAAAABuV0FSxNtaSZySe63dsnQTLsiTTSDVY6KzzRfvIU3PITAAAADQhKcy4O83yj2wdn8OmU8IYhwl4xXhsSoWYETQXn8aMgrN8C0hOfzXxdOY2g5VIlRAAAAAULbLk+WNQEdv8xRU03IJj+pTBFQId3b2Ls3oYnbTHIhN+lS7ZA3G9jOWWHmvMM6mNZzAZbv8kfk8w8Y4dJGE3g==" "protect"="REG_SZ", "1" "sd"="REG_SZ", "2014-7-29" "ver"="REG_SZ", "6.6" [HKEY_CURRENT_USER\Software\SimplyTech\ZooToolbar] "(Default)"="REG_SZ", "" [HKEY_CURRENT_USER\Software\ZooToolbar] "b0"="REG_SZ", "1" "b1"="REG_SZ", "1" "b2"="REG_SZ", "1" "b3"="REG_SZ", "1" "cs"="REG_SZ", "True" "dir"="REG_SZ", "C:\Program Files\ZooToolbar" "iid"="REG_SZ", "64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F" "lidate"="REG_SZ", "29/7/2014_19:14:38" "sd"="REG_SZ", "2014-7-29" "si"="REG_SZ", "64843" "success"="REG_SZ", "1" "ti"="REG_SZ", "25496" "ver"="REG_SZ", "6.6"
Malwarebytes Anti-Malware log:
Malwarebytes Anti-Malware
www.malwarebytes.org
Scan Date: 7/29/2014
Scan Time: 7:23:51 PM
Logfile: mbamZooToolbar.txt
Administrator: Yes
Version: 2.00.2.1012
Malware Database: v2014.07.29.05
Rootkit Database: v2014.07.17.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled
OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: Malwarebytes
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 248983
Time Elapsed: 3 min, 2 sec
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
Processes: 2
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\ProtectedSearch.exe, 2740, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e]
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\SystemSockets.exe, 3908, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e]
Modules: 4
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\cinshlpr.dll, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\cinshlpr.dll, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\InstallHelper.dll, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\System.Data.SQLite.dll, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e],
Registry Keys: 28
PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af],
PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{8196140c-1800-47c5-97d3-85c30cce222a}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af],
PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af],
PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{A928E66C-F501-4E66-9953-855C712F93B2}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af],
PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af],
PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af],
PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{FCA8936E-403A-4487-A966-70F80F1D5A6A}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af],
PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\wtb.Band.1, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af],
PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\wtb.Band, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af],
PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{2BA6D84B-9AEE-4261-B9E1-37B3716514DB}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af],
PUP.Optional.SimplyTech.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{2BA6D84B-9AEE-4261-B9E1-37B3716514DB}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af],
PUP.Optional.SimplyTech.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{2BA6D84B-9AEE-4261-B9E1-37B3716514DB}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af],
PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\CLSID\{3c15b3cc-e19e-4bb3-8d13-0b87d33afb88}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af],
PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\wtb.NotificationSource.1, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af],
PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\wtb.NotificationSource, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af],
PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\CLSID\{4e25e940-f768-475f-b5c3-264c10c1dbc9}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af],
PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\wtb.ToolbarInfo.1, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af],
PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\wtb.ToolbarInfo, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af],
PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\CLSID\{9bcdc129-0d7d-4dac-a6b0-42f1f8c64015}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af],
PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\wtb.SourceSinkImpl.1, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af],
PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\wtb.SourceSinkImpl, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af],
PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\CLSID\{A928E66C-F501-4E66-9953-855C712F93B2}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af],
PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\CLSID\{2BA6D84B-9AEE-4261-B9E1-37B3716514DB}\INPROCSERVER32, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af],
PUP.Optional.ZooToolBar.A, HKLM\SOFTWARE\CLASSES\APPID\ZooToolbar.DLL, Quarantined, [35148520c1ba0333f46f74bbd33137c9],
PUP.Optional.ZooToolBar.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\ZooToolbar, Quarantined, [0b3e7e27512a320400656dc2c73dbe42],
PUP.Optional.SimplyTech.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\SIMPLYTECH\Toolbar, Quarantined, [e960e3c2d0abed493ef8cd0d1fe309f7],
PUP.Optional.ZooToolBar.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SIMPLYTECH\ZooToolbar, Quarantined, [05449015b0cb37ff34303af5a85c6e92],
PUP.Optional.ZooTB.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{97a33a2d-cdf4-4e5f-b52a-73f9bdb0202c}_is1, Quarantined, [3712d5d07605c670efe16e5446bca25e],
Registry Values: 2
PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{2BA6D84B-9AEE-4261-B9E1-37B3716514DB}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af],
PUP.Optional.AdvancedSystemProtector.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{2ba6d84b-9aee-4261-b9e1-37b3716514db}, Quarantined, [1f2a6c39116a78bed3cd5545be44dd23],
Registry Data: 13
PUP.Optional.ZooSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\ABOUTURLS|Tabs, http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F),Replaced,[96b3871e5328a98de54e5e5cb84c1fe1]
PUP.Optional.ZooSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F),Replaced,[07422f76a0db68ce072a7149659fc040]
PUP.Optional.ZooSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=),Replaced,[52f7970e7dfe1d19d6597e3c3acabf41]
PUP.Optional.ZooSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=),Replaced,[9eabd1d4770493a388a1328823e137c9]
PUP.Optional.ZooSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=),Replaced,[2425b2f36f0c37ff42e9a515966e8878]
PUP.Optional.ZooSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=),Replaced,[f158eabbb7c41c1aab7c9c1e9d6708f8]
PUP.Optional.ZooSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s),Replaced,[ca7fadf8a8d3bd7942e300ba8d77c63a]
PUP.Optional.ZooSearch.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=),Replaced,[54f5e9bc2c4f999dd951f2c89f657789]
PUP.Optional.ZooSearch.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F),Replaced,[2c1d5e476318a78fbb7718a2d82ce11f]
PUP.Optional.ZooSearch.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=),Replaced,[84c5545185f652e432fe308ab351738d]
PUP.Optional.ZooSearch.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=),Replaced,[95b42580cab1b3832c00f2c81ee639c7]
PUP.Optional.ZooSearch.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=),Replaced,[f653079e55266ec87cac9624f410e51b]
PUP.Optional.ZooSearch.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s),Replaced,[99b07d28fb807bbb31f5bcfe22e26f91]
Folders: 11
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\IE, Quarantined, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\[email protected], Quarantined, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\[email protected]\chrome, Quarantined, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\[email protected]\components, Quarantined, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\[email protected]\plugins, Quarantined, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\chrome, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\components, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\plugins, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
Files: 63
PUP.Optional.SimplyTech.A, C:\Program Files\ZooToolbar\IE\ZooToolbar.dll, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\Desktop\offer0.exe, Quarantined, [c8816e377efd2b0b00ec1789dd24f50b],
PUP.Optional.ZooSearch.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\searchplugins\Zoo Search.xml, Quarantined, [0b3eeeb75823a98d66fc1a1545bf768a],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\STInst.exe, Quarantined, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\cinshlpr.dll, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\InstallHelper.dll, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\Interop.IWshRuntimeLibrary.dll, Quarantined, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\Microsoft.Win32.TaskScheduler.dll, Quarantined, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\Microsoft.Win32.TaskScheduler.xml, Quarantined, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\ProtectedSearch.exe, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\ProtectedSearch.ico, Quarantined, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\setupicon.ico, Quarantined, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\stinst.dat, Quarantined, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\stinst.wls, Quarantined, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\stinst.xml, Quarantined, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\STInst32.dll, Quarantined, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\System.Data.SQLite.dll, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\SystemSockets.exe, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\TaskSchedulerCreator.exe, Quarantined, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\TBUpdater.dll, Quarantined, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\TBUpdater.exe, Quarantined, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\ToolbarUninstall.exe, Quarantined, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\unins000.dat, Quarantined, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\unins000.exe, Quarantined, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\[email protected]\chrome.manifest, Quarantined, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\[email protected]\install.js, Quarantined, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\[email protected]\install.rdf, Quarantined, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\[email protected]\pop.htm, Quarantined, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\[email protected]\chrome\ZooToolbar_25496.jar, Quarantined, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\[email protected]\components\wtb_complete.js, Quarantined, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\[email protected]\plugins\npwiddit.dll, Quarantined, [3712d5d07605c670efe16e5446bca25e],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\chrome.manifest, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\install.js, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\install.rdf, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\pop.htm, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\wtb_ff.bin, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\ZooToolbar_25496.sqlite, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\chrome\ZooToolbar_25496.jar, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\components\wtb_complete.js, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\1154284306.gif, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\1811652334.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\1856656659.gif, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\1X16_Trans.gif, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\482924561.jpg, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\568926401.jpg, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\contact.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\default_search_button.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\default_search_provider12.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\default_search_provider16.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\help.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\home.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\images.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\privacy.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\refresh.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\uninstall.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\video.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\plugins\npwiddit.dll, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff],
PUP.Optional.ZooSearch.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: ( "startup_urls": [ "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F" ],), Replaced,[3316c5e03e3dbc7a3622509a9371b947]
PUP.Optional.ZooSearch.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: ( "homepage": "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F",), Replaced,[0a3ffbaa6b1005312633dc0efa0a1fe1]
PUP.Optional.ZooSearch.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: ( "search_url": "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q={searchTerms}",), Replaced,[3b0ecbda5c1f2313fe5ccd1d24e0827e]
PUP.Optional.ZooSearch.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("browser.startup.homepage", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F");), Replaced,[5fea30757a01bf7760f509e18f75a35d]
PUP.Optional.ZooSearch.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("browser.newtab.url", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F");), Replaced,[c38625802358a3933b1bd4169d67738d]
PUP.Optional.ZooSearch.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("keyword.URL", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=");), Replaced,[1e2bddc8e794fb3b91c6e901020248b8]
Physical Sectors: 0
(No malicious items detected)
(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):
Save yourself the hassle and get protected.
Back to top
Sign In
Create Account
