Whazit manual removal:
Delete registry values:HKEY_LOCAL_MACHINE\SOFTWARE\wms
HKEY_CLASSES_ROOT\CLSID\{D5B72AED-E54A-11D6-B1B2-444553540000}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURL=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\CustomizeSearch=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\SearchAssistant=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchURL=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Search Bar=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Search Page=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\CustomizeSearch=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\SearchAssistant=[site address]
Unregister DLLs:bho.dll, newones.dll, outones.dll, whattn.dll, whattt.dll
Delete files:wanobsi.exe, bho.dll, newones.dll, outones.dll, whattn.dll, whattt.dll
Misc:[site address] is an address of a web site on the whazit.com domain.
Whazit may install files with random names.
Whazit files can be found in the default system directory C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32.
Post Comment:
Attention: Use this form only if you have additional information about Whazit parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.
Comments from visitors:
1. by Aligator. 2004-03-01 10:13:48