MegaSack DRAW - This year's winner is user - rgwb
We will be in touch
Wanted to listen to the ashes last night so clicked on the BBC 5 live listen now thingy.....have ended up with some virus thing call 'nation zoom' that hijacks the browser etc
I have tried to get rid of it, also used malwarebytes and avg to run scans and they say all fine.
first time i open the internet after turning on the computer it still goes to 'nationzoom' how do i get rid of it?
is that dotfab site ok to download from?
No idea whether dotfab is safe, but it should be safe to download Hijackthis from http://sourceforge.net/projects/hjt/ and then post the findings in somewhere like http://forums.techguy.org/54-virus-other-malware-removal/
It looks like you should be able to remove it without downloading any further software, so I'd avoid doing that if possible.
Follow the guide on the dotfab page, just ignore the bits that involve using their recommended software tools.
dan thats kind of what I did last night but I still get the zoom nation browser the first time I open the browser when switching the computer on.If I close it down it goes back to google the next time i open it (until I switch off the computer) I used malwarebytes and avg instead of the one on the dotfab site.
I will add I'm a bit of a computer mong so if you have any advice aim it at a 2 yr old and I might understand
Which browser are you using?
chrome
but i still have a short cut for IE oh I'm on windows 8 if that has any bearing
Try this.Click on three lines in top left corner of window,then click on settings,then look at on startup,if one of the specific pages is zoom nation,delete it by clicking on cross at end of url.Then go to manage search engines,and delete any thing that mentions zoom nation,then close Chrome,reboot computer and start Chrome again.HTh
Ian
Actually the instructions on this page are clearer than my explanation,you should not need to use any of the software advertised on the page,just follow the instructions.
Ian
Edit actually it's been covered, no need for me to chip in 🙂
I'm not having much luck did the instructions on dotfab but using the manual uninstall (anything I recognised or new files etc) been through the get rid of anything in the chrome/IE settings as mentioed above tc checked with free issues of malwarebyte and avg all lokks ok. turn computer off back on open browser and there it is.....it's hiding somewhere. So what next go back through the dotfab instructions and try again?
http://www.2-spyware.com/remove-nation-zoom.html
Sorry,didn't realise I'd missed the url off my last post.
I have been through the instructions again...only difference was I use the free malwarebytes instead of the one mentioned in the link by dingo which is a pro version and cost pennies.
still not working...still have the same problem
ah something interesting....opening browser from desk top goes to google, opening browser from the windows 8 tiles goes to nationzoom (even though it is set to open the browser from desk top and not an ap) so what is it I'm missing ... does anyone know?
Sorry don't know about win8 😥
https://support.google.com/chrome/answer/2762879?hl=e read this and read step 3 on here http://malwaretips.com/blogs/nationzoom-com-removal/ ,does this help?
Proxy settings are set to 127.0.0.1 in one of the browsers I bet. This points all your web traffic to the dodgy proxy server they've installed on your pc.
so what do I do about that mr grips in language a buffoon can understand.
just about giving in and trying to find someone who knows what they are doing to fix it for me I admit defeat
I will find some links when I am back on my computer.
Some networks are set up so that computers can't access the internet directly, they can only send requests for webpages to a proxy server, which then goes to the internet to get the page. This might be on an office network, for some security reason or other.
Some malware installs its own proxy server on your own machine and sets your browser up to point to that proxy server. That baddie proxy server then ignores all your requests for webpages and keeps giving you its own baddie page instead. Or it'll give you the pages you ask for but read all your personal details and passwords and whatnot without you knowing about it.
Every computer on the any given network, of which the internet is just one, has an IP address (in principle anyway) which takes the form of four numbers separated by dots. However some of these numbers are reserverd; 127.0.0.1 always refers to your own computer.
So if you go to the proxy settings part of your browser configuration it should be blank or set to 'no proxy' if it's your personal machine and not a work one.
However, I just read the link in the 2nd post of the thread and this particular malware does not do this 🙂 I'll leave it up though in case it helps anyone else.
If you're still having problems post 4 in this thread might help: http://www.bleepingcomputer.com/forums/t/516037/need-help-removing-httpwwwnationzoomcomtypesc-ts1385/?hl=%2Bnationzoom#entry3227465
These won't help remove it but *may* be of use in future:
Unchecky: http://www.softpedia.com/get/System/OS-Enhancements/Unchecky.shtml
I think I might have got rid of it....don't want to count my chickens yet but it looked ok last night. I will find out next time I use it. The problem I found was (in layman's terms) it was hiding in the shortcut from the tile page even after doing all the other instructions to get rid of it. So I just deleted the browser shortcuts' ran malware again which found a 'pup' deleted that, then put some new shortcuts on. It was okay last night so I will see how things go.
Oh and thanks to all who replied and helped much appreciated