Description Screenshot is a faux search site that redirects to real search engines when any traffic attempts to make search queries. While is harmless enough as a website, also has been associated with recent browser hijacking campaign sprees, which dominate your browser to force it to specific destinations. Malware researchers see no justification for considering a risky site, but do suggest deleting hijackers, regardless of what format they take, with reliable anti-malware products.

A Zoom-In on Everything that’s Wrong with is one Web domain that isn’t likely to be a security issue when you visit, but still may be problematic due to its association with Potentially Unwanted Programs and low-level PC threats. Since is a search engine that outsources the actual searches to reputable sites like Yahoo, there’s very little reason to consider threatening (although malware experts wouldn’t recommend visiting without appropriate browser protection). Therefore, malware researchers became less interested in due to its independent attributes than due to its ties to external factors, such as browser hijackers.

This homepage-hijacking campaign was first observed early in December of 2013, with hijackers being distributed by a variety of fraudulent methods:
  • Fake software patches and updates for major brands of products, such as Adobe’s Flash.
  • Installers for unaffiliated programs, especially media-oriented ones like movie players.

The resulting browser hijacker usually wasn’t installed with any visible components, such as a toolbar.

» Learn more about SpyHunter's Spyware Detection Tool
and steps to uninstall SpyHunter.

However, victims quickly noticed the infiltration of their PC, with their most-used Web browsers being forced to use for their homepages. Currently, malware experts only have confirmed Firefox and Internet Explorer being affected.

Making Your Browser’s Nation Free of

Browser hijackers are most feared for their ability to redirect victims to unsafe sites, but malware experts consider them minor security risks even in instances like this one, where a ‘safe’ but dishonest website is being promoted. hijackers can’t be removed like a normal browser add-on, nor can their homepage changes be reverted through your browser’s standard settings. However, the average anti-malware program should find little difficulty in deleting hijackers, along with reversing any unwanted browser changes that they made.

The distribution methods seen in use by homepage hijackers also have been seen distributing high-level PC threats throughout the Internet’s recent history. Malware experts would consider it wise to use thorough anti-malware solutions that can isolate all possible PC threats on your PC, instead of just a single browser hijacker. Backdoor Trojans and other forms of threats often use attacks that aren’t nearly as obvious as a homepage redirect but much more deadly than one.

Updating any security software used in this process also is encouraged, due to the recently-identified nature of’s homepage-hijacking campaign.


PUP.Optional.WpManager.A [Malwarebytes] Automatic Detection Tool (Recommended)

Is your PC infected with To safely & quickly detect we highly recommend you run the malware scanner listed below.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

Registry Modifications

Tutorial: To edit and delete registry entries manually, read the tutorial on how to remove malicious registry entries.

Tip & Warning: Editing and removing the wrong registry keys can severely damage your PC, so remember to backup your Windows Registry! To optimize your Windows Registry and speed up your PC, download RegHunter's registry cleaner.
  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Internet Explorer\DOMStorage\nationzoom.comSoftware\Microsoft\Internet Explorer\DOMStorage\nationzoom.comSOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\nationzoom Browser newtab extensionSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\nationzoom Browser newtab extensionSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\nationzoom Browser ProtecterHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}nationzoom Browser Protecter
Posted: December 4, 2013 | By
Rate this article:
1 Star2 Stars3 Stars4 Stars5 Stars (5 votes, average: 3.60 out of 5)
Loading ... Loading ...
Threat Metric
Threat Level: 5/10
Detection Count: 659,807


Leave a Reply

What is 12 + 5 ?
Please leave these two fields as-is:
IMPORTANT! To be able to proceed, you need to solve the following simple math (so we know that you are a human) :-)