Remove Whazit. Description and removal instructions

 
Title: Whazit

Type: Browser Hijackers
Severity scale:Whazit severity is 37  (37 / 100)
 
Whazit hijacks Internet Explorer by changing its default home, search and error pages to parasite controlling sites. It may download from the Internet and install certain adware parasites such as nCase without asking for user permission. Whazit can silently update itself. The threat can get into the system from some insecure Internet resources.


Whazit properties:
• Changes browser settings
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Whazit removal:

remover for Whazit

Whazit manual removal:

Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\wms
HKEY_CLASSES_ROOT\CLSID\{D5B72AED-E54A-11D6-B1B2-444553540000}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURL=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\CustomizeSearch=[site address]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\SearchAssistant=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchURL=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Search Bar=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Search Page=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\CustomizeSearch=[site address]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\SearchAssistant=[site address]
Unregister DLLs:
bho.dll, newones.dll, outones.dll, whattn.dll, whattt.dll

Delete files:
wanobsi.exe, bho.dll, newones.dll, outones.dll, whattn.dll, whattt.dll
Misc:
[site address] is an address of a web site on the whazit.com domain.

Whazit may install files with random names.

Whazit files can be found in the default system directory C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32.

Other programs to remove Whazit:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 19/03/04
Information updated: 03/09/05

Additional resources related to Whazit:

Attention: If you know or you have a website or page about Whazit removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Whazit parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:


Comments from visitors:


1. by Aligator. 2004-03-01 10:13:48
Related to N-Case from 180Solutions.


Related news:
Similar parasites:
Related articles: