Exterminate It! Antimalware

malpedia

Known threats:644,791 Last Update:August 17, 12:00

Testimonials

You guys finally did it!!! Your July 27 update completely removed the Softwarerefferal virus from my computer. I had tried (with no success) several anti-virus programs. I really appreciate your quick response and good work. Keep it up!! Thanks so much!

John K. D.

Wajam

How to Remove Wajam from Your Computer

To completely purge Wajam from your computer, you need to delete the files, folders, Windows registry keys and registry values associated with Wajam. These files, folders and registry elements are respectively listed in the Files, Folders, Registry Keys and Registry Values sections on this page.

For instructions on deleting the Wajam registry keys and registry values,
see How to Remove Wajam from the Windows Registry.

For instructions on deleting the Wajam files and folders,
see How to Delete Wajam Files (.exe, .dll, etc.)

How to Delete Wajam Files (.exe, .dll, etc.)^

The files and folders associated with Wajam are listed in the Files and Folders sections on this page.

To delete the Wajam files and folders:

  1. Using your file explorer, browse to each file and folder listed in the Folders and Files sections.
  2. Note: The paths use certain special folders (conventions) such as [%PROGRAM_FILES%]. Please note that these conventions are depending on Windows Version / Language. These conventions are explained here.
  3. Select the file or folder and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. IMPORTANT: If a file is locked (in use by some application), its deletion will fail (the Windows will display a corresponding message).You can delete such locked files with the RemoveOnReboot utility. To delete a locked file, right-click on the file, select Send To->Remove on Next Reboot on the menu and restart your computer. You can install the RemoveOnReboot utility from here.
[%PROFILE_TEMP%]\wajam_install.exe
[%SYSTEM_DRIVE%]\m9jHG9M8YMtlEOGU\x1LjpHGF7jWE7XgA\f673600921332765e0a109445fb6e660.exe
[%WINDOWS%]\cbb18bfa9b39a43a2103e7711cfd0912.exe
[%SYSTEM_DRIVE%]\$Recycle.Bin\[%USER_SID%]\$REGK8XZ.exe
[%APPDATA%]\mozilla\firefox\profiles\[%PROFILE_FOLDER%]\Extensions\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi
[%WINDOWS%]\17ca2025b91eb134a6c562cf94873c1e.exe
[%ANY_DRIVE%]\Temp\wajam_install.exe
[%LOCAL_APPDATA%]\Google\Chrome\User Data\Default\Local Storage\http_www.wajam.com_0.localstorage
[%LOCAL_APPDATA%]\Google\Chrome\User Data\Default\Local Storage\http_www.wajam.com_0.localstorage-journal
[%LOCAL_APPDATA%]\Chromium\User Data\Default\Local Storage\http_www.technologiestuart.com_0.localstorage
[%LOCAL_APPDATA%]\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jpmbfleldcgkldadpdinhjjopdfpjfjp_0.localstorage
[%LOCAL_APPDATA%]\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jpmbfleldcgkldadpdinhjjopdfpjfjp_0.localstorage-journal
[%WINDOWS%]\b9709aae6d2ca21c0251d4d634483963.exe
[%WINDOWS%]\79b20a1acec7e20e3e2c6af3b11cbb43.exe
[%WINDOWS%]\02d15fa326b08c8462da019aff2af68f.exe
[%WINDOWS%]\59a098551b6c60b840ddffd583c54866.exe
[%WINDOWS%]\5aae0cbc403da1fc4179b80b496b584e.exe
[%WINDOWS%]\957451fdad1f086988c8bf06a01a1cf3.exe
[%WINDOWS%]\a6e75d580e26c65bca92a5f606dbb582.exe
[%WINDOWS%]\65c3d42b28c748d2c0bee5e04c159ef1.exe
[%LOCAL_APPDATA%]\Google\Chrome\User Data\Default\Local Storage\http_www.technologiesirwilfridlaurier.com_0.localstorage
[%PROFILE_TEMP%]\wajam_install (1).exe
[%WINDOWS%]\9dfa52839196c0b509b970baadd07a29.exe
[%WINDOWS%]\a6fed43fe5319ae611698555da4cea0d.exe
[%WINDOWS%]\0e7bfca5fe4bae6ef7ecdc28f7c891fe.exe
[%WINDOWS%]\68be65acdeb24085b014e902520bb208.exe
[%WINDOWS%]\6c56f243e28a3f3fb748ea2bf5d086b4.exe
[%WINDOWS%]\f9c76b2298c0ae4709415038be976af9.exe
[%SYSTEM_DRIVE%]\$Recycle.Bin\[%USER_SID%]\$RLRERPO.exe
[%WINDOWS%]\48bf7cd71b93993754a6720c320c5864.exe
[%WINDOWS%]\6754b4f82a22d9a4ae2771c59dc94eca.exe
[%WINDOWS%]\5ebd0c8de901c1bb01c05bb3897f90cb.exe
[%WINDOWS%]\bdd26db97928dc96cbc8ff3ced2fbe26.exe
[%WINDOWS%]\TEMP\wajam_install.exe
[%WINDOWS%]\d76e66c8a705dc023bede57527551a04.exe
[%WINDOWS%]\ed0b36fb0dc61ea6fe26078a13d57e3f.exe
[%WINDOWS%]\cc6e4d747c06a6f25479491e1f7a601e.exe
[%WINDOWS%]\dc6220de952ce906f728d54a50b7b349.exe
[%WINDOWS%]\23dc95a1d051b130f213249c4905ce90.exe
[%WINDOWS%]\8d7c31e61c704ef8b45ec003cd5be505.exe
[%WINDOWS%]\526ecfc1d2ee9bb231df7b11c41ec556.exe
[%WINDOWS%]\767a28e1b3b798395d09c427b8411c9c.exe
[%WINDOWS%]\154b55fddf94acf9a1664892b8effcc3.exe
[%WINDOWS%]\afd1356ac247b49e33fcae3d2652a86b.exe
[%WINDOWS%]\2ecb065c318ee0afcc59ccc4d6285e39.exe
[%WINDOWS%]\25f9231c4120e2f68ab334e09e24dcdc.exe
[%WINDOWS%]\5ccb3eb998288fb4814b69b546263bf8.exe
[%WINDOWS%]\0e00dd19e14a694d284a7d21bb8ef490.exe
[%WINDOWS%]\d1f9a96066d794989ed28c138a18286d.exe
[%WINDOWS%]\adbb6730436528fe263ca2e211dc55e5.exe
[%WINDOWS%]\fd66476a089bf4adb7fbab36c2c723fb.exe
[%WINDOWS%]\ec42ba88c8fdf8a11f3ee7251e17db47.exe
[%WINDOWS%]\0d7a5b402ed2887032875cb7db0b9627.exe
[%PROFILE_TEMP%]\wajam_install (2).exe
[%LOCAL_APPDATA%]\Google\Chrome\User Data\Default\Local Storage\http_www.technologiesainturbain.com_0.localstorage
[%PROFILE_TEMP%]\wajam_download.exe
[%APPDATA%]\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{5a95a9e0-59dd-4314-bd84-4d18ca84b1f3}.xpi
[%PROGRAM_FILES%]\Wajam.off
[%LOCAL_APPDATA%]\Google\Chrome\User Data\Default\Local Storage\http_www.technologiesaintdominique.com_0.localstorage
[%WINDOWS%]\89ecd08214955e1b7fb8e5d3c0c429d7.exe
[%WINDOWS%]\e0db99e1d62c4081fe12650a54538d94.exe
[%PROFILE_TEMP%]\wajam_validate.exe
[%PROGRAM_FILES%]\wajneten.ugnshwwsei.bak
[%PROFILE_TEMP%]\wajam_i_3004.exe
[%SYSTEM_DRIVE%]\TEMP\wajam_install.exe
[%LOCAL_APPDATA%]\Google\Chrome\User Data\Default\Local Storage\http_www.technologiesainturbain.com_0.localstorage-journal
[%PROFILE_TEMP%]\wajam_download_new.exe
[%PROFILE_TEMP%]\wajam_setup.exe
[%PROGRAM_FILES%]\Wajam
[%PROGRAM_FILES%]\WajaIntEnhancer
[%PROGRAM_FILES%]\6230ba570913f5622144858925610178
[%PROGRAM_FILES%]\c2ca82c8b6132329c2f74bec0b0ff03a
[%PROGRAM_FILES%]\2a77ba062c572d64f37f5e3ce921da12
[%PROGRAM_FILES%]\fb8385e48b99af65cd08598a41e8c988
[%PROGRAM_FILES%]\b9abba2e3b2a2108baec2b055c242d36
[%PROGRAMS%]\Wajam
[%PROGRAM_FILES%]\WajaNEnhance
[%PROGRAMS%]\WInterEn
[%LOCAL_APPDATA%]\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
[%PROGRAM_FILES%]\df61a40ae9be1b3208c22795f94830c3
[%PROGRAM_FILES%]\3448e3fd86897b644f91122d60597ac5
[%PROGRAM_FILES%]\9976770635260c9ab96cef7ef78da1a0
[%PROGRAM_FILES%]\1794345c878408275d188b534c319e0c
[%PROGRAM_FILES%]\e6b6b27f76ba88a91a3964aff98363b9
[%PROGRAMS%]\WajInterEn
[%PROGRAM_FILES%]\dff4f6f9209e793f92d67c4c7b697f57
[%PROGRAM_FILES%]\a2edb958cf3baa435e144ec3df741020
[%PROGRAMS%]\WaIEn
[%PROGRAM_FILES%]\WajaIntEn
[%PROGRAM_FILES%]\WNEn
[%PROGRAM_FILES%]\bb93d199e94823dcce0c40447e979199
[%PROGRAM_FILES%]\9f111df246c6b7ef8785ecfec3d7e320
[%LOCAL_APPDATA%]\Chromium\User Data\Default\Local Storage\http_www.technologiestuart.com_0.localstorage-journal
[%PROGRAM_FILES%]\1d95c8579f41cebec9dce67ec010d740
[%PROGRAM_FILES%]\d4e176df84f46b0a72da41d8c2a464a4
[%LOCAL_APPDATA%]\Wajam
[%PROGRAM_FILES%]\e4b9d2244696d5480f7814b3b8160825
[%PROGRAM_FILES%]\f5bb55194519ac4c07579f474d138df9
[%PROGRAM_FILES%]\24e3e433b481d70bbeac1898fcc29f47
[%PROGRAM_FILES%]\bfe5fd5fee59570d6dc95db629d8907d
[%PROGRAM_FILES%]\991824acb2cfc40b604986bd1e5489d4
[%PROGRAM_FILES%]\abeea72a800a06cc6607e948ac6efcf2
[%APPDATA%]\mozilla\firefox\profiles\[%PROFILE_FOLDER%]\Extensions\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}
[%PROGRAM_FILES%]\WajNEnhance
[%PROGRAMS%]\WajNetworkE
[%PROGRAM_FILES%]\WaIntEnhancer
[%PROGRAM_FILES%]\f7d6965d9108ea12c683860916d52c16
[%PROGRAM_FILES%]\a2e8609c0cced63c88fd0c303a581514
[%PROGRAM_FILES%]\d2ff0f7ea4be6faf7809d9ae758289db
[%PROGRAM_FILES%]\WaInterEnhancer
[%PROGRAM_FILES%]\a615a8bc5a9299e4af3c880ed6694edf
[%PROGRAM_FILES%]\d5813f723ac975961519e68fc8f5177c
[%PROGRAMS%]\WaNEn
[%PROGRAM_FILES%]\9eb894080ab3a2511b9a533dc86723ad
[%PROGRAM_FILES%]\2515d06d33b1c775a346e132c906b6ea
[%PROGRAM_FILES%]\fd73daec8bd7dd568c1f3f77daf376d2
[%PROGRAM_FILES%]\071b5a2ecb5090d05249eecef6e581ac
[%PROGRAM_FILES%]\24f711595461ec1ccc627895be1b0ce7
[%PROGRAM_FILES%]\66c70c94d45ee12813ade3b3ae719db5
[%PROGRAM_FILES%]\c5f46831eff1df3ed92649c2d678906f
[%PROGRAM_FILES%]\06e8b7c8b66fda3c4322cad641ebdaec
[%LOCAL_APPDATA%]\Google\Chrome\User Data\Default\Local Storage\http_www.technologiesirwilfridlaurier.com_0.localstorage-journal
[%PROGRAM_FILES%]\308723c6c53b5fa4c5cbc429deb1c91b
[%PROGRAMS%]\WajIEn
[%PROGRAM_FILES%]\1327fe757d66a5e3498f04d1d72f157b
[%PROGRAM_FILES%]\WInterEnhancer
[%PROGRAM_FILES%]\39037776813d65b093edf5899ab414e4
[%PROGRAM_FILES%]\5a8361f7256c511df43ce05576925c0d
[%PROGRAM_FILES%]\340b595290975e651b2ffa3dccc5c1f9
[%PROGRAM_FILES%]\f4023145f00856d5704b451b550a6137
[%PROGRAM_FILES%]\646d28a520c800a7b8abad7eb88f8318
[%PROGRAM_FILES%]\c6883d98cd19e2c5cb5459c354b02f3d
[%PROGRAM_FILES%]\23fd1ba33fbe71eef355a176d566d363
[%PROGRAM_FILES%]\c98d8626cf3f77d9347fd9e80e34d20a
[%PROGRAMS%]\WajWebE
[%PROGRAM_FILES%]\caf87909e577549635cbdef492e8668d
[%PROGRAM_FILES%]\174f94a6786cda95f9f459ff0bdf2440
[%PROGRAM_FILES%]\9401ccafc580d18802519ef0566ef61d
[%PROGRAM_FILES%]\b56e9a7bcd6758008122fd25dc683a66
[%LOCAL_APPDATA%]\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jpmbfleldcgkldadpdinhjjopdfpjfjp_0.localstorage-journal
[%PROGRAM_FILES%]\3c9defe9a24f2c840db21889f4cd62e4
[%PROGRAM_FILES%]\570a7b3f8634eb0eca264e78605de9f1
[%PROGRAM_FILES%]\b5f1055467cd37503f514461276dad54
[%PROGRAM_FILES%]\46a473e8a86f8bf4e67b184543ecacf4
[%PROGRAM_FILES%]\b5127cc1cb21ae4fd1a8f9429bfe8fff
[%PROGRAM_FILES%]\WaInternetEn
[%PROGRAM_FILES%]\d15300a1a866501b4a1b3c9ac6e938c4
[%PROGRAM_FILES%]\2a5529b7f5a569c9713c850457f1e3a2
[%PROGRAM_FILES%]\3fa6e7b59d44dd47b8fabcc2f26e4c51
[%PROGRAM_FILES%]\6fdeb1a4028da82bb71990fb1cb226b2
[%PROGRAM_FILES%]\659a542a51b28d7362011029563e8a93
[%PROGRAM_FILES%]\9ee99b1a38963165df70dc27f053d2ca
[%PROGRAM_FILES%]\353a2a8aa522a25ea1ee4e1c5700c2b2
[%PROGRAM_FILES%]\86add30940d866ea891ab5307ae5c726
[%PROGRAM_FILES%]\11b3924cfec91dceb2db9e418e8761a5
[%PROGRAM_FILES%]\a67c3bbc6aff3e591924a5263090ca8b
[%PROGRAM_FILES%]\86c33aad3ef033b6a5f9a64ff6ded935
[%PROGRAM_FILES%]\c2d6e652650e1e9a6709c3d738acfc72
[%PROGRAM_FILES%]\3c2976eb1afc926a59e9b0d7e0d4e7bf
[%PROGRAM_FILES%]\e10e142ac10ff1eebda88f74271c684a
[%PROGRAM_FILES%]\9fbcdcbf7a4e4ea930caea6cd6460688
[%PROGRAM_FILES%]\b7d31512c8d5e01b5823ea8ce4e16afd
[%PROGRAM_FILES%]\WaIEn
[%PROGRAM_FILES%]\39d02b6fa0fc516e15ba0b833de3488f
[%PROGRAM_FILES%]\6af37a585778bf5aacc03f12e93da87e
[%PROGRAMS%]\Wajam Web Enhancer
[%PROGRAM_FILES%]\8269daf7e9495a2c16d119ee11123416
[%PROGRAM_FILES%]\WaInterEnhance
[%PROGRAM_FILES%]\WajNetEn
[%PROGRAM_FILES%]\ab7ef2e956c97599730ad0c9f02deac8
[%PROGRAM_FILES%]\961847b8eb69d686dcf1c9db934f23fc
[%PROGRAM_FILES%]\1966181a69e2e95e5f4fbf3f5bf23650
[%PROGRAM_FILES%]\faa0d1cb5d759bed228412e9873a5011

How to Remove Wajam from the Windows Registry^

The Windows registry stores important system information such as system preferences, user settings and installed programs details as well as the information about the applications that are automatically run at start-up. Because of this, spyware, malware and adware often store references to their own files in your Windows registry so that they can automatically launch every time you start up your computer.

To effectively remove Wajam from your Windows registry, you must delete all the registry keys and values associated with Wajam, which are listed in the Registry Keys and Registry Values sections on this page.

IMPORTANT: Because the registry is a core component of your Windows system, it is strongly recommended that you back up the registry before you begin deleting keys and values. For information about backing up the Windows registry, refer to the Registry Editor online help.

To remove the Wajam registry keys and values:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK.
    The Registry Editor window opens. This window consists of two panes. The left pane displays folders that represent the registry keys arranged in hierarchical order. The right one lists the registry values of the currently selected registry key.
  3. To delete each registry key listed in the Registry Keys section, do the following:
    • Locate the key in the left pane of the Registry Editor window by sequentially expanding the folders according to the path indicated in the Registry Keys section. For example, if the path of a registry key is
      HKEY_LOCAL_MACHINE\software\FolderA\FolderB\KeyName1
      sequentially expand the HKEY_LOCAL_MACHINE, software, FolderA and FolderB folders.
    • Select the key name indicated at the end of the path (KeyName1 in the example above).
    • Right-click the key name and select Delete on the menu.
    • Click Yes in the Confirm Key Delete dialog box.
  4. To delete each registry value listed in the Registry Values section, do the following:
    • Display the value in the right pane of the Registry Editor window by sequentially expanding the folders in the left pane according to the path indicated in the Registry Values section and selecting the specified key name. For example, if the path of a registry value is
      HKEY_LOCAL_MACHINE\software\FolderA\FolderB\KeyName2,valueC=
      sequentially expand the HKEY_LOCAL_MACHINE, software, FolderA and FolderB folders and select the KeyName2 key to display the valueC value in the right pane.
    • In the right pane, select the value name indicated after a comma at the end of the path (valueC in the example above).
    • Right-click the value name and select Delete on the menu.
    • Click Yes in the Confirm Value Delete dialog box.
HKEY_CURRENT_USER\Software\WajIEnhance
HKEY_LOCAL_MACHINE\SOFTWARE\Social2Sea Browser Enhancer
HKEY_CURRENT_USER\Software\WajIntEnhance
HKEY_LOCAL_MACHINE\Software\WajIntEnhance
HKEY_CURRENT_USER\Software\SimplyTech\HomeTabWajIEnhance
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance
HKEY_LOCAL_MACHINE\SOFTWARE\WInterEn
HKEY_LOCAL_MACHINE\Software\WajNetEn
HKEY_CLASSES_ROOT\AppID\priam_bho.DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ESENT\Process\InternetEnhancer
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\b42b2eca3daee25b8ca932c71f22604c
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\wajam_install_RASMANCS
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\wajam_install_RASAPI32
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WaNetworkEnhancer Service
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\445f77179109f59ed995d321fbc83d09
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\f01bbe8e3b679d87e0e354eeffd2147a
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\6230ba570913f5622144858925610178
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\3296b21a0aa07b1dd550805b8453c3e7
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\a666c99a029037ea90aa9ba0b53de3c2
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\20bf4a4de9daa937818b0f2fe407a813
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\1a6ba9f14669b640e2e351ee569e7f33
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\c98ac9d5ac2cf1863cb58c5c5372c62a
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\18c242e1719db6c606325cea18d07aa6
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\2a77ba062c572d64f37f5e3ce921da12
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\b0787aa79ab96968c0d27a0fcdf4fa96
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\9c1f0aa4f8dbeac0af87f9df71dbecf3
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\d54c20356c27e385d7498b16d0fe09b9
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\0ea98594cfc3aecd5d5b01e18c7aad5d
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\b372404db9fd00658cb6ed5837ae22a3
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fb8385e48b99af65cd08598a41e8c988
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\90ffe7e22c15c63179e6278d8db42fdf
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\9b142b9b6f557237cfef960c8c0f4ad5
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\2dd406ef233679cde7dcf649e58987de
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\274af0a5bb68e9cc03ff9c2691b167c6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ESENT\Process\WajamInternetEnhancer
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\aba88de2f13504a37b7a14f61f68ccba
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\70dae948f5d4cc6f618d0237d9d6817e
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\1c61abd5deedd3d4a744a08752ae3571
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\aaf01e2de05c1bf17f9df0973e991917
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\9e2eb11ce03cd8e949b52a31317e79fd
HKEY_CURRENT_USER\Software\Wajam
HKEY_LOCAL_MACHINE\SOFTWARE\Wajam
HKEY_LOCAL_MACHINE\Software\WajaNEnhance
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\5b49efc93c96db9ef70e1db4d8f0ba70
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WajaNetEn Monitor
HKEY_LOCAL_MACHINE\Software\WajaNetEn
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\1bb76aa159b9c69f2fbe215faa32952e
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\5012f9491120386311bf5de186843a1f
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\708c24cc00512919fd408701c605f114
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\9cc0781c7c5362fb8207e5c4ceac856f
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\5fcbfa70c48533f8853964de638ef8fb
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\7c2c28c810e7772c9d898e7fde3e2d00
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\8110a0079703c78231441ea639d8d52d
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fa42aa264c6b9ebc1b103d1a1c9d2788
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\9afa5fb336c135e6e1e03e2f2557de81
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\6cf0c43f65d4f19e16ff3e8506260a46
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\2f4bc6ea164ea572f234b2f40211672f
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\3448e3fd86897b644f91122d60597ac5
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\03f79b5f23a3361b6fd7d4abc7502264
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\9976770635260c9ab96cef7ef78da1a0
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bb979d1894c3543728c94837681e6fe0
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\d05a0dccbae2399f7c6577252276ba61
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\2672e8e9e7c25a2d794e2ef324398abe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\0ea7306c4286c36296d1f96a46a95106
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\53e5c07b92aa9610cfdc0cdf6c6035d8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\wajam_download_RASMANCS
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\wajam_download_RASAPI32
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\48aefbaaba12fab0eff28058f9847c5a
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\4fd30166eaeeb9bddef2e050a9c3b5d6
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\7c5144be8966405d9589979bb1a32f56
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\2af5ccbc8073eb2c7aa74f38f689d2ec
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\2bf3fa3dae57e67f4094a83ee9e1f927
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\02435aa2bc966646190e52fb6a21e2b5
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\a44ac382723a7f3ab6143812899e97bb
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ce267c4564a7271a6eed5e785f7bdc25
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\89a34b50e9ace23462de7822eb5a7f90
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\9cb767b3846e200c612708a04d357033
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WajaNEn Monitor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\b815c815d1a96c44b1969d64bea10823
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\3954bf97d9c38e67df7ee9b269eb78c9
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dbf2b2972491fc21a4655f6b10a3e873
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ef5a357f9d5529cdfb0f45483f6d758d
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\7d825258e4526635a1dd19a2d1b42602
HKEY_LOCAL_MACHINE\Software\WNen
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XeroxPrintJobEventManagerService
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\e265aeac8e674741f77051257b69b497
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ce26b336158fd1dd59128371bbb30775
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\e8977df6c518dacc703885ddf83a1672
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bd04b027b0d748dda144fe86e8f486f1
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\a56ddda8839d710e8482d17461ab5e8c
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\82fcf42278632c0e6f9fc6dd4c6c06ec
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\e9e10e29223dede906356a6a69e9ae10
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\1056cbfabfc9cbfe17240aedefc0b5c6
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\d112c095b215bd7bb4cffd7fe57ec0b1
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\6be303d079dde910c3fbf6d9cbf7c18b
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\6c9a16e70fefc3cf2931ac0acc1a7bfc
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\0f779c84125bf2041afc23d37272dda7
Registry Values
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\185f04679937d8a2d9784cb299300e4b]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\185f04679937d8a2d9784cb299300e4b]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\a1a5183c757be246a12652b5e83ab9a0]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\a1a5183c757be246a12652b5e83ab9a0]DisplayName=Wajam
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}=[%PROGRAM_FILES%]\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\24e3e433b481d70bbeac1898fcc29f47]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\24e3e433b481d70bbeac1898fcc29f47]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\98cb0de43f50e600482f145677605357]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\98cb0de43f50e600482f145677605357]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\0ff51a24cd6f2ab8d0d2ade65a30603f]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\0ff51a24cd6f2ab8d0d2ade65a30603f]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\0222ebf6dd82a518b85976839c90cbcc]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\0222ebf6dd82a518b85976839c90cbcc]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\463fa8fbacdaf4adb19827a60913c3dc]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\463fa8fbacdaf4adb19827a60913c3dc]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\b56e9a7bcd6758008122fd25dc683a66]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\b56e9a7bcd6758008122fd25dc683a66]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\3192b1398cc646a218f96d35e2dcd7c4]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\3192b1398cc646a218f96d35e2dcd7c4]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\f27a343abd4d79b024a9091dd42fe155]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\f27a343abd4d79b024a9091dd42fe155]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\a0821fe65945f64b9e7aeb47ca614543]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\a0821fe65945f64b9e7aeb47ca614543]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\b1a78465ba5fc97e74a50b252136a8fa]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\b1a78465ba5fc97e74a50b252136a8fa]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eff833091068a59c6c6f644653e11817]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eff833091068a59c6c6f644653e11817]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1c04b63fb89a86a1fcbf00852a6b8044]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1c04b63fb89a86a1fcbf00852a6b8044]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\2d2285c0d35b0379e2030ffd30d41576]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\2d2285c0d35b0379e2030ffd30d41576]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\005a8ed9ec73ffabf9fd00b359f1c64a]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\005a8ed9ec73ffabf9fd00b359f1c64a]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\69cbaf60fc73e553f448ad7e9b6c08b7]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\69cbaf60fc73e553f448ad7e9b6c08b7]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\006af41780c5ec40fba485f67cdf85f6]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\006af41780c5ec40fba485f67cdf85f6]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\f319ee3471d99472631a0f5fd88e7b9c]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\f319ee3471d99472631a0f5fd88e7b9c]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\e4c0faf118079d73afe2fe3c9741942d]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\e4c0faf118079d73afe2fe3c9741942d]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ff41bf6d1d33fdb5f692813b0dc0cea6]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ff41bf6d1d33fdb5f692813b0dc0cea6]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eaf43d59788376f5b5f3eea95aee2f61]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eaf43d59788376f5b5f3eea95aee2f61]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\83feaec7f591ef799441d3672190f036]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\83feaec7f591ef799441d3672190f036]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\c30d7655b364053d8c8fadcd9d9c179d]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\c30d7655b364053d8c8fadcd9d9c179d]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\6507dd0072a4b4cf20215e1af3d4e8e6]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\6507dd0072a4b4cf20215e1af3d4e8e6]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\b7df5f3344344f56184d298c7833db8c]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\b7df5f3344344f56184d298c7833db8c]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\11553cfbd045fb5a2a734aa74f0ab5ab]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\11553cfbd045fb5a2a734aa74f0ab5ab]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\9657e49dd22e220f2f362cd554dcd7b0]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\9657e49dd22e220f2f362cd554dcd7b0]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\260ffb7419f87afa73519eba314fe4b6]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\260ffb7419f87afa73519eba314fe4b6]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\a1e5d976474e447f17ec08e97156ccc4]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\a1e5d976474e447f17ec08e97156ccc4]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\c4d2b89db7e67380eec21c0f4d4e7d59]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\c4d2b89db7e67380eec21c0f4d4e7d59]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\507bb25d5f57d23976633c6393f6e44f]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\507bb25d5f57d23976633c6393f6e44f]DisplayName=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\25f0a2d5484a4cfad306c5b9f57060a2]Publisher=Wajam
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\25f0a2d5484a4cfad306c5b9f57060a2]DisplayName=Wajam

PUA

These are programs that are being installed on the system often without a user's knowledge or approval.

Be Aware of the Following PUA Threats:

LyricsWatch, QuickVideoPlayer, DriverUpdatePlus, HoistSearch, SpaceOffers.

How Did My PC Get Infected with Wajam?^

The following are the most likely reasons why your computer got infected with Wajam:

  • Your operating system and Web browser's security settings are too lax.
  • You are not following safe Internet surfing and PC practices.

Downloading and Installing Freeware or Shareware

Small-charge or free software applications may come bundled with spyware, adware, or programs like Wajam. Sometimes adware is attached to free software to enable the developers to cover the overhead involved in created the software. Spyware frequently piggybacks on free software into your computer to damage it and steal valuable private information.

Using Peer-to-Peer Software

The use of peer-to-peer (P2P) programs or other applications using a shared network exposes your system to the risk of unwittingly downloading infected files, including malicious programs like Wajam.

Visiting Questionable Web Sites

When you visit sites with dubious or objectionable content, trojans-including Wajam, spyware and adware, may well be automatically downloaded and installed onto your computer.

Detecting Wajam^

The following symptoms signal that your computer is very likely to be infected with Wajam:

PC is working very slowly

Wajam can seriously slow down your computer. If your PC takes a lot longer than normal to restart or your Internet connection is extremely slow, your computer may well be infected with Wajam.

New desktop shortcuts have appeared or the home page has changed

Wajam can tamper with your Internet settings or redirect your default home page to unwanted web sites. Wajam may even add new shortcuts to your PC desktop.

Annoying popups keep appearing on your PC

Wajam may swamp your computer with pestering popup ads, even when you're not connected to the Internet, while secretly tracking your browsing habits and gathering your personal information.

E-mails that you didn't write are being sent from your mailbox

Wajam may gain complete control of your mailbox to generate and send e-mail with virus attachments, e-mail hoaxes, spam and other types of unsolicited e-mail to other people.