Zango need some help getting rid of it

Status
Not open for further replies.

sticks57

Posts: 13   +0
Ok, I am trying to clean up a friends pc and got to a small sticking point. I ran avg, spybot search and destroy, adaware2007 ccleaner and hijackthis. I found a trojan and removed it with avg. Found alot with spybot and adaware and removed most. Ran ccleaner and fixed issues. All in safe mode several times. Now all scans come up clean except adaware still finds zango but when I click on remove it just hangs there for a very long time till I end process in task manager. I cannot find anything related to zango in hijackthis or regedit or any file or folder with show hidden folder option on. Maybe I am missing something so I came here to ask you for help. Thanks all
 
1) Click on Start, Settings, Control Panel

2) Double click on Add/Remove Programs

3) Find "Zango" in the list of installed programs and click on Change/Remove to uninstall it. There may also be a program called Media Gateway, remove it as well.

4) Click both Zango toolbar and Search Assistant, before clicking Next to complete the uninstall.

5)Run Hijackthis fix these entries (if there)
O2 - BHO: Zango Search Assistant Helper /fleok=1D8A83A5C5E0117D9CA975760EA83FA5EF80752B94E2DE765D754E2937C3 - {56F1D444-11BF-4879-A12B-79CF0177F038} - c:\program files\zango\zangohook.dll

O2 - BHO: Zango Toolbar - {5CBE2611-C31B-401F-89BC-4CBB25E853D7} - C:\Program Files\ZangoToolbar\Bin\4.8.3.0\ZbHostIE.dll

O3 - Toolbar: Zango Toolbar - {5CBE2611-C31B-401F-89BC-4CBB25E853D7} - C:\Program Files\ZangoToolbar\Bin\4.8.3.0\ZbHostIE.dll

O4 - HKLM\..\Run: [zango] "c:\program files\zango\zango.exe"


6)Reboot into safemode -> Navigate to and delete
C:\program files\Zango<---This Folder only
C:\program files\Zango Toolbar<---This folder only

Restart scan again and it should be gone. But if not try this uninstaller http://www.zango.com/Uninstall/ZUninstaller.exe

If you want to post a Hijackthis log afterwards, we can check it for other infections.
 
Status
Not open for further replies.
Back