zSearch Spyware Profile

zSearch is a spyware program disguised as a toolbar add-on for your browser.  It was first discovered on October 21 of 2004.  It is created by Total Velocity, Inc, and distributed from http://www.zsearchtoolbar.com.

zSearch is installed manually, or as part of a bundle. It has been known to reset your home page, redirect searches, and deliver pop-up ads.  It is also set to start when you start up Internet Explorer, so it can be difficult to remove.  It also monitors your browsing activity, logs data about your computer, and sends all this data to a remote server, supposedly to deliver targeted advertising.

The activity of zSearch can seriously slow down your computer’s performance.  It can also potentially cause your Internet browser to freeze or crash.  Any supposed benefits it offers are not worth compromising the functionality of your computer.

If you are infected with this program, you should remove it immediately with ZookaWare PC Cleaner.  zSearch has an uninstall program at their website, but there’s no guarantee that it will remove the spyware components.  While there are other means to remove zSearch, ZookaWare PC Cleaner has proven to consistently and completely remove this threat from your computer.  ZookaWare PC Cleaner guarantees complete removal of this threat.

Also Known As:
Spyware.zSearch (Symantec)
Adware-zSearch (McAfee)
AdWare.ToolBar.ZSearch.a (Kaspersky)
Adware.zSearch (Symantec)
Adware/zSearch (Panda)
ZSearch Toolbar (CA eTrust PestPatrol)
TotalVelocity zSearch
Adware.Win32.zSearch Toolbar

Spyware Type:
Browser Hijacker
Data Miner

Associated Files:
%ProgramFiles%\zSearch\unins000.dat (uninstallation data)
%ProgramFiles%\zSearch\unins000.exe (uninstaller program)
%ProgramFiles%\zSearch\zSearch.dll (this file is detected as Spyware.zSearch)
%ProgramFiles%\zSearch\Zstb.exe (this file is detected as Spyware.zSearch)
%ProgramFiles%\zSearch\zUninstaller.exe (uninstaller program)
%UserProfile%\Local Settings\Temporary Internet Files\Logger.log (logging file)
%UserProfile%\Local Settings\Temporary Internet Files\ZSearch.log (logging file)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{5886A6DC-AAF4-45E9-979A-8E6DEE30E7}

Download Free Scan
Cyberlab runs on Windows Vista, 7, 8 and 10. It has no ads, popups or bundled software and fully uninstalls by clicking Start > All Programs > select Cyberlab and click Uninstall.

2 Responses

  1. sonja douglas says:

    My computer is sick! I have warnings about adware, spyware, and tracking cookies. I keep getting an ad for free removal from malware alarm. Internet Explorer is working like hell..and I guess someone is spying me. SpyZooka found “zSearch”. I don’t know how bad it is and if it is necessary to remove it…

  2. Bob Stoneville says:

    I have a Windows XP Student/Teacher system. A few days ago I was downloading an Mp3 file through Zshare.net. When it said that it had finished downloading, I nearly immediately started hearing mouse clicking sounds, when I wasn’t clicking anything, and also I could hear but not see Ads saying things like ‘You have just won a new Xbox’, even when I didn’t have an Internet browser open. It also made my Internet browsers act up, run slower, and freeze, no matter what browser I used; Google Chrome, Internet Explorer, or Firefox. I used Spybot-Search and Destroy and I also have AVG Anti Virus 8.5 Free on my computer.

    AVG Anti Virus 8.5 Free found nothing when it ran on its scheduled scans. My results were different with Spybot-Search and Destroy: I first ran a scan of my files and they found many items. It deleted most, but couldn’t delete 14 of them because they said they were in memory use. They prompted me to restart my computer so they could then delete them. I did so, and it deleted those also. I also clicked ‘Immunize’ after I carried this out on Spybot-Search and Destroy. Unfortunately, after all this, I still heard the clicking sound sporadically from time to time. I then downloaded the SpyZooka remover and it looks good for now..

Leave a Reply

Your email address will not be published.