None of this is ZA related, however they are adware leftovers.

  1. Open notepad and copy/paste the text present inside the code box below.
    To do this highlight the contents of the box and right click on it. Paste this into the open notepad.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

START  
SearchScopes: HKCU - {F7C7A225-4F75-4291-9DA0-09ACC5116F97} URL = http://www.mysearchresults.com/search?c=4005&t=14&q={searchTerms}
Toolbar: HKCU - No Name - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} -  No File
Winsock: Catalog5 01 %SystemRoot%\System32\mswsock.dll [232448] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5-x64 01 %SystemRoot%\System32\mswsock.dll [326144] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
FF Extension: fhdp - C:\Users\Koester\AppData\Roaming\Mozilla\Firefox\Profiles\0uwboc2e.default\Extensions\fhdp@fhdp.tv.xpi
C:\Users\Koester\AppData\Roaming\Mozilla\Firefox\Profiles\0uwboc2e.default\Extensions\fhdp@fhdp.tv.xpi
C:\Users\Koester\AppData\Roaming\Mozilla\Firefox\Profiles\0uwboc2e.default\Extensions\{09408840-3f84-11dd-ae16-0800200c9a66}.xpi
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (DealPly  Shopping) - C:\Users\Koester\AppData\Local\Google\Chrome\User Data\Default\Extensions\mphpbdjcljebbcnfopfngmfdackbbdgf\3.5.0.0_0
C:\Users\Koester\AppData\Local\Google\Chrome\User Data\Default\Extensions\mphpbdjcljebbcnfopfngmfdackbbdgf
CHR HKLM-x32\...\Chrome\Extension: [bkomkajifikmkfnjgphkjcfeepbnojok] - C:\Program Files (x86)\PriceGong\2.6.11\pricegong.crx
C:\Program Files (x86)\PriceGong
CHR HKLM-x32\...\Chrome\Extension: [dednnpigldgdbpgcdpfppmlcnnbjciel] - C:\Users\Koester\AppData\Roaming\Media Finder\Extensions\gencrawler_gc.crx
C:\Users\Koester\AppData\Roaming\Media Finder
CHR HKLM-x32\...\Chrome\Extension: [kkfggacklibaabdomphfdpcodjgihgon] - C:\Program Files (x86)\FirstRowSportApp.com\stv10.crx
C:\Program Files (x86)\FirstRowSportApp.com
CHR HKLM-x32\...\Chrome\Extension: [lpmkgpnbiojfaoklbkpfneikocaobfai] - C:\Users\Koester\AppData\Roaming\Media Finder\Extensions\mf_plugin_gc.crx
C:\Users\Koester\AppData\Roaming\Media Finder
C:\Users\Koester\AppData\Roaming\MediaMonkey
Task: {02B311CD-4C2E-4C3B-A920-FF147A710403} - \BrowserProtect No Task File
Task: {46B9C53F-994C-476A-BAD0-6A2BEF6A4F22} - System32\Tasks\{FDB341E9-C20C-4102-AF06-CBE5CDF9F86D} => C:\Users\Koester\Desktop\Syndicate\main.exe No File
Task: {66EC5A26-6076-41BF-9A99-77328AA20FF8} - \Dealply No Task File
CMD: netsh winsock reset
CMD: ipconfig /flushdns
Hosts:
END
  1. Save notepad as fixlist.txt
    NOTE. It’s important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

  2. Run FRST/FRST64 and press the Fix button just once and wait.
    If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.
    The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.

Note: If the tool warned you about the outdated version please download and run the updated version.