Whazit manual removal:
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\wms
HKEY_CLASSES_ROOT\CLSID\{D5B72AED-E54A-11D6-B1B2-444553540000}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURL=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\CustomizeSearch=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\SearchAssistant=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchURL=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Search Bar=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Search Page=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\CustomizeSearch=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\SearchAssistant=[site address]
Unregister DLLs:bho.dll, newones.dll, outones.dll, whattn.dll, whattt.dll
Delete files:wanobsi.exe, bho.dll, newones.dll, outones.dll, whattn.dll, whattt.dll
Misc:[site address] is an address of a web site on the whazit.com domain.
Whazit may install files with random names.
Whazit files can be found in the default system directory C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32.
Post Comment: