Kleinkramer
Inventaris
- Lid geworden
- 8 sep 2000
- Berichten
- 18.021
Graag gedaan. 
Ik word steeds geredirected naar www.whazit.com
- Onderwerp starter SpeedyOnline
- Startdatum
- Status
zo verwidjer je whazit
Om whazit te verwijderen kost wel wat moeite. Ik heb het onderstaande gedaan en dat was niet genoeg. Ik heb daarnaast de registry doorzocht op het woord “whazit”en deze allemaal verwijdert behalve waar ik het tegen kwam bij de instellingen als startpage. Daar heb ik de sleutel verandert in de gewenste startpagina (bijv http\\www.nu.nl). Daarna was ik van het probleem verlost.
To remove Whazit took me a lot of work. I followed the beneath instructions and it was not sufficient. I search the registry for the keyword whazit and removed it all from the registry unless where it was a setting for the startpage. In this occasion I changed the key into the desired startpage. This solved the problem
Dirk den Boer
The uninstaller from whazit self doesn’t work. I suggest to change its name into wha****.
They get paid 0.14 cent per computer installation!!
---------------------------------------------
Removal
Download HijackThis (FREEWARE) and scan.
Tick the boxes next to the following entries. Don't worry if you don't see them both. There are several versions of this hijacker.
O4 - HKLM\..\Run: [WANOBSI] C:\WINDOWS\WANOBSI.exe
O4 - HKLM\..\Run: [msbb] C:\WINDOWS\MSBB.EXE
In your results, look for a particular O2 BHO and tick it for "fixing". The HijackThis listing will be similar to one of these examples (the CLSID numbers will be the same):
O2 - BHO: (no name) - {D5B72AED-E54A-11D6-B1B2-444553540000} - C:\WINDOWS\QOGJUOSK.dll
O2 - BHO: (no name) - {D5B72AED-E54A-11D6-B1B2-444553540000} - C:\WINDOWS\bho.dll
There may also be a toolbar listed in HijackThis similar to the following example. Tick the entry for this as well.
O3 - Toolbar: Whazit Toolbar - {C9176930-9C9F-4cba-9723-0F58C3E7CED6} - C:\WINDOWS\RGJWOYFH.dll
You may also have any of the following entries listed in HijackThis. Tick the box next to any entry that includes "whazit.com".
R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL=http://www.whazit.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar=http://www.whazit.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page=http://www.whazit.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant=http://www.whazit.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch=http://www.whazit.com
R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL=http://www.whazit.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page=http://www.whazit.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar=http://www.whazit.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page=http://www.whazit.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch=www.whazit.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant=http://www.whazit.com
There might be other entries so look very carrefully.
Once all of the above has been selected by "ticking" the box to their left, click the "Fix Checked" button.
Open the registry editor (click 'Start', choose 'Run' and enter 'regedit') and delete these registry keys (Note: If you are not comfortable editing your registry, you can safely skip this step)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\nCASE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\msbb
HKEY_CURRENT_USER\Software\180solutions
HKEY_LOCAL_MACHINE\SOFTWARE\wms
Search the registry for other entries using the keyword “whazit”
Restart the computer and delete the following files:
c:\WINDOWS\fiz1
c:\WINDOWS\kyf.dat
c:\WINDOWS\msbb.exe
c:\WINDOWS\ncmyb.dll
c:\WINDOWS\WANOBSI.exe
c:\WINDOWS\cards.ico
Desktop\Riviera Gold Casino!.url
Also delete the entire 'c:\WINDOWS\FLEOK' folder and all files within.
Check C:\windows for other files (use search: whazit)
Most of these files are hidden, so you will need to have Windows set to show hidden files. Follow the directions at windows-help.net if you need instructions on how to do that. These instructions work for all versions of Windows from 98 upwards.
Om whazit te verwijderen kost wel wat moeite. Ik heb het onderstaande gedaan en dat was niet genoeg. Ik heb daarnaast de registry doorzocht op het woord “whazit”en deze allemaal verwijdert behalve waar ik het tegen kwam bij de instellingen als startpage. Daar heb ik de sleutel verandert in de gewenste startpagina (bijv http\\www.nu.nl). Daarna was ik van het probleem verlost.
To remove Whazit took me a lot of work. I followed the beneath instructions and it was not sufficient. I search the registry for the keyword whazit and removed it all from the registry unless where it was a setting for the startpage. In this occasion I changed the key into the desired startpage. This solved the problem
Dirk den Boer
The uninstaller from whazit self doesn’t work. I suggest to change its name into wha****.
They get paid 0.14 cent per computer installation!!
---------------------------------------------
Removal
Download HijackThis (FREEWARE) and scan.
Tick the boxes next to the following entries. Don't worry if you don't see them both. There are several versions of this hijacker.
O4 - HKLM\..\Run: [WANOBSI] C:\WINDOWS\WANOBSI.exe
O4 - HKLM\..\Run: [msbb] C:\WINDOWS\MSBB.EXE
In your results, look for a particular O2 BHO and tick it for "fixing". The HijackThis listing will be similar to one of these examples (the CLSID numbers will be the same):
O2 - BHO: (no name) - {D5B72AED-E54A-11D6-B1B2-444553540000} - C:\WINDOWS\QOGJUOSK.dll
O2 - BHO: (no name) - {D5B72AED-E54A-11D6-B1B2-444553540000} - C:\WINDOWS\bho.dll
There may also be a toolbar listed in HijackThis similar to the following example. Tick the entry for this as well.
O3 - Toolbar: Whazit Toolbar - {C9176930-9C9F-4cba-9723-0F58C3E7CED6} - C:\WINDOWS\RGJWOYFH.dll
You may also have any of the following entries listed in HijackThis. Tick the box next to any entry that includes "whazit.com".
R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL=http://www.whazit.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar=http://www.whazit.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page=http://www.whazit.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant=http://www.whazit.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch=http://www.whazit.com
R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL=http://www.whazit.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page=http://www.whazit.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar=http://www.whazit.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page=http://www.whazit.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch=www.whazit.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant=http://www.whazit.com
There might be other entries so look very carrefully.
Once all of the above has been selected by "ticking" the box to their left, click the "Fix Checked" button.
Open the registry editor (click 'Start', choose 'Run' and enter 'regedit') and delete these registry keys (Note: If you are not comfortable editing your registry, you can safely skip this step)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\nCASE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\msbb
HKEY_CURRENT_USER\Software\180solutions
HKEY_LOCAL_MACHINE\SOFTWARE\wms
Search the registry for other entries using the keyword “whazit”
Restart the computer and delete the following files:
c:\WINDOWS\fiz1
c:\WINDOWS\kyf.dat
c:\WINDOWS\msbb.exe
c:\WINDOWS\ncmyb.dll
c:\WINDOWS\WANOBSI.exe
c:\WINDOWS\cards.ico
Desktop\Riviera Gold Casino!.url
Also delete the entire 'c:\WINDOWS\FLEOK' folder and all files within.
Check C:\windows for other files (use search: whazit)
Most of these files are hidden, so you will need to have Windows set to show hidden files. Follow the directions at windows-help.net if you need instructions on how to do that. These instructions work for all versions of Windows from 98 upwards.
Kleinkramer
Inventaris
- Lid geworden
- 8 sep 2000
- Berichten
- 18.021
Dat spywareinfo.com artikel wat je citeert is maar gedeeltelijk juist, daar Whazit ook n-Case installeert, en daar krijg je dan weer allemaal bestanden met willekeurige namen van.
Dus er bijft altijd wel wat over, vrees ik...
Dus er bijft altijd wel wat over, vrees ik...
SpeedyOnline
Gebruiker
- Lid geworden
- 1 jun 2003
- Berichten
- 27
Ik vroeg me af, heeft iemand een idee waarom zulke dingen in *********** op iemands pc komt !?!
Bennie
Giga Honourable Senior Member †
- Lid geworden
- 10 okt 2000
- Berichten
- 17.585
- Status
