Exterminate It! Antimalware

malpedia

Known threats:628,666 Last Update:March 26, 15:59

Testimonials

You guys finally did it!!! Your July 27 update completely removed the Softwarerefferal virus from my computer. I had tried (with no success) several anti-virus programs. I really appreciate your quick response and good work. Keep it up!! Thanks so much!

John K. D.

Wajam

How to Remove Wajam from Your Computer

To completely purge Wajam from your computer, you need to delete the files, folders, Windows registry keys and registry values associated with Wajam. These files, folders and registry elements are respectively listed in the Files, Folders, Registry Keys and Registry Values sections on this page.

For instructions on deleting the Wajam registry keys and registry values,
see How to Remove Wajam from the Windows Registry.

For instructions on deleting the Wajam files and folders,
see How to Delete Wajam Files (.exe, .dll, etc.)

How to Delete Wajam Files (.exe, .dll, etc.)^

The files and folders associated with Wajam are listed in the Files and Folders sections on this page.

To delete the Wajam files and folders:

  1. Using your file explorer, browse to each file and folder listed in the Folders and Files sections.
  2. Note: The paths use certain special folders (conventions) such as [%PROGRAM_FILES%]. Please note that these conventions are depending on Windows Version / Language. These conventions are explained here.
  3. Select the file or folder and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. IMPORTANT: If a file is locked (in use by some application), its deletion will fail (the Windows will display a corresponding message).You can delete such locked files with the RemoveOnReboot utility. To delete a locked file, right-click on the file, select Send To->Remove on Next Reboot on the menu and restart your computer. You can install the RemoveOnReboot utility from here.
[%PROFILE_TEMP%]\wajam_install.exe
[%WINDOWS%]\TEMP\wajam_install.exe
[%WINDOWS%]\d76e66c8a705dc023bede57527551a04.exe
[%WINDOWS%]\ed0b36fb0dc61ea6fe26078a13d57e3f.exe
[%APPDATA%]\mozilla\firefox\profiles\[%PROFILE_FOLDER%]\Extensions\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi
[%WINDOWS%]\cc6e4d747c06a6f25479491e1f7a601e.exe
[%PROFILE_TEMP%]\wajam_install (1).exe
[%WINDOWS%]\dc6220de952ce906f728d54a50b7b349.exe
[%WINDOWS%]\23dc95a1d051b130f213249c4905ce90.exe
[%WINDOWS%]\8d7c31e61c704ef8b45ec003cd5be505.exe
[%WINDOWS%]\526ecfc1d2ee9bb231df7b11c41ec556.exe
[%WINDOWS%]\767a28e1b3b798395d09c427b8411c9c.exe
[%LOCAL_APPDATA%]\Google\Chrome\User Data\Default\Local Storage\http_www.wajam.com_0.localstorage
[%LOCAL_APPDATA%]\Google\Chrome\User Data\Default\Local Storage\http_www.wajam.com_0.localstorage-journal
[%WINDOWS%]\154b55fddf94acf9a1664892b8effcc3.exe
[%WINDOWS%]\afd1356ac247b49e33fcae3d2652a86b.exe
[%WINDOWS%]\2ecb065c318ee0afcc59ccc4d6285e39.exe
[%WINDOWS%]\25f9231c4120e2f68ab334e09e24dcdc.exe
[%WINDOWS%]\5ccb3eb998288fb4814b69b546263bf8.exe
[%WINDOWS%]\0e00dd19e14a694d284a7d21bb8ef490.exe
[%WINDOWS%]\d1f9a96066d794989ed28c138a18286d.exe
[%WINDOWS%]\adbb6730436528fe263ca2e211dc55e5.exe
[%WINDOWS%]\fd66476a089bf4adb7fbab36c2c723fb.exe
[%WINDOWS%]\ec42ba88c8fdf8a11f3ee7251e17db47.exe
[%WINDOWS%]\0d7a5b402ed2887032875cb7db0b9627.exe
[%LOCAL_APPDATA%]\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jpmbfleldcgkldadpdinhjjopdfpjfjp_0.localstorage
[%LOCAL_APPDATA%]\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jpmbfleldcgkldadpdinhjjopdfpjfjp_0.localstorage-journal
[%PROFILE_TEMP%]\wajam_install (2).exe
[%LOCAL_APPDATA%]\Google\Chrome\User Data\Default\Local Storage\http_www.technologiesainturbain.com_0.localstorage
[%LOCAL_APPDATA%]\Chromium\User Data\Default\Local Storage\http_www.technologiestuart.com_0.localstorage
[%PROFILE_TEMP%]\wajam_download.exe
[%LOCAL_APPDATA%]\Google\Chrome\User Data\Default\Local Storage\http_www.technologiesirwilfridlaurier.com_0.localstorage
[%APPDATA%]\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{5a95a9e0-59dd-4314-bd84-4d18ca84b1f3}.xpi
[%ANY_DRIVE%]\Temp\wajam_install.exe
[%PROGRAM_FILES%]\Wajam.off
[%LOCAL_APPDATA%]\Google\Chrome\User Data\Default\Local Storage\http_www.technologiesaintdominique.com_0.localstorage
[%WINDOWS%]\89ecd08214955e1b7fb8e5d3c0c429d7.exe
[%WINDOWS%]\e0db99e1d62c4081fe12650a54538d94.exe
[%PROFILE_TEMP%]\wajam_validate.exe
[%PROGRAM_FILES%]\wajneten.ugnshwwsei.bak
[%PROFILE_TEMP%]\wajam_i_3004.exe
[%SYSTEM_DRIVE%]\TEMP\wajam_install.exe
[%LOCAL_APPDATA%]\Google\Chrome\User Data\Default\Local Storage\http_www.technologiesainturbain.com_0.localstorage-journal
[%PROFILE_TEMP%]\wajam_download_new.exe
[%PROFILE_TEMP%]\wajam_setup.exe
[%LOCAL_APPDATA%]\Wajam
[%PROGRAM_FILES%]\46a473e8a86f8bf4e67b184543ecacf4
[%PROGRAM_FILES%]\b5127cc1cb21ae4fd1a8f9429bfe8fff
[%PROGRAM_FILES%]\WaInternetEn
[%PROGRAM_FILES%]\d15300a1a866501b4a1b3c9ac6e938c4
[%PROGRAM_FILES%]\2a5529b7f5a569c9713c850457f1e3a2
[%PROGRAM_FILES%]\3fa6e7b59d44dd47b8fabcc2f26e4c51
[%PROGRAM_FILES%]\6fdeb1a4028da82bb71990fb1cb226b2
[%PROGRAMS%]\Wajam
[%PROGRAM_FILES%]\659a542a51b28d7362011029563e8a93
[%PROGRAM_FILES%]\Wajam
[%PROGRAM_FILES%]\9ee99b1a38963165df70dc27f053d2ca
[%LOCAL_APPDATA%]\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
[%PROGRAM_FILES%]\WNEn
[%PROGRAM_FILES%]\353a2a8aa522a25ea1ee4e1c5700c2b2
[%PROGRAM_FILES%]\86add30940d866ea891ab5307ae5c726
[%PROGRAM_FILES%]\11b3924cfec91dceb2db9e418e8761a5
[%PROGRAM_FILES%]\a67c3bbc6aff3e591924a5263090ca8b
[%PROGRAM_FILES%]\86c33aad3ef033b6a5f9a64ff6ded935
[%PROGRAM_FILES%]\c2d6e652650e1e9a6709c3d738acfc72
[%PROGRAM_FILES%]\3c2976eb1afc926a59e9b0d7e0d4e7bf
[%PROGRAM_FILES%]\e10e142ac10ff1eebda88f74271c684a
[%PROGRAM_FILES%]\9fbcdcbf7a4e4ea930caea6cd6460688
[%PROGRAM_FILES%]\b7d31512c8d5e01b5823ea8ce4e16afd
[%PROGRAM_FILES%]\WInterEnhancer
[%PROGRAMS%]\WaIEn
[%PROGRAM_FILES%]\WaIEn
[%PROGRAM_FILES%]\39d02b6fa0fc516e15ba0b833de3488f
[%PROGRAM_FILES%]\6af37a585778bf5aacc03f12e93da87e
[%PROGRAMS%]\Wajam Web Enhancer
[%APPDATA%]\mozilla\firefox\profiles\[%PROFILE_FOLDER%]\Extensions\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}
[%PROGRAM_FILES%]\8269daf7e9495a2c16d119ee11123416
[%PROGRAM_FILES%]\WaInterEnhance
[%PROGRAM_FILES%]\WajNetEn
[%PROGRAM_FILES%]\ab7ef2e956c97599730ad0c9f02deac8
[%PROGRAM_FILES%]\961847b8eb69d686dcf1c9db934f23fc
[%PROGRAM_FILES%]\1966181a69e2e95e5f4fbf3f5bf23650
[%PROGRAM_FILES%]\WaInterEnhancer
[%PROGRAM_FILES%]\faa0d1cb5d759bed228412e9873a5011
[%PROGRAM_FILES%]\86dc97be71895c23340582443fe146af
[%PROGRAM_FILES%]\ae8c149dd375ec799f792d957d7f4765
[%PROGRAM_FILES%]\d918de796e7c5a572ae8c81a93352ea1
[%PROGRAM_FILES%]\8407dda09c8e5ce6a4330dd380780074
[%PROGRAMS%]\WajaInternetEn
[%PROGRAM_FILES%]\befddffcc1d061e440f49455ee1a505c
[%PROGRAM_FILES%]\b38d7920a93402d838e8f455c4c33a2f
[%PROGRAM_FILES%]\WajNEnhance
[%LOCAL_APPDATA%]\Google\Chrome\User Data\Default\Local Storage\http_www.wajam.com_0.localstorage-journal
[%PROGRAM_FILES%]\921b91a6d512be186abf9de78cf922da
[%PROGRAM_FILES%]\d33a0f7275063474ccf596a98384a753
[%PROGRAM_FILES%]\25b386ae5d12afe3145c1bd94f24fe2e
[%PROGRAM_FILES%]\d10282084b76d877440758815fc4eecc
[%PROGRAM_FILES%]\eef2fd1b34c43bcdc4346ddc11d5c84c
[%PROGRAM_FILES%]\d0e0508c5d65eb3561901a3ec40223d5
[%PROGRAM_FILES%]\2a61cc7ee58d681f6f52f1693fe3e53c
[%PROGRAM_FILES%]\55fad0ad66cc4025b92ab79aa10e5986
[%PROGRAM_FILES%]\6a6b93710c1f889f1c9f8cbaef95a360
[%PROGRAM_FILES%]\2236ff5a0b6ae754bf3b36c489fbf103
[%PROGRAM_FILES%]\3aea641de8188bb51be4fec8e911aa65
[%PROGRAM_FILES%]\3240cf7968a23f9abf7bb3b9ea9db858
[%PROGRAM_FILES%]\07950db0c02dc91d019f00e13f0c50b5
[%PROGRAM_FILES%]\WajaNetEn
[%PROGRAM_FILES%]\a71b192a592a8863d3e66077a3cc4ace
[%PROGRAM_FILES%]\ce24d992b63802158d5ddda050cbcb59
[%PROGRAM_FILES%]\19b47982fe60ca9efe708c9b13c8dc7b
[%PROGRAM_FILES%]\91621ea0fff3ab797432b822993b5e71
[%PROGRAM_FILES%]\d91f1721545751cc9686e8ba909244a8
[%PROGRAM_FILES%]\a4bde2d6faa9e2d2d0f2d9ac149e08f2
[%PROGRAM_FILES%]\a84777b2773081ee758778bcf13d7676
[%PROGRAM_FILES%]\WajaInterEn Browser Enhancer
[%PROGRAM_FILES%]\9261473edf26045edb0425a5a900db3d
[%PROGRAM_FILES%]\1a57a0b277d58c9296d1832ee84c824d
[%PROGRAM_FILES%]\6440c9e1e97ab488022810ee3ac03182
[%PROGRAM_FILES%]\20971933e1f056f6c956cbf046eb0458
[%PROGRAM_FILES%]\f5d383351d3d0fcb57395e3c211aefe3
[%PROGRAM_FILES%]\4641df230625d67fc7c6b8bcb39e1286
[%PROGRAM_FILES%]\ece6e2f494a44b01d5f9f835bc967bfd
[%LOCAL_APPDATA%]\Google\Chrome\User Data\Default\Local Storage\http_www.technologiesainturbain.com_0.localstorage-journal
[%PROGRAM_FILES%]\2e24a5d5e58af0dda0c9102afd2b9406
[%PROGRAM_FILES%]\496447995ef536399322afad29ecbc93
[%PROGRAM_FILES%]\WaIntEnhance
[%PROGRAM_FILES%]\368b78030dddaf4505245aa8bb060eb4
[%PROGRAM_FILES%]\cd4f4d45011d415a3169aa4d31f518fa
[%PROGRAM_FILES%]\3bac4a665ec0100bad0805093f8c55c6
[%PROGRAM_FILES%]\WaNetworkEnhancer
[%PROGRAM_FILES%]\83992e8bf138549f6b33c6983cec5f4b
[%PROGRAM_FILES%]\7260d46834a9693dfd68c21f8daf5fdf
[%PROGRAM_FILES%]\8ace7a3aac8fa048788e2a1a61d61e97
[%PROGRAM_FILES%]\2ba0818d712424ae74b0882d9f54d8b2
[%PROGRAM_FILES%]\3fb316d9ff6ecceb023d8d2231f0b9cf
[%PROGRAM_FILES%]\fb7398f1be4d7f8394ddc7ad9e2a4166
[%PROGRAM_FILES%]\001353bc88e615389e90e100191ab4f1
[%PROGRAM_FILES%]\73a9615f2cf2329ae0f271f10c34f0c7
[%PROGRAM_FILES%]\35548449c663c614cfc83ea41d1b7b33
[%PROGRAM_FILES%]\6eacb6e63a7ca76fcf2a07d34e425cee
[%PROGRAM_FILES%]\WajaInterEnhancer
[%LOCAL_APPDATA%]\Chromium\User Data\Default\Local Storage\http_www.technologiestuart.com_0.localstorage-journal
[%PROGRAM_FILES%]\320040e18c40b4d71238b53553c7c0ca
[%PROGRAM_FILES%]\e0c0eed335f2d7c7d12bc98804071c0c
[%PROGRAM_FILES%]\2179092b46a2311bf5ee3b51b6912fa6
[%PROGRAM_FILES%]\b33c7d431175f4c62f5ec56b38754caa
[%PROGRAM_FILES%]\f9788188316d0f6236ad532b31813f7c
[%PROGRAM_FILES%]\aca770335ad0c6ac8fccb7c873cb18fe
[%PROGRAM_FILES%]\6c6c944b42087510bdc75a72e9ce45de
[%PROGRAM_FILES%]\b68628ae962e901dcf543023c36ed105

How to Remove Wajam from the Windows Registry^

The Windows registry stores important system information such as system preferences, user settings and installed programs details as well as the information about the applications that are automatically run at start-up. Because of this, spyware, malware and adware often store references to their own files in your Windows registry so that they can automatically launch every time you start up your computer.

To effectively remove Wajam from your Windows registry, you must delete all the registry keys and values associated with Wajam, which are listed in the Registry Keys and Registry Values sections on this page.

IMPORTANT: Because the registry is a core component of your Windows system, it is strongly recommended that you back up the registry before you begin deleting keys and values. For information about backing up the Windows registry, refer to the Registry Editor online help.

To remove the Wajam registry keys and values:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK.
    The Registry Editor window opens. This window consists of two panes. The left pane displays folders that represent the registry keys arranged in hierarchical order. The right one lists the registry values of the currently selected registry key.
  3. To delete each registry key listed in the Registry Keys section, do the following:
    • Locate the key in the left pane of the Registry Editor window by sequentially expanding the folders according to the path indicated in the Registry Keys section. For example, if the path of a registry key is
      HKEY_LOCAL_MACHINE\software\FolderA\FolderB\KeyName1
      sequentially expand the HKEY_LOCAL_MACHINE, software, FolderA and FolderB folders.
    • Select the key name indicated at the end of the path (KeyName1 in the example above).
    • Right-click the key name and select Delete on the menu.
    • Click Yes in the Confirm Key Delete dialog box.
  4. To delete each registry value listed in the Registry Values section, do the following:
    • Display the value in the right pane of the Registry Editor window by sequentially expanding the folders in the left pane according to the path indicated in the Registry Values section and selecting the specified key name. For example, if the path of a registry value is
      HKEY_LOCAL_MACHINE\software\FolderA\FolderB\KeyName2,valueC=
      sequentially expand the HKEY_LOCAL_MACHINE, software, FolderA and FolderB folders and select the KeyName2 key to display the valueC value in the right pane.
    • In the right pane, select the value name indicated after a comma at the end of the path (valueC in the example above).
    • Right-click the value name and select Delete on the menu.
    • Click Yes in the Confirm Value Delete dialog box.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WajamUpdater
HKEY_CURRENT_USER\Software\Wajam
HKEY_LOCAL_MACHINE\SOFTWARE\Wajam
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
HKEY_CURRENT_USER\Software\WajIEnhance
HKEY_CURRENT_USER\Software\WajIntEnhance
HKEY_LOCAL_MACHINE\Software\WajIntEnhance
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\8d644d17c220e6eba985eb9de55cf604
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\a23098c83058639a08b1b815eb8258cf
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\01b08ec2cd4c3e9671e601ceead2be22
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\8102f00dd5d433526875c728dd1bc957
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\46a473e8a86f8bf4e67b184543ecacf4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance
HKEY_CURRENT_USER\Software\WInterEnhancer
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WInterEnhancer Service
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\81c223def878db403c3df2dd40b8052c
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\a22e708b1232cf7034e3c89a0db85e18
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\8bd2fae0e8783e44fd7cffc5fb29762a
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\9a725ebb9206bd37796eece647804ad1
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\e5b3439c0c3c903cb7023d04a3bf7c6f
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\c685e5237234abeafcae912e8ab4fed1
HKEY_CURRENT_USER\Software\SimplyTech\HomeTabWajIEnhance
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\395b38999110750903f8a99887b7fd1e
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\b7409f0e34e66d0960da26f21d16bbff
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bdfb406a9dc27e5096e5f7937e284f79
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\99e57dd3f6a7f168d14caad36ca6e2fb
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\wajam_install_RASMANCS
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\wajam_install_RASAPI32
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\52c453062eb791daec14705e3e8aa1c2
HKEY_LOCAL_MACHINE\Software\WNen
HKEY_CURRENT_USER\Software\WaNetworkEnhancer
HKEY_LOCAL_MACHINE\Software\WaNetworkEnhancer
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\47fea804ac2667068ed0e8676ec7156c
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ef5ed1c3321f7ebb8172cc9f26f9b24e
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\477ee44fb3e214142706846357c2140a
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\28da9629125c2d79a9ade19226b596df
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\3678df3413f77bf4b2172a754fdaddec
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\2a38e5246c086157511237bc05e18c7e
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\659a542a51b28d7362011029563e8a93
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\413ef5f9e26d4bf5062e1a2023982561
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\6b2d9c3529a1f39b9217a5beb44548b9
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\9ee99b1a38963165df70dc27f053d2ca
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fd73004c31cb018e16a3843304b7365e
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ef70f89971b9cb1279d66757ccf4a459
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\4f03bcb1cf54ce4de7d3802b5ab02dc8
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\d8ec9ec7729e34fe06b430552b515683
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\5e32ff7b7360144551fd0dfc2a30af85
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\27176f25a084a3cc6ee503628773521c
HKEY_LOCAL_MACHINE\Software\WNEn Browser Enhancer
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\f775aab975aa48f1d998ca7806556439
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\068594bdfee791c9107ac93cbe374a4f
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\86add30940d866ea891ab5307ae5c726
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\11b3924cfec91dceb2db9e418e8761a5
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WaIEn Monitor
HKEY_LOCAL_MACHINE\SOFTWARE\Social2Sea Browser Enhancer
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\76d6d6d362c4a215337247fac761f680
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\b4d63fe9b167688808c759eebe0b3648
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\a67c3bbc6aff3e591924a5263090ca8b
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\3453f60939f8f06430b89edad26bcab7
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\0851310a488f518246d8036da152c6f3
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\6e1741e22f702fbbc4c09b01b46b78b6
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\72027edf3275aa97a448e419886ff9c9
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dd44b90743e8cac64929e81956453da1
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\db51dd5c2cd29b75147c19497dc700cb
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\a97b85c2de9ca70f2fb2bcd0a6a83fa4
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ed5ea5f5a59402b3ba35a94feb5157f3
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\3e1240de9c04849e17877c6dbe5f055d
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\88b0469f2ec61c583f5db793be159b83
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\85d0d9dfe31b321cdb6b39e42668c934
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\c2d6e652650e1e9a6709c3d738acfc72
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ec4bdb338926e39d3e38c6d7d40cbccc
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\4a2da4e5b0afac7943baa8f731104174
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\768126887999afd1b5b4e77db8c360f4
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\06a6c13a312bc5e0b0520bd9728d3525
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\3c8120c1f0130a0ee751c0a5740cd602
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\42edcab1dc851d7b1f602117fc8aa578
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\0931d79b887befb29159f655e7c8e22e
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\c25743e6d0ed4aa43a976ac6d82891b5
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\e10e142ac10ff1eebda88f74271c684a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a7a6995d-6ee1-4fd1-a258-49395d5bf99c}
HKEY_CLASSES_ROOT\AppID\priam_bho.DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\wajam_ch_7102013_RASMANCS
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\wajam_ch_7102013_RASAPI32
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\4cb7cb47cf4bb8885ba52d946faf3431
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\9fbcdcbf7a4e4ea930caea6cd6460688
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\18981794b86de16035122cfd8a8e8b1f
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dabe6b28f0a029cd6c83380c1e39d0c4
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\b7d31512c8d5e01b5823ea8ce4e16afd
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\8eff4b0aaefc33c73d8428fe573da54b
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\14636160542f8a0fe8a492a4db692787
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\c8f5045397a4ccbbeeb3a7f0afdbfd49
HKEY_LOCAL_MACHINE\Software\WajNetEn
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\wajam_download_RASMANCS
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\wajam_download_RASAPI32
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\deefb52410ac4bc134ae1c7f472d804c
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\04a984bd81491ad09d6546869c87b76c
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\3ecf6d97a7626c83da1aaed9afb7b1e4
HKEY_CLASSES_ROOT\CLSID\{a7a6995d-6ee1-4fd1-a258-49395d5bf99c}
Registry Values
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}=[%PROGRAM_FILES%]\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\3192b1398cc646a218f96d35e2dcd7c4]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\3192b1398cc646a218f96d35e2dcd7c4]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\f27a343abd4d79b024a9091dd42fe155]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\f27a343abd4d79b024a9091dd42fe155]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\a0821fe65945f64b9e7aeb47ca614543]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\a0821fe65945f64b9e7aeb47ca614543]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\b1a78465ba5fc97e74a50b252136a8fa]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\b1a78465ba5fc97e74a50b252136a8fa]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eff833091068a59c6c6f644653e11817]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eff833091068a59c6c6f644653e11817]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1c04b63fb89a86a1fcbf00852a6b8044]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1c04b63fb89a86a1fcbf00852a6b8044]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\2d2285c0d35b0379e2030ffd30d41576]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\2d2285c0d35b0379e2030ffd30d41576]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\005a8ed9ec73ffabf9fd00b359f1c64a]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\005a8ed9ec73ffabf9fd00b359f1c64a]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\69cbaf60fc73e553f448ad7e9b6c08b7]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\69cbaf60fc73e553f448ad7e9b6c08b7]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\006af41780c5ec40fba485f67cdf85f6]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\006af41780c5ec40fba485f67cdf85f6]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\f319ee3471d99472631a0f5fd88e7b9c]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\f319ee3471d99472631a0f5fd88e7b9c]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\e4c0faf118079d73afe2fe3c9741942d]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\e4c0faf118079d73afe2fe3c9741942d]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ff41bf6d1d33fdb5f692813b0dc0cea6]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ff41bf6d1d33fdb5f692813b0dc0cea6]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eaf43d59788376f5b5f3eea95aee2f61]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eaf43d59788376f5b5f3eea95aee2f61]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\83feaec7f591ef799441d3672190f036]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\83feaec7f591ef799441d3672190f036]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\c30d7655b364053d8c8fadcd9d9c179d]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\c30d7655b364053d8c8fadcd9d9c179d]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\6507dd0072a4b4cf20215e1af3d4e8e6]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\6507dd0072a4b4cf20215e1af3d4e8e6]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\b7df5f3344344f56184d298c7833db8c]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\b7df5f3344344f56184d298c7833db8c]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\11553cfbd045fb5a2a734aa74f0ab5ab]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\11553cfbd045fb5a2a734aa74f0ab5ab]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\9657e49dd22e220f2f362cd554dcd7b0]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\9657e49dd22e220f2f362cd554dcd7b0]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\260ffb7419f87afa73519eba314fe4b6]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\260ffb7419f87afa73519eba314fe4b6]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\a1e5d976474e447f17ec08e97156ccc4]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\a1e5d976474e447f17ec08e97156ccc4]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\c4d2b89db7e67380eec21c0f4d4e7d59]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\c4d2b89db7e67380eec21c0f4d4e7d59]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\507bb25d5f57d23976633c6393f6e44f]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\507bb25d5f57d23976633c6393f6e44f]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\25f0a2d5484a4cfad306c5b9f57060a2]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\25f0a2d5484a4cfad306c5b9f57060a2]DisplayName=Wajam

PUA

These are programs that are being installed on the system often without a user's knowledge or approval.

Be Aware of the Following PUA Threats:

LyricsWatch, QuickVideoPlayer, DriverUpdatePlus, HoistSearch, SpaceOffers.

How Did My PC Get Infected with Wajam?^

The following are the most likely reasons why your computer got infected with Wajam:

  • Your operating system and Web browser's security settings are too lax.
  • You are not following safe Internet surfing and PC practices.

Downloading and Installing Freeware or Shareware

Small-charge or free software applications may come bundled with spyware, adware, or programs like Wajam. Sometimes adware is attached to free software to enable the developers to cover the overhead involved in created the software. Spyware frequently piggybacks on free software into your computer to damage it and steal valuable private information.

Using Peer-to-Peer Software

The use of peer-to-peer (P2P) programs or other applications using a shared network exposes your system to the risk of unwittingly downloading infected files, including malicious programs like Wajam.

Visiting Questionable Web Sites

When you visit sites with dubious or objectionable content, trojans-including Wajam, spyware and adware, may well be automatically downloaded and installed onto your computer.

Detecting Wajam^

The following symptoms signal that your computer is very likely to be infected with Wajam:

PC is working very slowly

Wajam can seriously slow down your computer. If your PC takes a lot longer than normal to restart or your Internet connection is extremely slow, your computer may well be infected with Wajam.

New desktop shortcuts have appeared or the home page has changed

Wajam can tamper with your Internet settings or redirect your default home page to unwanted web sites. Wajam may even add new shortcuts to your PC desktop.

Annoying popups keep appearing on your PC

Wajam may swamp your computer with pestering popup ads, even when you're not connected to the Internet, while secretly tracking your browsing habits and gathering your personal information.

E-mails that you didn't write are being sent from your mailbox

Wajam may gain complete control of your mailbox to generate and send e-mail with virus attachments, e-mail hoaxes, spam and other types of unsolicited e-mail to other people.