whaimager

I have AVG and ran it.
...found nothing

I have Adware and ran it.
...found nothing

I'll try SpyBot.

Aaaaaaarrggggghhh!!!!

jerelw,
  Have you ran Spybot Search and Destroy?

Do you have Windows XP and the popup is coming from Messenger Service? If so, disable Messenger Service, The Messenger service is typically not needed for home users.

Right-click My Computer and click Manage.
Fold out the Services and Applications option and click Services.
Right-click the Messenger entry, select Properties, and choose Disable under Startup Type.
Click OK.

You should no longer receive messages sent via the messenger service.

I'm on Windows 2000.

The 'whaimager' pops up when ever I open ANY window be it windows explorer, or a pop of banner from any web page.

This is seriously slowing down my computer...

I don't think I am receiving anything, but I'll shut down the messenger service.

There's another little gem in fighting those pests. SpywareBlaster. You can find it here:
http://www.wilderssecurity.net/spywareblaster.html

Hope this will do it.

I am going to try this, too.

http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&oe=UTF-8&threadm=ecb7b4a8.0306142120.3c0af36a%40posting.google.com&rnum=1&prev=/groups%3Fq%3Dwhaimager%26ie%3DUTF-8%26oe%3DUTF-8%26hl%3Den

Hah!

This is from the actual idiot who cost me two days!

Notice how there is no contact.

I wonder if 'Rob' has his own product installed on his workstation?

Dir Sir or Madame,

The whazit.com software was installed on your computer when you accept
to run our software from an activex security window.
The whazit.com software was installed on your computer only after you
accepted our eula/terms and conditions.
That whazit.com software is removable from www.whazit.com/help.html,
or in your control panel, add/remove programs
AT NO TIME WERE YOU FORCED TO INSTALL WHAZIT.COM software.
the EULA you accepted is at www.whazit.com/help.html
Whazit.com is a legitimite software company owned by windows media
solutions, Inc., and runs itself based on reasonable practices
idealized by the creator of the company.
Whazit.com does not force itself on your computer, and there should be
an add/remove programs/uninstall entry in your control panel.

Thank you
Rob
Whazit.com

fyi - I started removing registry entries and found that each entry refrerenced another entry and another entry, and so on.  
It took about a day, but the pop ups are gone.  My computer is noticably faster, too.

jerelw,
   Glad the adware is gone. Spybot S & D should have this adware identify soon and be able to remove it. Change your Internet Explorer settings so that install on demand is not enable. From the Internet Toolbar, go to Tools > Internet Options > Advanced.  Make sure "Enable Install On Demand (Internet Explorer)" and "Enable Install On Demand (Other)" are unchecked.

Can you please help me how to remove it by using the regedit please!!!!

Have a look at this ongoing thread.  It looks like they've had some success:

http://www.experts-exchange.com/Applications/Viruses/Q_20647773.html

Oh gee, excuse me, I posted this in the wrong place! :(

thx wildfire_kills

hi,

i have the same problem, "whaimager" message.
But i have try spybot, lavasoft Adware, and i have do what you said to remove from register but i still receiving "message", I have not remove It yet.
what can i do?
Thx

Manu

Manu-

Sorry I neglected to mention that you must also delete these files from you hard drive as well:  whattt.dll and newones.dll
I found the files in c:\windows
After you delete these files, check your registry one more time to see if you missed anything.  When I did this, I ended up missing a couple files in the class libraries.

Best of luck

Wildfire

Just wanted to say that I had this virus, I deleted all the files from the backup registry and my HDD and it worked. So thank you everybody!

I wasn't able to delete whattt.dll and newones.dll from c:\windows. It responds with a message saying that windows is using them. Still getting pop up error message. I actually wrote support@whazit.com to see what they would say. This is what I wrote:

"Tell me how to remove these 2 dll files from my Windows directory - whattt.dll & newones.dll. Whenever I try to delete them I get an error message telling me that windows is using it & it cannot be removed. Everywhere I go I get error messages saying: "Whaimage: Runtime error 9: Subscript out of range. " It is extremely difficult to remove every part of your software. If you believe in what you are doing & that you are helping people then please help me."
Let's see if they respond at all!
Meanwhile, how do I delete these? So far, I've tried everything mentioned in this thread........

Here is their response [& my counter]:
--- support@whazit.com wrote:
"Thank you for your email, It will be databased for future use later on.
 In the meantime, If you had a question regarding one of our products, please visit
 http://www.whazit.com/help.html
 
There are automatic, AND MANUAL removal instructions on that page.  If you can not manage to remove the software automatically, with our uninstaller, and still wish to remove the software from your computer, PLEASE use the manual uninstalation instructions.
Thanks      whazit.com"

"Hey Whazit:   The link you offered: http://www.whazit.com/help.html is not accessable. Neither is the manual remove link offered on your webpage: http://www.whazit.com/manualremove.html. No go with either link. I wonder: Are you actually interested in helping me?"
Pretty funny stuff, huh?

Similar thread at this site: http://www.windowsbbs.com/showthread.php?s=&postid=96112#post96112
This led me to download a program called "Hijack This" which allowed me to delete the 2 dll's & problem solved!
Link to Hijack this [free download]: http://www.spywareinfo.com/~merijn/files/hijackthis.zip
No more error mesages. Hope this helps someone.

Similar thread at this site: http://www.windowsbbs.com/showthread.php?s=&postid=96112#post96112
This led me to download a program called "Hijack This" which allowed me to delete the 2 dll's & problem solved!
Link to Hijack this [free download]: http://www.spywareinfo.com/~merijn/files/hijackthis.zip
No more error mesages. Hope this helps someone.

Delete the 2 dll files is very easy.
U must restart in MS-DOS mode. In "windows" directory, u delete the 2 files and that's all.
u dont need to download any soft.
bye

Thanks for this - I used the hijack program and (even with my moderate intelligence) it worked well - but it sure was annoying - many thanks

Guys, you've been a great help.

I started to have this problem after my brother got off the computer for the night (younger brother.  This is always the case!)

Anyway, same problem as stated above.  Ran Ad-aware on my own, found a whole bunch of stuff but not what was causing the whaimager error problem.

Eventually found you guys through a search and downloaded Hijack This (thanks for the link, Glad2bHere!!)

Now it's gone.  What a crappy morning :P  But you guys made it better!  I'm glad places like this exist on the internet - I couldn't have done it without you people :D

Thanks again!

NinjaFetus

Hey all, i don't have anything useful to say, i just wanted to let ya know that hijackthis program worked great i was getting that stupid message to (i got it from outwar.com, one of their offers to get points was that whazit crap) it was killing me, and i am a moron so i tried gettin rid of it myself with no luck, but thatnks for all the help guys.

Halz5

Just some more additional remarks (btw.: thank you guys for your help, my computer improved a lot after I had done whay you said):
1) I didn't have newones but outones, so that is already a new one to delete :s
2) DON'T RUN THE UNINSTALL FROM THE HELP OF WHAZIT!!!!! It made my computer crash (comp starts up, goes to the whole loading stuff, and just before the desktop appears, my comp shuts off and shows: "You can now close your comp down")
so don't install that prog.  I wrote a really big complaint to whazit, no reaction so far.
and tnx again for all your help

Centaur

Hi

I had the same problem.  and finally I found this website with all your usefull information.

I got it from this idiot website ourwar.com, ofcaurse my kids' business.

using the hijackthis program I managed to delete the two dll files, and everything looked perfect
even after restrating the computer.

but watch it ...... surprise.... After 24 hourse this anoyying error message poped up again...

and again I deleted this two dll files.

now everything look ok

but what if.... tomorrow it will pop up again ?

what does it mean ?

any help ?

and last Q - is it a virus ??

thanks

Here you go. This will take care of it ALL.

http://www.spywareinfo.com/articles/whazit/

jerelw,
   We have not heard from you in awhile. Do you still have the whaimager problem?

Here are the two plugins that you need to delete.

Download HijackThis

http://www.spywareinfo.com/~merijn/files/hijackthis.zip

These are two new Whazit browser plugins.

In Hijack This, check the following items.
Next, close all browser Windows, and have HT fix all checked.

You NEED to restart your computer when you're done.

O2 - BHO: (no name) - {267D5BD3-0DC2-4724-A196-7F4794FBB9EB} - C:\WINDOWS\OUTONES.DLL
O2 - BHO: (no name) - {66F67511-2665-4C34-9E20-FAC2C0954EF2} - C:\WINDOWS\WHATTT.DLL

Hijack This will unregister the dlls and subsequently delete the files.

Ok,

I ended up deleting every registry key that had anything to do with the whazit programs.

Now I don't have any pop ups at all.

I can't even get a pop up when I need one.

I also have to manually install everything from windows update because I don't have any pop up functionality to confirm anything.

But that's not a problem.

Since switching to opera, my virus and spyware scans are ALWAYS clean!

I am going to split the points to everyone who contributed.

Is that all right?

jerelw,
  It's up to you how you want to split the points. But the minium split is 20 points, so you cannot give points to more than 2 different comments.

OMG!!!!!!!  You people have brought me to tears. LITERALLY!!! I've been fighting this for a week. I even did a reformatting of my system. That worked for a couple of days and then it was back. My sons play outwars, the one entry in this thread mentioned getting it from outwars and now I know where it came from. Well the link for highjackthis was a godsend. It worked like a dream. I tried every step you people gave in here. I did the registry, still gave the popup, I tried the deleting of those two files, could not delete,  (by the way, I think the name of the one file greatly depends on where you picked whazit up from, I got my stupid whazit attached from outwars so my second file was the outones.dll, my thought is that wherever you picked the whazit up the beginning of that site is the beginning of the dll file.) So anyone who got this and knows the site from which it came, if you cannot find the exact files named in the thread above, look for one that reads (thesite)ones.dll.
Just a thought but it may work for you.
THANK ALL OF YOU VERY, VERY MUCH.
YOU'VE MADE MY DAY. btw. like a fool, and being a newcomer to this site, I alread posted my question(which was this problem) then I found this thread, So please disregard my question. It was a wst of 125 points, but in truth, well worth it .
SMILING EAR TO EAR TONIGHT.
BLUEEYEDFOX

Hi to all,

Am I glad I typed "whaimager'' into my Google search and found you guys!!! Unlike some of you, I have only just encountered (over the last couple of days) this annoying piece of garbage. I followed the instructions provided by war1 and all is fine now.

Lately, I've also been getting those rotten toolbars, the ones you get when you install freeware etc, appearing in my IE toolbar list. I've been able to remove those permanently with HighJackThis as well.

Anyway, keep up the good work you guys. Your help is extremely valuable to us whohave little knowledge of computers and, it seems, even less knowledge of all the hidden traps of the internet.

THANKS A MILLION

sw_1500

blue eyed fox and sw_1500 I completely agree with everything youve said. I got hijack this, and it worked great No more little pesky window.  I so happy im dancing around like a little fairy girl.  you guys should be given some kind of award

Someone should take legal action against whazit.

The fact is that regardless of contract, there has to be some kind of recognition that a contract is being signed and the details of it must be clear at that time.  If so many people are "accidentally" getting whazit...That is really not a contract because it doesn't meet any of the legal definitions of how contract law actually works.  Simply clicking agree, when either no other choice is presented, or the choice is presented under duress can be skewed in court as not providing fair choice in regards to the contract...

So...my suggestion would be that it whazit.com needs to change their ways...or...someone file a lawsuit.  The best you'd be able to do is shut them down, or get their software regulated (which is more likely)...but you would be a hero of the day on the internet.  Clearly the problem is pretty rampant and is spawning other "less appropriate" versions.

Just because I know how to create a killer virus doesn't mean I should create it.  And just because I know how to use a gun doesn't mean I have to use one.  According to whazit, because they have a product means they have to implement it, and because they presented a "choice" means they don't have to apologize...which is wrong.

Yall can just add my name to the number of people that got all screwed up with this whazit/whaimager bs.  

It took me about two days to get rid of it - and here's how i went about doing it:

1. I scanned for viruses, which didn't work
2. I found this website
3. I went to my CONTROL PANNEL and clicked ADD/REMOVE PROGRAMS and removed the whazit related progs.
4. I went to http://www.spywareinfo.com/~merijn/files/hijackthis.zip to download HIJACKTHIS
5. Using HIJACKTHIS, i located to two .dll files (one was outone.dll the other was whattt.dll)

Thanks for all of you who posted this information - so everyone else that's looking here for help, trust me - this method works!

I am new to this site and what it`s all about.I do want to say I`m glad it exists!!!I have been trying{unsuccessfully} for a week to rid myself of this WHAIMAGER thing.I`ve had it for about 10 days and tried numerous pop-up blockers as well as my Nortons Systemworks...........no luck.To be quite honest I`m not too sure how it even came to be on my computer.My sister says that will teach me for downloading so much!!!It was sooooo annoying!! I think it`s gone now with the advice from many of you helpful people and I thank you all VERY MUCH.
 I tried several of your differnt tactics and through all that I think I`ve finally been freed.Funny though how the Whazit help file does not exist any more.I think someone was messing around with peoples computers too much and is trying to hide.
  I`m a novice on the net or computers for that matter,but you all sound very hearsed in these things and I hope one of you or someone out there gets these people.It`s not right or fair , what this person or people are doing.I have a 2 year old that plays games on Nick.jr and he was so frustrated by this thing.
  Enough rambling...............THANK YOU ALL FOR YOUR ADVICE.
 BTW>>> it was the HIJACKTHIS that enabled me to remove the 2 dll`s {outone. and whattt}
  The link I used was from MACKERMAN for the program http://www.spywareinfo.com/~merijn/files/hijackthis
THANKS ALL!!!

Hi to you all, and thank you.

Before you download "hijackthis" try to restart, or shutdown and turn on your computer.

After this you should be able to delete the two files.


                                          Thank you all !