Home>Tips & Articles>Remove Adware & Spyware>

Remove Whazit Adware

---

About Whazit

Whazit is IE hijacker program implemented as an Internet Explorer toolbar. It resets Internet Explorer home, search and error page to point them at its controlling server whazit.com.

Some versions of Whazit also install the nCase adware.

Remove this spyware using Spyware Doctor

How to Remove Whazit?

In the Whazit/Whattt variant, you can click Start > Setting > Control Panel > Add/Remove Programs and select the entry 'whazit tools' to remove it.

Other variants need to be manually remove. Follow these steps to do so:

bho variant

1. Open a DOS command prompt window (from Start->Programs->Accessories), and enter the following commands:
   cd "%WinDir%\System"
   regsvr32 /u "..\bho.dll"
   
2. Restart the computer.
3. Delete the file bho.dll from the Windows folder.

Rnd variant

1. First, you need to find out what the name of the file is. Open the registry editor(Start > Run > regedit) and find the key HKEY_CLASSES_ROOT\CLSID\{D5B72AED-E54A-11D6-B1B2-444553540000}. Click the 'InProcServer32' subkey and the '(Default)' value on the right should tell you the filename.
   
2. Open a DOS command prompt window (from Start->Programs->Accessories), and enter the following commands, replacing the XXXXXXXX with the relevant letters:
   
   cd "%WinDir%\System"
   regsvr32 /u "..\XXXXXXXX.DLL"
   
3. Restart the windows.
4. Delete this file.

Whattt variant

1. Open a DOS command prompt window (from Start->Programs->Accessories), and enter the following commands:
   
   cd "%WinDir%\System"
   regsvr32 /u "..\whattt.dll"
   regsvr32 /u "..\outones.dll"
   regsvr32 /u "..\newones.dll"
   (if one of the latter two commands generate an errorjust ignore it.)
   
2. Restart the machine.
3. Delete the whattt.dll and outones.dll/newones.dll files from the Windows folder.

Whattn variant

1. Open a DOS command prompt window (from Start->Programs->Accessories), and enter the following commands:
   
   cd "%WinDir%\System"
   regsvr32 /u "..\whattn.dll"
   regsvr32 /u "..\newones.dll"
   
2. Restart Windows.
3. Delete the whattn.dll and newones.dll files from the Windows folder.

All variants

After removing the dll file, you need to reset your home page (from Internet Options->General->Start page) and search pages (from Internet Options->Programs->Reset Web Settings). You can also open the registry (Start->Run->regedit) and delete the key HKEY_LOCAL_MACHINE\Software\wms to clean up if you like. Finally, open Downloaded Program Files in the Windows folder, and delete the entry {DCF0768D-BA7A-101A-B57A-0000C0C3ED5F} if you have it.

Remove spyware using PestPatrol

Remove other programs:

Remove Wazam	Remove WebHancer
Remove Whazit	Remove Winshow
Remove Winupie	Remove Wonderland
Remove WurldMedia
Remove XDialer	Remove XDiver
Remove XLoader	Remove Xzoomy.com
Remove Xupiter Toolbar	Remove ZeroPopup
Remove more spyware & adware >>