ZoomEx virus is a corrupt plugin that will hijack any browser like Firefox, Chrome or Internet Explorer. Upon execution, it attaches itself to browser as a toolbar extension and then it secretly changes the default search and home page settings. ZoomEx virus might get inside a computer packed with freeware programs or user might have downloaded it from http://ZoomEx.net website. The software is distributed as an add-on for FaceBook users to enlarge any picture on FB. The malware is quite similar to FBPhotoZoom virus. Anyhow, once a PC has been hijacked by Zoom.Exe virus, it will keep displaying unwanted advertisements as pop-ups or ads inside all the web pages. Moreover, this plugin makes the browser run slow as it performs some under ground activities. i.e It steals personal information of the user on infected PC such as logins, credit cards and other details. Its recommended to uninstall ZoomEx plugin malware as soon as possible to keep the hold on your browser security and privacy.
What are symptoms and possible risks of adware like ZoomEx virus:
Computer infected with Plugin ZoomEx virus?
Need not to worry if your PC is infected. An efficient anti-malware program can fix your PC. If you want to remove it manually, please keep in your mind that manual removal is a complicated thing. Moreover this method dose not ensure 100% removal of malware. The best, easy and simple way to get rid of this virus is to install a proper anti-malware tool.
Ordinary uninstall method to Block Pop-ups, Remove Plugin & add-ons:
Here are instructions on how to manually uninstall an unwanted toolbar, add-on, plugin or popup malware from your browser. The ordinary process dose not get you rid of malware programs but it might be helpful in fixing a toolbar application which is annoying but not a virus.
Step 1:
Go to “Control Panel”
Open ADD/REMOVE PROGRAMS or PROGRAMS AND FEATURES
In the list of installed program, find the software you are trying to get rid of, Once found, click UNINSTALL. (Some malicious browser applications may appear as UNKNOWN in this list)
Step 2:
Internet Explorer
Go to INTERNET OPTIONS (Internet Explorer)
click CONNECTIONS tab
Click LAN SETTINGS and make sure no proxy is being used. (All the 3 options should be unchecked as default)
Now click on TOOLS and then click “MANAGE ADD-ONS”
In this window, disable any suspicious TOOLBAR & EXTENSION and also disable any SEARCH PROVIDER you do not trust like ZoomEx virus
Now again click on TOOLS and click on POP-UP BLOCKER, then click TURN ON POP-UP BLOCKER. and then go to POP-UP BLOCKER SETTINGS. There you may add any website you wish to block popups from.
Mozilla Firefox:
Click on the TOOLS and then ADD-ONS. From this list, disable/uninstall any suspicious PLUGIN or EXTENSION.
Now click on the drop down arrow just beside the SEARCH BOX which is placed top right corner of Firefox. Then select MANAGE SEARCH ENGINES. And then disable/remove any bad application like ZoomEx virus if listed.
Google Chrome:
Click on the drop down arrow just beside the SEARCH BOX which is placed top right corner of Firefox. Then select MANAGE SEARCH ENGINES. And then disable/remove any bad application like ZoomEx virus if listed.
Spyware ZoomEx malware plugin. Manual removal instruction:
Please make sure to create backup before getting started.
Stop malicious processes:
Open windows task manager, go to “Processes” tab and stop any ZoomEx virus process which is running. It can be stopped by Right click on it and select “End process”.
Remove ZoomEx virus corrupt registry settings:
Open Windows Registry editor by typing REGEDIT into RUN. Find and delete any keys and values related with this malware. (Please use the name of Malware to search for keys related to it)
Below is a list of possibly infected registry keys:
HKEY_CLASSES_ROOT\urlsearchhook.toolbarurlsearchhook
HKEY_LOCAL_MACHINE\software\classes\urlsearchhook.toolbarurlsearchhook
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions,
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “CertificateRevocation” = ’0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnonBadCertRecving” = ’0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop “NoChangingWallPaper” = ’1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations “LowRiskFileTypes” = ‘/{hq:/s`s:/ogn:/uyu:/dyd:/c`u:/bnl:/ble:/sdf:/lrh:/iul:/iulm:/fhg:/clq:/kqf:/`wh:/lqf:/lqdf:/lnw:/lq2:/l2t:/v`w:/rbs:’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments “SaveZoneInformation” = ’1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “DisableTaskMgr” = ’1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system “DisableTaskMgr” = ’1
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download “CheckExeSignatures” = ‘no’
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main “Use FormSuggest” = ‘yes’
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “Hidden” = ’0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced “ShowSuperHidden” = 0
Delete ZoomEx virus infected files & folders
Go to My Computer, search for malware files. Delete all the files and folders found. (Please use the name of Malware to search for keys related to it).
Possible locations:
%UserProfile%\
%UserProfile%\Application Data\
%UserProfile%\Start Menu\Programs\
ZoomEx Plugin virus removal tools
To remove this virus Automatically, We suggest following softwares:
Malware Bytes Anti-Malwar
Related Articles:
Sendori.exe virus
Mywebface virus
Coupon-Companion virus
LocalPages malware
ShopperReports virus
