Jump to content

Welcome to Geeks to Go
Geeks to Go Welcome
Create Account Login to Account
Photo

Removal instructions for WajaIEnhancer

- - - - -
Started by Metallica , May 22 2015 01:35 AM

  • Please log in to reply
No replies to this topic

#1
Metallica
Posted 22 May 2015 - 01:35 AM

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
Content is republished with permission from Malwarebytes.

What is WajaIEnhancer?

The Malwarebytes research team has determined that WajaIEnhancer is adware. These adware applications display advertisements not originating from the sites you are browsing.

How do I know if my computer is affected by WajaIEnhancer?

You may see this entry in your list of installed programs:

warning4.png

and these warnings during install:

main.png

warning1.png

and this proxy in IE under Internet options > Connections > LAN settings > proxy server > Advanced :

warning2.png

How did WajaIEnhancer get on my computer?

Adware applications use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove WajaIEnhancer?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted program.
  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
  • Reboot your computer if prompted.
Is there anything else I need to do to get rid of WajaIEnhancer?
  • No, Malwarebytes' Anti-Malware removes WajaIEnhancer completely.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the WajaIEnhancer adware. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.


protection1.png


Technical details for experts

You will see these signs in a HijackThis log:
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:49211;https=127.0.0.1:49211
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback>
O23 - Service: WajaIEnhancer Service - Unknown owner - C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer\InternetEnhancerService.exe
You may see these signs in FRST logs:
 () C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer\InternetEnhancerService.exe
 () C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer\InternetEnhancer.exe
 ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled
 ProxyServer: [.DEFAULT] => http=127.0.0.1:49211;https=127.0.0.1:49211
 ProxyEnable: [{userSID}] => Internet Explorer proxy is enabled
 ProxyServer: [{userSID}] => http=127.0.0.1:49211;https=127.0.0.1:49211
 R2 WajaIEnhancer Service; C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer\InternetEnhancerService.exe [691200 2015-05-20] () [File not signed]
 () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer
 () C:\Program Files\Wajam
 () C:\Program Files\WajaIEnhancer

Wajam (HKLM\...\WajaIEnhancer) (Version: 2.31.2.17 (i2.6) - WajaIEnhancer) <==== ATTENTION
() C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer\InternetEnhancerService.exe
() C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer\InternetEnhancer.exe
() C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer\ApiHandlr.dll
Alterations made by the installer:
File system details [View: All details] (Selection)
---------------------------------------------------
    Adds the folder C:\Program Files\WajaIEnhancer
       Adds the file uninstall.exe"="5/20/2015 5:16 PM, 883197 bytes, A
    Adds the folder C:\Program Files\WajaIEnhancer\Logos
    Adds the folder C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer
       Adds the file ApiHandlr.dll"="5/20/2015 5:17 PM, 11776 bytes, A
       Adds the file FiddlerCore.dll"="4/22/2015 9:23 PM, 370176 bytes, A
       Adds the file HtmlAgilityPack.dll"="4/22/2015 9:23 PM, 134144 bytes, A
       Adds the file InternetEnhancer.exe"="5/20/2015 5:17 PM, 277504 bytes, A
       Adds the file InternetEnhancerService.exe"="5/20/2015 5:17 PM, 691200 bytes, A
       Adds the file lan-proxy-settings.dat"="5/22/2015 8:54 AM, 2292 bytes, A
       Adds the file makecert.exe"="4/22/2015 9:23 PM, 55632 bytes, A
       Adds the file Newtonsoft.Json.dll"="4/22/2015 9:23 PM, 436224 bytes, A
       Adds the file wie"="5/22/2015 8:54 AM, 100 bytes, A
       Adds the file WJManifest"="5/22/2015 8:53 AM, 22149 bytes, A
    Adds the folder C:\Program Files\Wajam
       Adds the file uninstall.exe"="5/20/2015 5:16 PM, 883197 bytes, A
    Adds the folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer
       Adds the file Settings.lnk"="5/22/2015 8:54 AM, 1226 bytes, A
       Adds the file SignIn with Facebook.lnk"="5/22/2015 8:54 AM, 1236 bytes, A
       Adds the file SignIn with Twitter.lnk"="5/22/2015 8:54 AM, 1228 bytes, A
       Adds the file Wajam Website.lnk"="5/22/2015 8:54 AM, 1198 bytes, A
    Adds the folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Explore Social Search
       Adds the file Ask.lnk"="5/22/2015 8:54 AM, 1146 bytes, A
       Adds the file Google.lnk"="5/22/2015 8:54 AM, 1158 bytes, A
       Adds the file IMDb.lnk"="5/22/2015 8:54 AM, 1158 bytes, A
       Adds the file Shopping.com.lnk"="5/22/2015 8:54 AM, 1166 bytes, A
       Adds the file TripAdvisor.lnk"="5/22/2015 8:54 AM, 1178 bytes, A
       Adds the file Wikipedia.lnk"="5/22/2015 8:54 AM, 1160 bytes, A
       Adds the file Yahoo!.lnk"="5/22/2015 8:54 AM, 1154 bytes, A
    Adds the folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Explore Social Shopping
       Adds the file Amazon.lnk"="5/22/2015 8:54 AM, 1158 bytes, A
       Adds the file Argos.lnk"="5/22/2015 8:54 AM, 1158 bytes, A
       Adds the file Ebay.lnk"="5/22/2015 8:54 AM, 1150 bytes, A
       Adds the file Etsy.lnk"="5/22/2015 8:54 AM, 1150 bytes, A
       Adds the file HomeDepot.lnk"="5/22/2015 8:54 AM, 1170 bytes, A
       Adds the file Ikea.lnk"="5/22/2015 8:54 AM, 1150 bytes, A
       Adds the file Lowe's.lnk"="5/22/2015 8:54 AM, 1154 bytes, A
       Adds the file Mercadolivre.lnk"="5/22/2015 8:54 AM, 1178 bytes, A
       Adds the file MyShopping.lnk"="5/22/2015 8:54 AM, 1174 bytes, A
       Adds the file Sears.lnk"="5/22/2015 8:54 AM, 1154 bytes, A
       Adds the file Target.lnk"="5/22/2015 8:54 AM, 1158 bytes, A
       Adds the file Tesco.lnk"="5/22/2015 8:54 AM, 1154 bytes, A
       Adds the file Walmart.lnk"="5/22/2015 8:54 AM, 1162 bytes, A
       Adds the file Zalando.lnk"="5/22/2015 8:54 AM, 1162 bytes, A
    Adds the folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Uninstall Wajam
       Adds the file uninstall.lnk"="5/22/2015 8:54 AM, 1927 bytes, A

Registry details [View: All details] (Selection)
------------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\InternetEnhancer_RASAPI32]
       "ConsoleTracingMask"="REG_DWORD", -65536
       "EnableConsoleTracing"="REG_DWORD", 0
       "EnableFileTracing"="REG_DWORD", 0
       "FileDirectory"="REG_EXPAND_SZ, "%windir%\tracing"
       "FileTracingMask"="REG_DWORD", -65536
       "MaxFileSize"="REG_DWORD", 1048576
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\InternetEnhancer_RASMANCS]
       "ConsoleTracingMask"="REG_DWORD", -65536
       "EnableConsoleTracing"="REG_DWORD", 0
       "EnableFileTracing"="REG_DWORD", 0
       "FileDirectory"="REG_EXPAND_SZ, "%windir%\tracing"
       "FileTracingMask"="REG_DWORD", -65536
       "MaxFileSize"="REG_DWORD", 1048576
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings]
       "ProxyEnable"="REG_DWORD", 0
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WajaIEnhancer]
       "DisplayIcon"="REG_SZ", "C:\Program Files\WajaIEnhancer\Logos\wajam.ico"
       "DisplayName"="REG_SZ", "Wajam"
       "DisplayVersion"="REG_SZ", "2.31.2.17 (i2.6)"
       "Publisher"="REG_SZ", "WajaIEnhancer"
       "UninstallString"="REG_SZ", "C:\Program Files\Wajam\uninstall.exe"
       "URLInfoAbout"="REG_SZ", "http://www.technologievanhorne.com"
    [HKEY_LOCAL_MACHINE\SOFTWARE\WajaIEnhancer]
       "pxyupd"="REG_SZ", "1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\WajaIEnhancer\WajaIEnhancer Internet Enhancer]
       "aid"="REG_SZ", "3673"
       "aid2"="REG_SZ", "none"
       "bih"="REG_SZ", "http://www.technologievanhorne.com/proxy/logging"
       "dev_reload"="REG_DWORD", 0
       "dev_url"="REG_SZ", ""
       "install_timestamp"="REG_SZ", "1432277603"
       "install_timestamp2"="REG_SZ", ""
       "lp"="REG_DWORD", 49211
       "mid"="REG_SZ", "c5b0ec3b7e65e886fe8626c9109861b2"
       "uid"="REG_SZ", "5ABDF33087498F3919226AD7EE86F367"
       "update_url"="REG_SZ", "http://www.technologievanhorne.com/addon/mapping"
       "ver"="REG_SZ", "2.31.2.17"
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WajaIEnhancer Service]
       "DisplayName"="REG_SZ", "WajaIEnhancer Service"
       "ErrorControl"="REG_DWORD", 1
       "ImagePath"="REG_EXPAND_SZ, "C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer\InternetEnhancerService.exe"
       "ObjectName"="REG_SZ", "LocalSystem"
       "Start"="REG_DWORD", 2
       "Type"="REG_DWORD", 16
    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
       "ProxyEnable"="REG_DWORD", 1
       "ProxyOverride"="REG_SZ", "<-loopback>"
       "ProxyServer"="REG_SZ", "http=127.0.0.1:49211;https=127.0.0.1:49211"
    [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
       "ProxyEnable"="REG_DWORD", 0
    [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
       "ProxyEnable"="REG_DWORD", 0
    [HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
       "ProxyEnable"="REG_DWORD", 0
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
       "ProxyEnable"="REG_DWORD", 1
       "ProxyOverride"="REG_SZ", "<-loopback>"
       "ProxyServer"="REG_SZ", "http=127.0.0.1:49211;https=127.0.0.1:49211"
    [HKEY_CURRENT_USER\Software\WajaIEnhancer]
       "affiliate_id"="REG_SZ", "3673"
       "unique_id"="REG_SZ", "5ABDF33087498F3919226AD7EE86F367"
    [HKEY_CURRENT_USER\Software\WajIEnhance]
       "affiliate_id"="REG_SZ", "3673"
       "unique_id"="REG_SZ", "5ABDF33087498F3919226AD7EE86F367"
Malwarebytes Anti-Malware log:
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 5/22/2015
Scan Time: 9:03:19 AM
Logfile: mbamWajamIE.txt
Administrator: Yes

Version: 2.01.6.1022
Malware Database: v2015.05.21.04
Rootkit Database: v2015.05.16.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: Malwarebytes

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 291110
Time Elapsed: 4 min, 24 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 2
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer\InternetEnhancer.exe, 4088, Delete-on-Reboot, [6edab0e63d4df73f5ff4165fdc29d22e]
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer\InternetEnhancerService.exe, 2356, Delete-on-Reboot, [6edab0e63d4df73f5ff4165fdc29d22e]

Modules: 3
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer\ApiHandlr.dll, Delete-on-Reboot, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer\FiddlerCore.dll, Delete-on-Reboot, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer\Newtonsoft.Json.dll, Delete-on-Reboot, [6edab0e63d4df73f5ff4165fdc29d22e], 

Registry Keys: 5
PUP.Optional.Wajam.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WajaIEnhancer Service, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, HKLM\SOFTWARE\WajaIEnhancer, Quarantined, [22264155494186b0074f7203f60f19e7], 
PUP.Optional.Wajam.A, HKCU\SOFTWARE\WajaIEnhancer, Quarantined, [84c47d194e3c2f07b5a07401fc09c33d], 
PUP.Optional.Wajam.A, HKCU\SOFTWARE\WajIEnhance, Quarantined, [b6920b8b93f787af710422cbe71c7d83], 
PUP.Optional.Wajam.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WajaIEnhancer, Quarantined, [b890c3d31971d5612aef04a4bc47ba46], 

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 8
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Explore Social Search, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Explore Social Shopping, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Uninstall Wajam, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer, Delete-on-Reboot, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer, Delete-on-Reboot, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\Wajam, Quarantined, [b890c3d31971d5612aef04a4bc47ba46], 

Files: 73
PUP.Optional.Wajam.A, C:\Users\{username}\Desktop\wajam_download.exe, Quarantined, [c2861b7b068444f25296a6bbc343758b], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Wajam Website.lnk, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Settings.lnk, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\SignIn with Facebook.lnk, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\SignIn with Twitter.lnk, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Explore Social Search\Ask.lnk, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Explore Social Search\Google.lnk, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Explore Social Search\IMDb.lnk, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Explore Social Search\Shopping.com.lnk, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Explore Social Search\TripAdvisor.lnk, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Explore Social Search\Wikipedia.lnk, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Explore Social Search\Yahoo!.lnk, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Explore Social Shopping\Amazon.lnk, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Explore Social Shopping\Argos.lnk, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Explore Social Shopping\Ebay.lnk, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Explore Social Shopping\Etsy.lnk, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Explore Social Shopping\HomeDepot.lnk, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Explore Social Shopping\Ikea.lnk, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Explore Social Shopping\Lowe's.lnk, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Explore Social Shopping\Mercadolivre.lnk, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Explore Social Shopping\MyShopping.lnk, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Explore Social Shopping\Sears.lnk, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Explore Social Shopping\Target.lnk, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Explore Social Shopping\Tesco.lnk, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Explore Social Shopping\Walmart.lnk, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Explore Social Shopping\Zalando.lnk, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WajaIEnhancer\Uninstall Wajam\uninstall.lnk, Quarantined, [83c5a2f4d3b7eb4b01cbb822679cd12f], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\wajam.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\amazon.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\argos.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\ask.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\bestbuy.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\ebay.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\etsy.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\facebook.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\favicon.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\google.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\homedepot.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\ikea.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\imdb.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\lowes.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\mercado.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\mysearchweb.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\myshopping.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\searchresult.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\sears.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\setting.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\settings.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\shopping.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\target.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\tesco.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\tripadvisor.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\twitter.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\walmart.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\wiki.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\yahoo.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\Logos\zalando.ico, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\uninstall.exe, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer\007290c6eaab8e3f7a895162dbe596bc, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer\27a3e026958775027c50df2378a10264, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer\ApiHandlr.dll, Delete-on-Reboot, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer\fb1623258fb090ed627ec29d474d4763, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer\fdc5ec3a7e8363c7ed9df3c277fa7597, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer\FiddlerCore.dll, Delete-on-Reboot, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer\HtmlAgilityPack.dll, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer\InternetEnhancer.exe, Delete-on-Reboot, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer\InternetEnhancerService.exe, Delete-on-Reboot, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer\lan-proxy-settings.dat, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer\makecert.exe, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer\Newtonsoft.Json.dll, Delete-on-Reboot, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer\wie, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\WajaIEnhancer\WajaIEnhancer Internet Enhancer\WJManifest, Quarantined, [6edab0e63d4df73f5ff4165fdc29d22e], 
PUP.Optional.Wajam.A, C:\Program Files\Wajam\uninstall.exe, Quarantined, [b890c3d31971d5612aef04a4bc47ba46], 

Physical Sectors: 0
(No malicious items detected)


(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):
  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
  • 0

Advertisements

Back to Malware Removal Guides and Tutorials


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Malware Removal Guides and Tutorials

As Featured On:

featured
Malware Removal How to Guides Windows 7 System Building Download Files Register welcome

Never used a forum? Learn how.