[Zona]

Followed that last bit of advice (though I don't have Combofix).

I've donated you a small sum that will at least buy you a few pints. Wish I could afford to give more because I feel you earn it. Thank you very much for the help!

Stephen

[Zona]

Results of screen317's Security Check version 0.99.55

Windows Vista Service Pack 2 x64 (UAC is disabled!)

Internet Explorer 9

``````````````Antivirus/Firewall Check:``````````````

Windows Firewall Disabled!

Norton Internet Security

WMI entry may not exist for antivirus; attempting automatic update.

`````````Anti-malware/Other Utilities Check:`````````

JavaFX 2.1.1

Java 6 Update 31

Java 7 Update 6

Java 7 Update 9

Adobe Reader 9 Adobe Reader out of Date!

Google Chrome 21.0.1180.83

Google Chrome 21.0.1180.89

Google Chrome 22.0.1229.79

Google Chrome 22.0.1229.92

Google Chrome 22.0.1229.94

Google Chrome 23.0.1271.64

````````Process Check: objlist.exe by Laurent````````

Norton ccSvcHst.exe

`````````````````System Health check`````````````````

Total Fragmentation on Drive C: 7 % Defragment your hard drive soon! (Do NOT defrag if SSD!)

````````````````````End of Log``````````````````````

[Zona]

I might actually say it's fixed; all Zona files now sit inside the OTL\Moved Files folder. Is it safe to delete those files?

[Zona]

Wow, that definitely did something. Check the log...

11242012_155441.log

[Zona]

Hi MrCharlie

Please find attached the log files from the OTL scan.

You might notice a program in the OTL.txt called 'Rambler'. This happens to be the Russian site that hijacked my homepage when Zona installed itself. I've managed to get my homepage back to normal, but it would seem by this OTL scan that it's still sitting in my computer somewhere.

OTL.Txt

Extras.Txt

[Zona]

MrCharlie, I really appreciate your time and help, whether you can find a solution or not. But I'm going to have to pick this up again tomorrow as it's 01:00am here in the UK and I have work in the morning.

Hope you'll be able to continue assisting with this horrible situation. Thanks.

Stephen.

[Zona]

I think it removed three files...

JRT.txt

[Zona]

Ok, here's the file [s1] after the restart...

AdwCleanerS1.txt

[Zona]

Ok, done that...

AdwCleanerR1.txt

[Zona]

Thank you very much for that MrCharlie,

I've gone ahead and followed your instructions and attached the three txt files...

attach.txt

dds.txt

RKreport1_S_11242012_02d0008.txt

[Zona]

Hi, I recently had the displeasure of inadvertently installing a file sharing program going by the name of Zona.

It literally began installing at the same time I was downloading another file. When I realised what was happening I tried to stop it, but it was too late. Now Zona is parked all over my computer without a way to uninstall it. Now, it seems to have taken over my Google Chrome browser, directing me to some Russian home page.

I feel up to this point I've tried everything I can think of to remove Zona, but I'm not even close. Norton can't detect it, Malwarebytes can't, Adaware, and even it would seem Hijackthis can't detect it.

I'm not skilled by any means at coding or virus detection, so I hope someone here can perhaps dig deeper into this problem.

hijackthis.log