|
Whazit Toolbar Browser Hijacker Information
| Name: |
Whazit Toolbar |
| Category: |
Browser Hijacker |
| Advice: |
Remove |
| Risk: |
Elevated Risk
Elevated threats are usually threats that fall into the range of adware in which data about a user's habits are tracked and sent back to a server for analysis without your consent or knowledge. |
| Description:
|
Whazit is an Internet Explorer toolbar and home-/search-/error- page hijacker pointed at its controlling server whazit.com.
Some versions of Whazit also install the nCase parasite.
Whazit/bho is an early version, always stored under the filename 'bho.dll' in the Windows folder.
Whazit/Rnd is similar to the bho variant, but uses random eight-letter filenames.
Whazit/Whattt uses one BHO called 'whattt.dll' along with another called either 'outones.dll' or 'newones.dll'.
Whazit/Whattn uses 'whattn.dll', and may still have the 'newones.dll' left over.
The Whazit Toolbar is installed by ActiveX drive-by-download to users clicking links to the OutWar online game, and by the 'crackz' sites trinsic.org and cerials.net.
|
| Signatures:
|
process: 23121downloader.exe: MD5 Hash: 11bdd631bab7e7426be...
process: downloader.exe: MD5 Hash: 887036bace873201d35...
process: downloader.exe: MD5 Hash: f2965d2e449aabeeb21...
process: wanobsi.exe: MD5 Hash: .. |
| Type: |
Browser Hijacker - Adware is generally software that displays advertisements. Some advertisers may covertly install adware on your system and generate a stream of unsolicited advertisements that can clutter your desktop and affect your productivity. The advertisements may also contain pornographic or other material that you might find inappropriate. The extra processing required to track you or to display advertisements can tax your computer and hurt your system performance. |
Top Browser Hijacker Visited Pages:
SuperSpider - Alias: Network Security Guard, Melcosoft - 323 visits
Spyass.com - 65 visits
Tubby - Alias: MakeMeSearch, CoolWebSearch.Tubby, Spyware.Arau, Trojan.Win32.StartPage.ih, Trojan.StartPage-FJ - 54 visits
CoolWebSearch - Alias: CWS, Cool Web Serach, CoolWwwSearch - 50 visits
CrackSpider - Alias: Troj/Favadd-D - 49 visits
SecurityToolbar.DesktopScam - 45 visits
Paytime - 40 visits
Trojan.StartPage - Alias: SearchCentral - 37 visits
Search3 Hijacker - 30 visits
SBSoft - 30 visits
Random Browser Hijacker Pages:
IST.XXXToolBar
CWS.qttask
coolwebsearch.dompeek
CoolWebSearch.Rank - Alias: CWS variant, Rank
ClearSearch
HungryHands - Alias: Hungry Hands porn hijacker
SuperSpider - Alias: Network Security Guard, Melcosoft
CoolWebSearch.Control - Alias: CWS variant
ClickToSearch - Alias: BestPhrases, Adware.Getup
CWS.AboutBlank
|
