Whazit Toolbar Spyware Profile
Title: Whazit Toolbar
Also Known as: Whazit, Toolbar, Wahzit, Whazitt
Severity scale:
Whazit Toolbar is a spyware program disguised as a toolbar add-on for your browser. It was first discovered on June 20 of 2003. It is distributed by Windows Media Solutions Inc. and is powered by the websites, www.whazit.com/ and home.whazit.com/.
The Whazit Toolbar is installed by ActiveX drive-by download to users who click links to the online game OutWar, and by the “crackz” sites www.trinsic.org and www.cerials.net.
It has been known to reset your home page, redirect searches, and deliver pop-up ads. Some versions also download other spyware and adware programs on your computer, specifically the nCase spyware. It should be noted that most versions of Whazit Toolbar are adware, while others are spyware because of this function.
The activity of Whazit Toolbar can seriously slow down your computer’s performance. It can also potentially cause your Internet browser to freeze or crash. Any supposed benefits it offers are not worth compromising the functionality of your computer.
If you are infected with this program, you should remove it immediately with SpyZooka. While there are other means to remove Whazit Toolbar, SpyZooka has proven to consistently and completely remove this threat from your computer.
Also Known As:
Whazit
Toolbar
Wahzit
Whazitt
Adware Type:
Toolbar
Browser Hijacker
Trojan Downloader (only certain versions)
Associated Files:
23121downloader.exe, downloader.cab.old, downloader.exe, phhuatvs.dll, uninstall.exe, wazzit.rtf.
cards.ico, kyf.dat, newones.dll, wanobsi.exe, whattn.dll, whattt.dll in Windows\
downloader.inf, download_ul.inf in Windows\downloaded program files\
newones.dll, outones.dll, whattn.dll, whattt.dll in Windows\system32\
newones.dll, outones.dll, whattn.dll, whattt.dll in Windows\system\
HKEY_CLASSES_ROOT\clsid\{10955232-b671-11d7-8066-0040f6f477e4}
HKEY_CLASSES_ROOT\clsid\{267d5bd3-0dc2-4724-a196-7f4794fbb9eb}
HKEY_CLASSES_ROOT\clsid\{66f67511-2665-4c34-9e20-fac2c0954ef2}
HKEY_CLASSES_ROOT\clsid\{c9176930-9c9f-4cba-9723-0f58c3e7ced6}
HKEY_CLASSES_ROOT\clsid\{d5b72aed-e54a-11d6-b1b2-444553540000}
HKEY_CLASSES_ROOT\clsid\{d7d7004c-a763-4f8c-b0d4-55a7e017e69d}
HKEY_CLASSES_ROOT\clsid\{dcf0768d-ba7a-101a-b57a-0000c0c3ed5f}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{10955232-b671-11d7-8066-0040f6f477e4}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{267d5bd3-0dc2-4724-a196-7f4794fbb9eb}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{66f67511-2665-4c34-9e20-fac2c0954ef2}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{d5b72aed-e54a-11d6-b1b2-444553540000}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{d7d7004c-a763-4f8c-b0d4-55a7e017e69d}
HKEY_CLASSES_ROOT\typelib\{d130f0d2-bcfd-4b15-a5e7-415159ef4969}
HKEY_CLASSES_ROOT\wharederer.class1
HKEY_CURRENT_USER\software\whazit
HKEY_LOCAL_MACHINE\software\classes\clsid\{10955232-b671-11d7-8066-0040f6f477e4}
HKEY_LOCAL_MACHINE\software\classes\clsid\{267d5bd3-0dc2-4724-a196-7f4794fbb9eb}
HKEY_LOCAL_MACHINE\software\classes\clsid\{66f67511-2665-4c34-9e20-fac2c0954ef2}
HKEY_LOCAL_MACHINE\software\classes\clsid\{c9176930-9c9f-4cba-9723-0f58c3e7ced6}
HKEY_LOCAL_MACHINE\software\classes\clsid\{d5b72aed-e54a-11d6-b1b2-444553540000}
HKEY_LOCAL_MACHINE\software\classes\clsid\{d7d7004c-a763-4f8c-b0d4-55a7e017e69d}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{dcf0768d-ba7a-101a-b57a-0000c0c3ed5f}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{c9176930-9c9f-4cba-9723-0f58c3e7ced6}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{10955232-b671-11d7-8066-0040f6f477e4}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{267d5bd3-0dc2-4724-a196-7f4794fbb9eb}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{66f67511-2665-4c34-9e20-fac2c0954ef2}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{d5b72aed-e54a-11d6-b1b2-444553540000}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{d7d7004c-a763-4f8c-b0d4-55a7e017e69d}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\redwhazit
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\whazitwhazit toolbar
HKEY_LOCAL_MACHINE\software\wms
