Jump to content

Removal instructions for Zoo Toolbar


Recommended Posts

  • Staff

What is Zoo Toolbar?

The Malwarebytes research team has determined that Zoo Toolbar is a browser hijacker. These so-called "hijackers" alter your startpage or searchscopes so that the effected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by Zoo Toolbar?

This is how the start- and search-page looks:

startpage.png

And you may see these add-ons/extensions:

warning1.png

warning2.png

warning3.png

or this warning:

main.png

and this entry in your list of installed programs:

warning4.png

How did Zoo Toolbar get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove Zoo Toolbar?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted program.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
  • Reboot your computer if prompted.
Is there anything else I need to do to get rid of Zoo Toolbar?
  • The Chrome extension can now safely be removed. Open "Settings" > "Extensions" and click the bin behind the Zoo Toolbar listing. Then confirm removal.
  • The hijacker adds itself at the top of the list of search providers in Chrome. We will show you how to choose another one and change the startpage.
Look at the replies to this topic for the additional guides.

How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Zoo Toolbar rogue. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

protection1.png

Technical details for experts

Signs in a HijackThis log:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=R1'>http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=R1'>http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=R0'>http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034FR1'>http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034FR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=R1'>http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=R1'>http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=R0'>http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034FR1'>http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034FR1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=R1'>http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=R1'>http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%sR1'>http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%sR1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%sO2'>http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%sO2 - BHO: Zoo Toolbar - {2ba6d84b-9aee-4261-b9e1-37b3716514db} - C:\Program Files\ZooToolbar\IE\ZooToolbar.dllO3 - Toolbar: Zoo Toolbar - {2ba6d84b-9aee-4261-b9e1-37b3716514db} - C:\Program Files\ZooToolbar\IE\ZooToolbar.dll
Alterations made by the installer:

File system details  ---------------------------------------------    Adds the folder C:\Program Files\Mozilla Firefox\searchplugins       Adds the file Zoo Search.xml"="7/29/2014 7:17 PM, 2193 bytes, A    Adds the folder C:\Program Files\ZooToolbar       Adds the file cinshlpr.dll"="7/20/2014 3:05 AM, 195376 bytes, A       Adds the file InstallHelper.dll"="7/20/2014 3:05 AM, 136256 bytes, A       Adds the file Interop.IWshRuntimeLibrary.dll"="6/27/2013 7:14 AM, 55368 bytes, A       Adds the file Microsoft.Win32.TaskScheduler.dll"="6/27/2013 7:14 AM, 176712 bytes, A       Adds the file Microsoft.Win32.TaskScheduler.xml"="6/13/2013 5:59 AM, 213366 bytes, A       Adds the file ProtectedSearch.exe"="4/9/2014 7:55 AM, 91208 bytes, A       Adds the file ProtectedSearch.ico"="6/13/2013 5:58 AM, 4286 bytes, A       Adds the file setupicon.ico"="7/20/2014 5:17 AM, 5430 bytes, A       Adds the file stinst.dat"="7/29/2014 7:14 PM, 3336 bytes, A       Adds the file STInst.exe"="7/20/2014 3:05 AM, 126768 bytes, A       Adds the file stinst.wls"="7/29/2014 7:17 PM, 308 bytes, A       Adds the file stinst.xml"="7/29/2014 7:16 PM, 113780 bytes, A       Adds the file STInst32.dll"="7/20/2014 3:05 AM, 1226032 bytes, A       Adds the file System.Data.SQLite.dll"="6/27/2013 7:14 AM, 923720 bytes, A       Adds the file SystemSockets.exe"="1/9/2014 8:16 AM, 34376 bytes, A       Adds the file TaskSchedulerCreator.exe"="2/4/2014 6:36 AM, 22600 bytes, A       Adds the file TBUpdater.dll"="7/20/2014 3:05 AM, 122672 bytes, A       Adds the file TBUpdater.exe"="7/3/2014 3:21 AM, 12864 bytes, A       Adds the file ToolbarUninstall.exe"="4/9/2014 7:55 AM, 13384 bytes, A       Adds the file unins000.dat"="7/29/2014 7:14 PM, 108349 bytes, A       Adds the file unins000.exe"="7/29/2014 7:13 PM, 1175509 bytes, A    Adds the folder C:\Program Files\ZooToolbar\IE       Adds the file ZooToolbar.dll"="7/20/2014 5:16 AM, 1102704 bytes, A    Adds the folder C:\Program Files\ZooToolbar\support@ZooToolbar.com       Adds the file chrome.manifest"="7/20/2014 5:15 AM, 521 bytes, A       Adds the file install.js"="7/20/2014 5:15 AM, 775 bytes, A       Adds the file install.rdf"="7/20/2014 5:15 AM, 1331 bytes, A       Adds the file pop.htm"="7/20/2014 5:15 AM, 2270 bytes, A    Adds the folder C:\Program Files\ZooToolbar\support@ZooToolbar.com\chrome       Adds the file ZooToolbar_25496.jar"="7/20/2014 5:15 AM, 962211 bytes, A    Adds the folder C:\Program Files\ZooToolbar\support@ZooToolbar.com\components       Adds the file wtb_complete.js"="7/20/2014 5:15 AM, 6845 bytes, A    Adds the folder C:\Program Files\ZooToolbar\support@ZooToolbar.com\plugins       Adds the file npwiddit.dll"="4/9/2014 7:56 AM, 1250880 bytes, A    Adds the folder C:\Users\{username}\AppData\LocalLow\SimplyTech\Toolbar       Adds the file settings.dat"="7/29/2014 7:20 PM, 17247 bytes, A    Adds the folder C:\Users\{username}\AppData\LocalLow\ZooToolbar    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}       Adds the file chrome.manifest"="7/20/2014 5:15 AM, 521 bytes, A       Adds the file install.js"="7/20/2014 5:15 AM, 775 bytes, A       Adds the file install.rdf"="7/20/2014 5:15 AM, 1331 bytes, A       Adds the file pop.htm"="7/20/2014 5:15 AM, 2270 bytes, A       Adds the file ZooToolbar_25496.sqlite"="7/29/2014 7:17 PM, 2048 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\chrome       Adds the file ZooToolbar_25496.jar"="7/20/2014 5:15 AM, 962211 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\components       Adds the file wtb_complete.js"="7/20/2014 5:15 AM, 6845 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\plugins       Adds the file npwiddit.dll"="4/9/2014 7:56 AM, 1250880 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\searchplugins       Adds the file Zoo Search.xml"="7/29/2014 7:17 PM, 2193 bytes, A    In the existing folder C:\Windows       Adds the file Launcher.exe"="4/9/2014 7:55 AM, 34376 bytes, A    Adds the folder C:\Windows\System32\Tasks\Browser Updater       Adds the file Browser Updater"="7/29/2014 7:14 PM, 4008 bytes, A    Adds the folder C:\Windows\System32\Tasks\ProtectedSearch       Adds the file Protected Search"="7/29/2014 7:14 PM, 4022 bytes, A    Adds the folder C:\Windows\System32\Tasks\SystemSockets       Adds the file SystemSockets"="7/29/2014 7:14 PM, 4008 bytes, ARegistry details  ------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{3FC27B34-0C19-49DA-875E-1875DDD4A6B2}]       "(Default)"="REG_SZ", "wtb"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\ZooToolbar.DLL]       "AppID"="REG_SZ", "{3FC27B34-0C19-49DA-875E-1875DDD4A6B2}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}]       "(Default)"="REG_SZ", "Zoo Toolbar"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}\Implemented Categories]       "(Default)"="REG_SZ", ""    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]       "(Default)"="REG_SZ", ""    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}\InprocServer32]       "(Default)"="REG_SZ", "C:\Program Files\ZooToolbar\IE\ZooToolbar.dll"       "ThreadingModel"="REG_SZ", "Apartment"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}\ProgID]       "(Default)"="REG_SZ", "wtb.Band.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}\Programmable]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}\TypeLib]       "(Default)"="REG_SZ", "{8196140c-1800-47c5-97d3-85c30cce222a}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}\VersionIndependentProgID]       "(Default)"="REG_SZ", "wtb.Band"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3c15b3cc-e19e-4bb3-8d13-0b87d33afb88}]       "(Default)"="REG_SZ", "NotificationSource Class"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3c15b3cc-e19e-4bb3-8d13-0b87d33afb88}\InprocServer32]       "(Default)"="REG_SZ", "C:\Program Files\ZooToolbar\IE\ZooToolbar.dll"       "ThreadingModel"="REG_SZ", "Apartment"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3c15b3cc-e19e-4bb3-8d13-0b87d33afb88}\ProgID]       "(Default)"="REG_SZ", "wtb.NotificationSource.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3c15b3cc-e19e-4bb3-8d13-0b87d33afb88}\Programmable]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3c15b3cc-e19e-4bb3-8d13-0b87d33afb88}\TypeLib]       "(Default)"="REG_SZ", "{8196140c-1800-47c5-97d3-85c30cce222a}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3c15b3cc-e19e-4bb3-8d13-0b87d33afb88}\VersionIndependentProgID]       "(Default)"="REG_SZ", "wtb.NotificationSource"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4e25e940-f768-475f-b5c3-264c10c1dbc9}]       "(Default)"="REG_SZ", "ToolbarInfo Class"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4e25e940-f768-475f-b5c3-264c10c1dbc9}\InprocServer32]       "(Default)"="REG_SZ", "C:\Program Files\ZooToolbar\IE\ZooToolbar.dll"       "ThreadingModel"="REG_SZ", "Apartment"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4e25e940-f768-475f-b5c3-264c10c1dbc9}\ProgID]       "(Default)"="REG_SZ", "wtb.ToolbarInfo.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4e25e940-f768-475f-b5c3-264c10c1dbc9}\Programmable]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4e25e940-f768-475f-b5c3-264c10c1dbc9}\TypeLib]       "(Default)"="REG_SZ", "{8196140c-1800-47c5-97d3-85c30cce222a}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4e25e940-f768-475f-b5c3-264c10c1dbc9}\VersionIndependentProgID]       "(Default)"="REG_SZ", "wtb.ToolbarInfo"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9bcdc129-0d7d-4dac-a6b0-42f1f8c64015}]       "(Default)"="REG_SZ", "SourceSinkImpl Class"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9bcdc129-0d7d-4dac-a6b0-42f1f8c64015}\InprocServer32]       "(Default)"="REG_SZ", "C:\Program Files\ZooToolbar\IE\ZooToolbar.dll"       "ThreadingModel"="REG_SZ", "Apartment"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9bcdc129-0d7d-4dac-a6b0-42f1f8c64015}\ProgID]       "(Default)"="REG_SZ", "wtb.SourceSinkImpl.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9bcdc129-0d7d-4dac-a6b0-42f1f8c64015}\Programmable]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9bcdc129-0d7d-4dac-a6b0-42f1f8c64015}\TypeLib]       "(Default)"="REG_SZ", "{8196140c-1800-47c5-97d3-85c30cce222a}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9bcdc129-0d7d-4dac-a6b0-42f1f8c64015}\VersionIndependentProgID]       "(Default)"="REG_SZ", "wtb.SourceSinkImpl"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A928E66C-F501-4E66-9953-855C712F93B2}]       "(Default)"="REG_SZ", "PSFactoryBuffer"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A928E66C-F501-4E66-9953-855C712F93B2}\InProcServer32]       "(Default)"="REG_SZ", "C:\Program Files\ZooToolbar\IE\ZooToolbar.dll"       "ThreadingModel"="REG_SZ", "Both"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}]       "(Default)"="REG_SZ", "ISourceSinkImpl"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}\NumMethods]       "(Default)"="REG_SZ", "12"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}\ProxyStubClsid]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{A928E66C-F501-4E66-9953-855C712F93B2}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}\TypeLib]       "(Default)"="REG_SZ", "{8196140C-1800-47C5-97D3-85C30CCE222A}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}]       "(Default)"="REG_SZ", "INotificationSource"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}\NumMethods]       "(Default)"="REG_SZ", "9"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}\ProxyStubClsid]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{A928E66C-F501-4E66-9953-855C712F93B2}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}\TypeLib]       "(Default)"="REG_SZ", "{8196140C-1800-47C5-97D3-85C30CCE222A}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}]       "(Default)"="REG_SZ", "IBand"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}\NumMethods]       "(Default)"="REG_SZ", "7"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}\ProxyStubClsid]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{A928E66C-F501-4E66-9953-855C712F93B2}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}\TypeLib]       "(Default)"="REG_SZ", "{8196140C-1800-47C5-97D3-85C30CCE222A}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}]       "(Default)"="REG_SZ", "IToolbarInfo"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}\NumMethods]       "(Default)"="REG_SZ", "16"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}\ProxyStubClsid]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{A928E66C-F501-4E66-9953-855C712F93B2}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}\TypeLib]       "(Default)"="REG_SZ", "{8196140C-1800-47C5-97D3-85C30CCE222A}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}]       "(Default)"="REG_SZ", "ISourceInt"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}\NumMethods]       "(Default)"="REG_SZ", "87"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}\ProxyStubClsid]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{A928E66C-F501-4E66-9953-855C712F93B2}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}\TypeLib]       "(Default)"="REG_SZ", "{8196140C-1800-47C5-97D3-85C30CCE222A}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]       "Tabs"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main]       "AutoSearch"="REG_DWORD", 1       "Default_Search_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="       "Search Bar"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="       "Search Page"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="       "Start Default_Page_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"       "Start Page"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search]       "Default_Search_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="       "Search Bar"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="       "Search Page"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="       "Start Default_Page_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"       "Start Page"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]       "DefaultScope"="REG_SZ", "{afdbddaa-5d3f-42ee-b79c-185a7020515b}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}]       "DisplayName"="REG_SZ", "Zoo Search"       "SuggestionsURL_JSON"="REG_SZ", "http://api.widdit.com/suggestions/?format=ffplugin&ua=ie&src=addon&si=64843&gid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&dbCode=1&command={searchTerms}"       "TopResultURLFallback"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q={searchTerms}"       "URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q={searchTerms}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchURI]       "(Default)"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchUrl]       "(Default)"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing]       "NewTabPageShow"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{8196140C-1800-47C5-97D3-85C30CCE222A}\1.0]       "(Default)"="REG_SZ", "wtb 1.0 Type Library"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{8196140C-1800-47C5-97D3-85C30CCE222A}\1.0\0\win32]       "(Default)"="REG_SZ", "C:\Program Files\ZooToolbar\IE\ZooToolbar.dll"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{8196140C-1800-47C5-97D3-85C30CCE222A}\1.0\FLAGS]       "(Default)"="REG_SZ", "0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{8196140C-1800-47C5-97D3-85C30CCE222A}\1.0\HELPDIR]       "(Default)"="REG_SZ", "C:\Program Files\ZooToolbar\IE"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.Band]       "(Default)"="REG_SZ", "Zoo Toolbar"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.Band\CLSID]       "(Default)"="REG_SZ", "{2ba6d84b-9aee-4261-b9e1-37b3716514db}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.Band\CurVer]       "(Default)"="REG_SZ", "wtb.Band.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.Band.1]       "(Default)"="REG_SZ", "Zoo Toolbar"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.Band.1\CLSID]       "(Default)"="REG_SZ", "{2ba6d84b-9aee-4261-b9e1-37b3716514db}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.NotificationSource]       "(Default)"="REG_SZ", "NotificationSource Class"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.NotificationSource\CLSID]       "(Default)"="REG_SZ", "{3c15b3cc-e19e-4bb3-8d13-0b87d33afb88}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.NotificationSource\CurVer]       "(Default)"="REG_SZ", "wtb.NotificationSource.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.NotificationSource.1]       "(Default)"="REG_SZ", "NotificationSource Class"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.NotificationSource.1\CLSID]       "(Default)"="REG_SZ", "{3c15b3cc-e19e-4bb3-8d13-0b87d33afb88}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.SourceSinkImpl]       "(Default)"="REG_SZ", "SourceSinkImpl Class"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.SourceSinkImpl\CLSID]       "(Default)"="REG_SZ", "{9bcdc129-0d7d-4dac-a6b0-42f1f8c64015}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.SourceSinkImpl\CurVer]       "(Default)"="REG_SZ", "wtb.SourceSinkImpl.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.SourceSinkImpl.1]       "(Default)"="REG_SZ", "SourceSinkImpl Class"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.SourceSinkImpl.1\CLSID]       "(Default)"="REG_SZ", "{9bcdc129-0d7d-4dac-a6b0-42f1f8c64015}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.ToolbarInfo       "(Default)"="REG_SZ", "ToolbarInfo Class"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.ToolbarInfo\CLSID       "(Default)"="REG_SZ", "{4e25e940-f768-475f-b5c3-264c10c1dbc9}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.ToolbarInfo\CurVer]       "(Default)"="REG_SZ", "wtb.ToolbarInfo.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.ToolbarInfo.1]       "(Default)"="REG_SZ", "ToolbarInfo Class"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wtb.ToolbarInfo.1\CLSID]       "(Default)"="REG_SZ", "{4e25e940-f768-475f-b5c3-264c10c1dbc9}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\behdklnbkeffkfmlenbcnneladadmfli]       "install_parameter"="REG_SZ", "&si=64843&tid=25496&ver=6.6&bd=1406654042126&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&ts=1&th=1&cobrand=ofaz2"       "update_url"="REG_SZ", "https://clients2.google.com/service/update2/crx"       "version"="REG_SZ", "6.6"    [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\epajhldhoemggkfgjjieggffipdidhgh]       "install_parameter"="REG_SZ", "&si=64843&tid=25496&ver=6.6&bd=1406654042126&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&ts=1&th=1&cobrand=ofaz2"       "update_url"="REG_SZ", "https://clients2.google.com/service/update2/crx"       "version"="REG_SZ", "6.6"    [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\pbfegpllikaohlddbiinjlcdbhonjnmj]       "install_parameter"="REG_SZ", "&si=64843&tid=25496&ver=6.6&bd=1406654042126&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&ts=1&th=1&cobrand=ofaz2"       "update_url"="REG_SZ", "https://clients2.google.com/service/update2/crx"       "version"="REG_SZ", "6.6"    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]       "Tabs"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{cfd485f0-96bd-47cd-bb6d-cd7dda95f102}]       "AppName"="REG_SZ", "Launcher.exe"       "AppPath"="REG_SZ", "C:\Windows"       "Policy"="REG_DWORD", 3    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN]       "AutoSearch"="REG_DWORD", 1       "Default_Search_URL        REG_SZ, "http://go.microsoft.com/fwlink/?LinkId=54896" ==> REG_SZ, "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="       "Search Bar"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="       "Search Page        REG_SZ, "http://go.microsoft.com/fwlink/?LinkId=54896" ==> REG_SZ, "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="       "Start Default_Page_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"       "Start Page        REG_SZ, "http://www.google.com" ==> REG_SZ, "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search]       "Default_Search_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="       "Search Bar"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="       "Search Page"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="       "Start Default_Page_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"       "Start Page"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]       "DefaultScope        REG_SZ, "{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" ==> REG_SZ, "{afdbddaa-5d3f-42ee-b79c-185a7020515b}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}]       "DisplayName"="REG_SZ", "Zoo Search"       "SuggestionsURL_JSON"="REG_SZ", "http://api.widdit.com/suggestions/?format=ffplugin&ua=ie&src=addon&si=64843&gid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&dbCode=1&command={searchTerms}"       "TopResultURLFallback"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q={searchTerms}"       "URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q={searchTerms}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchURI]       "(Default)"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s"    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchUrl]       "(Default)"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s"    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing       "NewTabPageShow"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]       "{2ba6d84b-9aee-4261-b9e1-37b3716514db}"="REG_BINARY, (zero length data)    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\2324_RASAPI32       "ConsoleTracingMask"="REG_DWORD", -65536       "EnableConsoleTracing"="REG_DWORD", 0       "EnableFileTracing"="REG_DWORD", 0       "FileDirectory"="REG_EXPAND_SZ, "%windir%\tracing"       "FileTracingMask"="REG_DWORD", -65536       "MaxFileSize"="REG_DWORD", 1048576    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\2324_RASMANCS]       "ConsoleTracingMask"="REG_DWORD", -65536       "EnableConsoleTracing"="REG_DWORD", 0       "EnableFileTracing"="REG_DWORD", 0       "FileDirectory"="REG_EXPAND_SZ, "%windir%\tracing"       "FileTracingMask"="REG_DWORD", -65536       "MaxFileSize"="REG_DWORD", 1048576    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\offer0_RASAPI32]       "ConsoleTracingMask"="REG_DWORD", -65536       "EnableConsoleTracing"="REG_DWORD", 0       "EnableFileTracing"="REG_DWORD", 0       "FileDirectory"="REG_EXPAND_SZ, "%windir%\tracing"       "FileTracingMask"="REG_DWORD", -65536       "MaxFileSize"="REG_DWORD", 1048576    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\offer0_RASMANCS]       "ConsoleTracingMask"="REG_DWORD", -65536       "EnableConsoleTracing"="REG_DWORD", 0       "EnableFileTracing"="REG_DWORD", 0       "FileDirectory"="REG_EXPAND_SZ, "%windir%\tracing"       "FileTracingMask"="REG_DWORD", -65536       "MaxFileSize"="REG_DWORD", 1048576    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\ProtectedSearch_RASAPI32]       "ConsoleTracingMask"="REG_DWORD", -65536       "EnableConsoleTracing"="REG_DWORD", 0       "EnableFileTracing"="REG_DWORD", 0       "FileDirectory"="REG_EXPAND_SZ, "%windir%\tracing"       "FileTracingMask"="REG_DWORD", -65536       "MaxFileSize"="REG_DWORD", 1048576    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\ProtectedSearch_RASMANCS]       "ConsoleTracingMask"="REG_DWORD", -65536       "EnableConsoleTracing"="REG_DWORD", 0       "EnableFileTracing"="REG_DWORD", 0       "FileDirectory"="REG_EXPAND_SZ, "%windir%\tracing"       "FileTracingMask"="REG_DWORD", -65536       "MaxFileSize"="REG_DWORD", 1048576    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\STInst_RASAPI32]       "ConsoleTracingMask"="REG_DWORD", -65536       "EnableConsoleTracing"="REG_DWORD", 0       "EnableFileTracing"="REG_DWORD", 0       "FileDirectory"="REG_EXPAND_SZ, "%windir%\tracing"       "FileTracingMask"="REG_DWORD", -65536       "MaxFileSize"="REG_DWORD", 1048576    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\STInst_RASMANCS]       "ConsoleTracingMask"="REG_DWORD", -65536       "EnableConsoleTracing"="REG_DWORD", 0       "EnableFileTracing"="REG_DWORD", 0       "FileDirectory"="REG_EXPAND_SZ, "%windir%\tracing"       "FileTracingMask"="REG_DWORD", -65536       "MaxFileSize"="REG_DWORD", 1048576    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2ba6d84b-9aee-4261-b9e1-37b3716514db}]    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97a33a2d-cdf4-4e5f-b52a-73f9bdb0202c}_is1]       "DisplayIcon"="REG_SZ", "C:\Program Files\ZooToolbar\setupicon.ico"       "DisplayName"="REG_SZ", "Zoo Toolbar 6.6"       "DisplayVersion"="REG_SZ", "6.6"       "EstimatedSize"="REG_DWORD", 7692       "Inno Setup: App Path"="REG_SZ", "C:\Program Files\ZooToolbar"       "Inno Setup: Icon Group"="REG_SZ", "Zoo Toolbar"       "Inno Setup: Language"="REG_SZ", "en"       "Inno Setup: Setup Version"="REG_SZ", "5.4.3 (u)"       "Inno Setup: User"="REG_SZ", "Malwarebytes"       "InstallDate"="REG_SZ", "20140729"       "InstallLocation"="REG_SZ", "C:\Program Files\ZooToolbar\"       "MajorVersion"="REG_DWORD", 6       "MinorVersion"="REG_DWORD", 6       "NoModify"="REG_DWORD", 1       "NoRepair"="REG_DWORD", 1       "Publisher"="REG_SZ", "InfoSpace LLC"       "QuietUninstallString"="REG_SZ", ""C:\Program Files\ZooToolbar\unins000.exe" /SILENT"       "UninstallString"="REG_SZ", ""C:\Program Files\ZooToolbar\unins000.exe""    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Simplytech\Toolbar\Settings\GLOBAL]       "protect"="REG_SZ", "1"    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Simplytech\ZooToolbar]       "ConfigUpdate"="REG_DWORD", 1406654307       "SearchBoxSize"="REG_DWORD", 200       "UserID"="REG_SZ", "C873827A5562422D8993C3D7D9EC3C57"    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\AboutURLs]       "Tabs"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]       "AutoSearch"="REG_DWORD", 1       "Default_Search_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="       "Search Bar"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="       "Search Page        REG_SZ, "http://go.microsoft.com/fwlink/?LinkId=54896" ==> REG_SZ, "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="       "Start Default_Page_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"       "Start Page        REG_SZ, "http://www.google.com" ==> REG_SZ, "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"       "Window_Placement        REG_BINARY, ,..................... ==> REG_BINARY, ,.....................    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]       "Default_Search_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="       "Search Bar"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="       "Search Page"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="       "Start Default_Page_URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"       "Start Page"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes]       "DefaultScope        REG_SZ, "{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" ==> REG_SZ, "{afdbddaa-5d3f-42ee-b79c-185a7020515b}"    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}]       "DisplayName"="REG_SZ", "Zoo Search"       "SuggestionsURL_JSON"="REG_SZ", "http://api.widdit.com/suggestions/?format=ffplugin&ua=ie&src=addon&si=64843&gid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&dbCode=1&command={searchTerms}"       "TopResultURLFallback"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q={searchTerms}"       "URL"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q={searchTerms}"    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURI]       "(Default)"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s"    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]       "(Default)"="REG_SZ", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s"    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2ba6d84b-9aee-4261-b9e1-37b3716514db}]       "Flags"="REG_DWORD", 1024    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]       "{2ba6d84b-9aee-4261-b9e1-37b3716514db}"="REG_SZ", "1"    [HKEY_CURRENT_USER\Software\SimplyTech]       "noclean"="REG_SZ", "AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAAb48DfcSKkmNsdpukGjGFwAAAAACAAAAAAAQZgAAAAEAACAAAABUpaAPP6L9MCKYXhuaT2GOdc1r7cNhRSwMz2Yi1FK1twAAAAAOgAAAAAIAACAAAABuV0FSxNtaSZySe63dsnQTLsiTTSDVY6KzzRfvIU3PITAAAADQhKcy4O83yj2wdn8OmU8IYhwl4xXhsSoWYETQXn8aMgrN8C0hOfzXxdOY2g5VIlRAAAAAULbLk+WNQEdv8xRU03IJj+pTBFQId3b2Ls3oYnbTHIhN+lS7ZA3G9jOWWHmvMM6mNZzAZbv8kfk8w8Y4dJGE3g=="       "protect"="REG_SZ", "1"       "sd"="REG_SZ", "2014-7-29"       "ver"="REG_SZ", "6.6"    [HKEY_CURRENT_USER\Software\SimplyTech\ZooToolbar]       "(Default)"="REG_SZ", ""    [HKEY_CURRENT_USER\Software\ZooToolbar]       "b0"="REG_SZ", "1"       "b1"="REG_SZ", "1"       "b2"="REG_SZ", "1"       "b3"="REG_SZ", "1"       "cs"="REG_SZ", "True"       "dir"="REG_SZ", "C:\Program Files\ZooToolbar"       "iid"="REG_SZ", "64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"       "lidate"="REG_SZ", "29/7/2014_19:14:38"       "sd"="REG_SZ", "2014-7-29"       "si"="REG_SZ", "64843"       "success"="REG_SZ", "1"       "ti"="REG_SZ", "25496"       "ver"="REG_SZ", "6.6"
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 7/29/2014Scan Time: 7:23:51 PMLogfile: mbamZooToolbar.txtAdministrator: YesVersion: 2.00.2.1012Malware Database: v2014.07.29.05Rootkit Database: v2014.07.17.01License: FreeMalware Protection: DisabledMalicious Website Protection: DisabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x86File System: NTFSUser: MalwarebytesScan Type: Threat ScanResult: CompletedObjects Scanned: 248983Time Elapsed: 3 min, 2 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 2PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\ProtectedSearch.exe, 2740, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e]PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\SystemSockets.exe, 3908, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e]Modules: 4PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\cinshlpr.dll, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\cinshlpr.dll, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\InstallHelper.dll, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\System.Data.SQLite.dll, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e], Registry Keys: 28PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\CLSID\{2ba6d84b-9aee-4261-b9e1-37b3716514db}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{8196140c-1800-47c5-97d3-85c30cce222a}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{A928E66C-F501-4E66-9953-855C712F93B2}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{FCA8936E-403A-4487-A966-70F80F1D5A6A}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\wtb.Band.1, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\wtb.Band, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{2BA6D84B-9AEE-4261-B9E1-37B3716514DB}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], PUP.Optional.SimplyTech.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{2BA6D84B-9AEE-4261-B9E1-37B3716514DB}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], PUP.Optional.SimplyTech.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{2BA6D84B-9AEE-4261-B9E1-37B3716514DB}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\CLSID\{3c15b3cc-e19e-4bb3-8d13-0b87d33afb88}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\wtb.NotificationSource.1, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\wtb.NotificationSource, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\CLSID\{4e25e940-f768-475f-b5c3-264c10c1dbc9}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\wtb.ToolbarInfo.1, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\wtb.ToolbarInfo, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\CLSID\{9bcdc129-0d7d-4dac-a6b0-42f1f8c64015}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\wtb.SourceSinkImpl.1, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\wtb.SourceSinkImpl, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\CLSID\{A928E66C-F501-4E66-9953-855C712F93B2}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\CLASSES\CLSID\{2BA6D84B-9AEE-4261-B9E1-37B3716514DB}\INPROCSERVER32, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], PUP.Optional.ZooToolBar.A, HKLM\SOFTWARE\CLASSES\APPID\ZooToolbar.DLL, Quarantined, [35148520c1ba0333f46f74bbd33137c9], PUP.Optional.ZooToolBar.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\ZooToolbar, Quarantined, [0b3e7e27512a320400656dc2c73dbe42], PUP.Optional.SimplyTech.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\SIMPLYTECH\Toolbar, Quarantined, [e960e3c2d0abed493ef8cd0d1fe309f7], PUP.Optional.ZooToolBar.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SIMPLYTECH\ZooToolbar, Quarantined, [05449015b0cb37ff34303af5a85c6e92], PUP.Optional.ZooTB.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{97a33a2d-cdf4-4e5f-b52a-73f9bdb0202c}_is1, Quarantined, [3712d5d07605c670efe16e5446bca25e], Registry Values: 2PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{2BA6D84B-9AEE-4261-B9E1-37B3716514DB}, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], PUP.Optional.AdvancedSystemProtector.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{2ba6d84b-9aee-4261-b9e1-37b3716514db}, Quarantined, [1f2a6c39116a78bed3cd5545be44dd23], Registry Data: 13PUP.Optional.ZooSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\ABOUTURLS|Tabs, http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F,'>http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F),Replaced,[96b3871e5328a98de54e5e5cb84c1fe1]PUP.Optional.ZooSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F,'>http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F),Replaced,[07422f76a0db68ce072a7149659fc040]PUP.Optional.ZooSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=,'>http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=),Replaced,[52f7970e7dfe1d19d6597e3c3acabf41]PUP.Optional.ZooSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=,'>http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=),Replaced,[9eabd1d4770493a388a1328823e137c9]PUP.Optional.ZooSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=,'>http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=),Replaced,[2425b2f36f0c37ff42e9a515966e8878]PUP.Optional.ZooSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=,'>http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=),Replaced,[f158eabbb7c41c1aab7c9c1e9d6708f8]PUP.Optional.ZooSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s),Replaced,[ca7fadf8a8d3bd7942e300ba8d77c63a]PUP.Optional.ZooSearch.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=,'>http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=),Replaced,[54f5e9bc2c4f999dd951f2c89f657789]PUP.Optional.ZooSearch.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F,'>http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F),Replaced,[2c1d5e476318a78fbb7718a2d82ce11f]PUP.Optional.ZooSearch.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=,'>http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=),Replaced,[84c5545185f652e432fe308ab351738d]PUP.Optional.ZooSearch.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=,'>http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=),Replaced,[95b42580cab1b3832c00f2c81ee639c7]PUP.Optional.ZooSearch.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=,'>http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=),Replaced,[f653079e55266ec87cac9624f410e51b]PUP.Optional.ZooSearch.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL, http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s, Good: (www.google.com), Bad: (http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q=%s),Replaced,[99b07d28fb807bbb31f5bcfe22e26f91]Folders: 11PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\IE, Quarantined, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\support@ZooToolbar.com, Quarantined, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\support@ZooToolbar.com\chrome, Quarantined, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\support@ZooToolbar.com\components, Quarantined, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\support@ZooToolbar.com\plugins, Quarantined, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\chrome, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\components, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\plugins, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], Files: 63PUP.Optional.SimplyTech.A, C:\Program Files\ZooToolbar\IE\ZooToolbar.dll, Quarantined, [5eeb099cc6b5f34329c4158b12ef51af], PUP.Optional.ZooToolBar.A, C:\Users\{username}\Desktop\offer0.exe, Quarantined, [c8816e377efd2b0b00ec1789dd24f50b], PUP.Optional.ZooSearch.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\searchplugins\Zoo Search.xml, Quarantined, [0b3eeeb75823a98d66fc1a1545bf768a], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\STInst.exe, Quarantined, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\cinshlpr.dll, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\InstallHelper.dll, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\Interop.IWshRuntimeLibrary.dll, Quarantined, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\Microsoft.Win32.TaskScheduler.dll, Quarantined, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\Microsoft.Win32.TaskScheduler.xml, Quarantined, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\ProtectedSearch.exe, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\ProtectedSearch.ico, Quarantined, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\setupicon.ico, Quarantined, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\stinst.dat, Quarantined, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\stinst.wls, Quarantined, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\stinst.xml, Quarantined, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\STInst32.dll, Quarantined, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\System.Data.SQLite.dll, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\SystemSockets.exe, Delete-on-Reboot, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\TaskSchedulerCreator.exe, Quarantined, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\TBUpdater.dll, Quarantined, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\TBUpdater.exe, Quarantined, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\ToolbarUninstall.exe, Quarantined, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\unins000.dat, Quarantined, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\unins000.exe, Quarantined, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\support@ZooToolbar.com\chrome.manifest, Quarantined, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\support@ZooToolbar.com\install.js, Quarantined, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\support@ZooToolbar.com\install.rdf, Quarantined, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\support@ZooToolbar.com\pop.htm, Quarantined, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\support@ZooToolbar.com\chrome\ZooToolbar_25496.jar, Quarantined, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\support@ZooToolbar.com\components\wtb_complete.js, Quarantined, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooTB.A, C:\Program Files\ZooToolbar\support@ZooToolbar.com\plugins\npwiddit.dll, Quarantined, [3712d5d07605c670efe16e5446bca25e], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\chrome.manifest, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\install.js, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\install.rdf, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\pop.htm, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\wtb_ff.bin, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\ZooToolbar_25496.sqlite, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\chrome\ZooToolbar_25496.jar, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\components\wtb_complete.js, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\1154284306.gif, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\1811652334.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\1856656659.gif, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\1X16_Trans.gif, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\482924561.jpg, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\568926401.jpg, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\contact.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\default_search_button.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\default_search_provider12.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\default_search_provider16.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\help.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\home.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\images.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\privacy.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\refresh.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\uninstall.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\images\video.png, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooToolBar.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\{62fd68e4-96ce-47c3-b909-22545ca64a38}\plugins\npwiddit.dll, Quarantined, [a9a0277ec7b467cf7c7cdfe9b25001ff], PUP.Optional.ZooSearch.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: (      "startup_urls": [ "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F" ],), Replaced,[3316c5e03e3dbc7a3622509a9371b947]PUP.Optional.ZooSearch.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: (   "homepage": "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F",), Replaced,[0a3ffbaa6b1005312633dc0efa0a1fe1]PUP.Optional.ZooSearch.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: (      "search_url": "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q={searchTerms}",), Replaced,[3b0ecbda5c1f2313fe5ccd1d24e0827e]PUP.Optional.ZooSearch.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("browser.startup.homepage", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"), Replaced,[5fea30757a01bf7760f509e18f75a35d]PUP.Optional.ZooSearch.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("browser.newtab.url", "http://isearch.zoo.com/ofaz2/search/home?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F"), Replaced,[c38625802358a3933b1bd4169d67738d]PUP.Optional.ZooSearch.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("keyword.URL", "http://isearch.zoo.com/ofaz2/search/web?sid=64843&tid=25496&bd=1406654042126&ver=6.6&guid=64843-25496-1406654042126-9326D7DA2BA42FE6AA37518ABDB4034F&fcoid=417&fcop=topnav&fpid=27&ql=&q="), Replaced,[1e2bddc8e794fb3b91c6e901020248b8]Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Link to post
Share on other sites

  • Staff

How to change the startpage and organize the search providers in Chrome

Click the button that opens the customize and control menus in Chrome.

ChromeSettings.png

Click "Settings" and the "Set pages" link in the "On Start-up" section.

Add a new page that you want to see first and delete the Zoo Search entry. (click the X at the end of the line)

ChromeSettings1.png

Then click OK and scroll down in the Settings menu to "Appearance" and "Search"

ChromeSettings2.png

Click the "Change" link behind "Show Home button" to alter the URL that button will produce.

Then click the "Manage Search Engines" button in the "Search" section.

Select a search engine and click the "Make Default" Button that will show up;

ChromeMD.png

Rightclick and delete the Zoo Search entry.(click the X at the end of the line)

ChromeSE.png

For some reason the delete does not always work, but make sure to delete al least the URL from that line.

Then click "Done" and close the "Settings" tab.

Link to post
Share on other sites

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.