Whilokii

Whilokii Description

ScreenshotWhilokii is an adware that is associated with numerous irritating advertisements and redirects. Active since at least Fall of 2013, Whilokii is classified as a PUP, or Potentially Unwanted Program. Computer users have reported that Whilokii may display pop-up advertisements on the search pages of popular online retailers. Computer users have also complained that Whilokii displays a barrage of unstoppable advertisements on the affected Web browser. Although not classified as a threat, Whilokii advertisements may be extremely irritating and disrupt a computer user's online activities. Security researchers strongly recommend the immediate removal of Whilokii in order to stop the advertisements and redirects associated with Whilokii.

The Advertisements and Redirects Caused by Whilokii May Become an Annoyance


Whilokii is presented as a plug-in for your Web browser. Whilokii may affect most Web browsers on the Windows platform, including the three most popular: Google Chrome, Internet Explorer and Mozilla Firefox. Security researchers consider that Whilokii is an adware infection. This is due to the fact that Whilokii's main goal is to display advertisements and sponsored affiliate marketing links on affected Web browsers. To stop symptoms associated with Whilokii, it is necessary to remove the Web browser extension responsible for these symptoms. Whilokii may be removed manually using the Windows Control Panel or your Web browser's plug-in manager. However, traces of Whilokii may remain on your Web browser. In these cases, it is strongly recommended using a reliable anti-malware program to scan your computer as part of the removal of PUPs like Whilokii.

Besides Unwanted Advertisements and Reirects Whilokii May Cause Other Issues


Although Whilokii is marketed as a way to compare online offers and obtain discounts and passwords, computer users will find that Whilokii may display numerous advertisements and coupons that are mostly useless and result in negligible advantages, while allowing a third party to profit at your expense. Whilokii displays numerous pop-up advertisements, adds content to your main Web browser window, causes your Web browser to crash frequently and prevents you from accessing certain websites. Because of this, malware researchers strongly advise Whilokii's immediate removal from the affected PC.
Aliases: Adware/Win32.Downloader [AhnLab-V3] and ADW_WEBSEARCH [TrendMicro-HouseCall].

Infected with Whilokii? Scan Your PC for Free

Download SpyHunter’s Spyware Scanner
to Detect Whilokii

Security Doesn't Let You Download SpyHunter or Access the Internet?


Solutions: Your computer may have malware hiding in memory that prevents any program, including SpyHunter, from executing on your computer. Follow to download SpyHunter and gain access to the Internet:
  • Use an alternative browser. Malware may disable your browser. If you're using IE, for example, and having problems downloading SpyHunter, you should open Firefox, Chrome or Safari browser instead.
  • Use a removable media. Download SpyHunter on another clean computer, burn it to a USB flash drive, DVD/CD, or any preferred removable media, then install it on your infected computer and run SpyHunter's malware scanner.
  • Start Windows in Safe Mode. If you can not access your Window's desktop, reboot your computer in 'Safe Mode with Networking' and install SpyHunter in Safe Mode.
  • IE Users: Disable proxy server for Internet Explorer to browse the web with Internet Explorer or update your anti-spyware program. Malware modifies your Windows settings to use a proxy server to prevent you from browsing the web with IE.

If you still can't install SpyHunter? View other possible causes of installation issues.

Technical Information

Infection Statistics


Our MalwareTracker shows malware activity across the world. Explore real-time data of Whilokii outbreaks and other threats from global to local level.

File System Details

Whilokii creates the following file(s):
# File Name Size MD5 Detection Count
1 %ProgramFiles(x86)%\Whilokii 86
2 %TEMP%\~nsu.tmp\Au_.exe 212,279 cdd3ad36723e7a2c19fc50d518ce7a91 27
3 %TEMP%\is2036094744\1311122_stp\whilokii_is.exe 202,832 655d2f50763b7f9370ebbf9ddad80555 17
4 %PROGRAMFILES%\Whilokii\Whilokiibho.dll 249,624 bf0957a4a0254445204060b64bc40671 8
5 file.exe 284,752 d5e311616d27443a22c6d76f4488a935 4

Registry Details

Whilokii creates the following registry entry or registry entries:
HKEY..\..\..\..{RegistryKeys}
Software\Whilokii
SOFTWARE\Wow6432Node\Whilokii
SOFTWARE\Wow6432Node\Google\Chrome\Extensions\iaimhpklononapfjngelgdokckfjekfc
SOFTWARE\Google\Chrome\Extensions\iaimhpklononapfjngelgdokckfjekfc
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{204df522-9a96-4a72-abb0-60f7a216d6d2}
SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{204df522-9a96-4a72-abb0-60f7a216d6d2}
SYSTEM\ControlSet001\services\eventlog\Application\Update Whilokii
SOFTWARE\Wow6432Node\Microsoft\Tracing\updateWhilokii_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\updateWhilokii_RASMANCS
SOFTWARE\Microsoft\Tracing\updateWhilokii_RASAPI32
SOFTWARE\Microsoft\Tracing\updateWhilokii_RASMANCS
HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}
Whilokii
The following CLSID's were found:
HKEY..\..\{CLSID Path}
{204df522-9a96-4a72-abb0-60f7a216d6d2}
{8B0295E2-967E-439E-9560-807D9F625B57}
{AB4DA692-F26B-403C-AF8F-FD87D121F8F1}

Site Disclaimer

Leave a Reply

IMPORTANT! To be able to proceed, you need to solve the following simple math.
Please leave these two fields as-is:
What is 7 + 7 ?