Whilokii

Threat Scorecard

Ranking: 9,459
Threat Level: 20 % (Normal)
Infected Computers: 9,952
First Seen: October 7, 2013
Last Seen: September 14, 2023
OS(es) Affected: Windows

Whilokii Image

Whilokii is an adware that is associated with numerous irritating advertisements and redirects. Active since at least Fall of 2013, Whilokii is classified as a PUP, or Potentially Unwanted Program. Computer users have reported that Whilokii may display pop-up advertisements on the search pages of popular online retailers. Computer users have also complained that Whilokii displays a barrage of unstoppable advertisements on the affected Web browser. Although not classified as a threat, Whilokii advertisements may be extremely irritating and disrupt a computer user's online activities. Security researchers strongly recommend the immediate removal of Whilokii in order to stop the advertisements and redirects associated with Whilokii.

The Advertisements and Redirects Caused by Whilokii May Become an Annoyance

Whilokii is presented as a plug-in for your Web browser. Whilokii may affect most Web browsers on the Windows platform, including the three most popular: Google Chrome, Internet Explorer and Mozilla Firefox. Security researchers consider that Whilokii is an adware infection. This is due to the fact that Whilokii's main goal is to display advertisements and sponsored affiliate marketing links on affected Web browsers. To stop symptoms associated with Whilokii, it is necessary to remove the Web browser extension responsible for these symptoms. Whilokii may be removed manually using the Windows Control Panel or your Web browser's plug-in manager. However, traces of Whilokii may remain on your Web browser. In these cases, it is strongly recommended using a reliable anti-malware program to scan your computer as part of the removal of PUPs like Whilokii.

Besides Unwanted Advertisements and Reirects Whilokii May Cause Other Issues

Although Whilokii is marketed as a way to compare online offers and obtain discounts and passwords, computer users will find that Whilokii may display numerous advertisements and coupons that are mostly useless and result in negligible advantages, while allowing a third party to profit at your expense. Whilokii displays numerous pop-up advertisements, adds content to your main Web browser window, causes your Web browser to crash frequently and prevents you from accessing certain websites. Because of this, malware researchers strongly advise Whilokii's immediate removal from the affected PC.

Aliases

1 security vendors flagged this file as malicious.

Anti-Virus Software Detection
AhnLab-V3 Adware/Win32.Downloader

SpyHunter Detects & Remove Whilokii

File System Details

Whilokii may create the following file(s):
# File Name MD5 Detections
1. updateWhilokii.exe b1ec2caa074a857bf98ca990e576bc2d 8,178
2. whilokii_is.exe 655d2f50763b7f9370ebbf9ddad80555 43
3. WhilokiiUninstall.exe cdd3ad36723e7a2c19fc50d518ce7a91 37
4. iaimhpklononapfjngelgdokckfjekfc.crx b0425b5a9a5da1d822c14901dda4960d 13
5. file.exe d5e311616d27443a22c6d76f4488a935 1

Registry Details

Whilokii may create the following registry entry or registry entries:
CLSID
{204df522-9a96-4a72-abb0-60f7a216d6d2}
{8B0295E2-967E-439E-9560-807D9F625B57}
{AB4DA692-F26B-403C-AF8F-FD87D121F8F1}
SOFTWARE\Microsoft\Tracing\updateWhilokii_RASAPI32
SOFTWARE\Microsoft\Tracing\updateWhilokii_RASMANCS
SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{204df522-9a96-4a72-abb0-60f7a216d6d2}
Software\Whilokii
SOFTWARE\Wow6432Node\Microsoft\Tracing\updateWhilokii_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\updateWhilokii_RASMANCS
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{204df522-9a96-4a72-abb0-60f7a216d6d2}
SOFTWARE\Wow6432Node\Whilokii
SYSTEM\ControlSet001\services\eventlog\Application\Update Whilokii
SYSTEM\ControlSet001\services\Update Whilokii
SYSTEM\CurrentControlSet\services\eventlog\Application\Update Whilokii
SYSTEM\CurrentControlSet\services\Update Whilokii

Directories

Whilokii may create the following directory or directories:

%ProgramFiles%\Whilokii
%ProgramFiles(x86)%\Whilokii

URLs

Whilokii may call the following URLs:

Whilokii

Trending

Most Viewed

Loading...