How to remove Whenusearch

81 threats found

Adware Whenusearch

81 threats removed

Recommended solution

Download OSHI Defender and scan your PC for free

Download and scan now




Whenusearch is an application designed to deliver unwanted advertisements on your computer, often in the form of pop-ups or redirections of your Web browsing. Programs like this can also be used to track and report your computing activities without your consent, so this type of application can pose a serious security threat.





How to manually remove Whenusearch guide. Only for ADVANCED users.

  • Step 1: Basic check for Whenusearch activity

    Check running processes on your system. Usually you can find Whenusearch process running. Use the Ctrl+Shift+Esc buttons combination to open system information window and click Processes tab. Scroll down the whole list and try to find the process named like Whenusearch. If you find Whenusearch process running, right click on it and choose “End Process”. It will disable Whenusearch for the current Windows session, but remember that if you do not completely remove Whenusearch using next steps, then your PC will stay vulnerable to malware attack. Next steps are much more important in removing Whenusearch.

  • Step 2: Disconnect your PC from the Internet

    Prevent the malware from leaking or spreading your personal data. Adware usually uses the Internet to transfer all possible and important information you have. Some Adwares are not so “Active” and they can simply disable some Windows features and options. To disconnect your PC from the Internet you need to plug-off LAN cable (if you use LAN connection) or to turn of the Wi-Fi module (if you use Wi-Fi Internet connection). Most of (not 100%) Adwares can not access Wi-Fi module preferences. Turning off the Internet will disable Whenusearch from transferring any data from your PC.

  • Step 3: Enter the safe mode.

    The next step is very important in removing Whenusearch. After turning off the Internet and disabling Whenusearch process you will need to reboot your PC in so-called Safe Mode. Safe Mode is a Windows mode which allows you to start the System using only important applications and services. Safe Mode does not usually allow Whenusearch to load when the system boots (!!!but exceptions can appear!!!). Choose Restart in Windows Start menu and wait until the screen turns off.

    After that you have to follow the next instructions according to the versions of Microsoft Windows you use:

      Windows XP:
    1. Press the F8 key repeatedly when the first screen appears.

    2. Select Safe Mode from Windows Advanced Options Menu and press ENTER.

      Windows Vista, 7:
    1. Press the F8 key repeatedly when the first screen appears.

    2. Use the arrow keys from Windows Advanced Options Menu in order to select Safe Mode and press ENTER.

      Windows 8, 8.1, 10:
    1. Press and hold the Shift button when left-clicking the Restart button on Windows log-on screen.

    2. Select Safe Mode from Windows Troubleshooting boot screen and press ENTER.

  • Step 4: Removing virus files

    Having booted your PC in Safe mode you have to start cleaning your PC manually by deleting every file associated with Whenusearch one by one. Here is the list of all files associated with Whenusearch. Delete all files listed below using the Shift+Delete buttons combination. Always double check the file name as sometimes Adwares use very similar filenames as very important system files do and you can mistakenly remove important system file what will harm your system and you will not be able to boot your PC at all.

    • arrow_down_on.gif

    • arrow_down.gif

    • arrow_right_on.gif

    • arrow_right.gif

    • button_go_down.gif

    • button_go_on.gif

    • button_go.gif

    • button_pop_ups_allowed.gif

    • button_pop_ups_blocked_down.gif

    • button_pop_ups_blocked_on.gif

    • button_pop_ups_blocked.gif

    • button_pop.gif

    • button_search_down.gif

    • button_search_off.gif

    • button_search_on.gif

    • button_search_sm_down.gif

    • button_search_sm_off.gif

    • button_search_sm_on.gif

    • button_specials_down.gif

    • button_specials_on.gif

    • button_specials.gif

    • categories_loading.html

    • categories.html

    • corner_bottom_left.gif

    • corner_top_left.gif

    • coupon_cart.gif

    • coupon_star.gif

    • DAEMON

    • divider.gif

    • dollar_icon_on.gif

    • dollar_icon.gif

    • dollar_icon2.gif

    • dot_orange.gif

    • down_state.gif

    • DTAdapter.exe

    • DTPlugin.dll

    • foo_bw.gif

    • foo.html

    • icon_about.gif

    • icon_browser.gif

    • icon_close.gif

    • icon_email.gif

    • icon_games.gif

    • icon_help.gif

    • icon_ie.gif

    • icon_im.gif

    • icon_personals.gif

    • icon_weather.gif

    • icon_whenusearch.gif

    • index.htm

    • input_logo_sm.gif

    • instructions_border_corner.gif

    • instructions_border_right.gif

    • instructions_border_top.gif

    • instructions_bottom_bg.gif

    • instructions_bottom_left.gif

    • instructions_close_down.gif

    • instructions_close.gif

    • instructions_corner_bottom_.gif

    • instructions_gotosite.gif

    • instructions.html

    • link.gif

    • loading.html

    • logo_now.gif

    • logo_pbandit_down.gif

    • logo_pbandit_on.gif

    • logo_pbandit.gif

    • logo_searchbar_down.gif

    • logo_searchbar_off.gif

    • logo_searchbar_on.gif

    • logo_searchbar.gif

    • logo_whenusearch_down.gif

    • logo_whenusearch_on.gif

    • logo_whenusearch.gif

    • logo_whenusearch2_down.gif

    • logo_whenusearch2_on.gif

    • logo_whenusearch2.gif

    • logo.gif

    • main_bg.gif

    • menu_aim_bw.gif

    • menu_main_bw.gif

    • menu_main.html

    • menu_pbandit_bw.gif

    • menu_pbandit.html

    • message_alert.gif

    • message.html

    • min_new_results_new_down.gif

    • min_new_results_new_on.gif

    • min_new_results_new_text_on.gif

    • min_new_results_new_text.gif

    • min_new_results_new.gif

    • min_new_results_on.gif

    • min_new_results.gif

    • min_pbandit_on.gif

    • min_pbandit.gif

    • min_searchbar_on.gif

    • min_searchbar.gif

    • min.html

    • more_bg.gif

    • more_bottom_bg.gif

    • more_bottom_left_bg.gif

    • more_bottom_left.gif

    • more_bottom_main_bg.gif

    • more_bottom_main.gif

    • more_close_down.gif

    • more_close.gif

    • more_left_bg.gif

    • more_right_bg.gif

    • more_top_bg.gif

    • more_top_close_down.gif

    • more_top_close_off.gif

    • more_top_close_on.gif

    • more_top_left_bw.gif

    • more_top_left.gif

    • more_top_right_bw.gif

    • more_top_right.gif

    • more_top_x_bw.gif

    • more_top_x_down.gif

    • more_top_x_on.gif

    • more_top_x.gif

    • more.html

    • movement.js

    • newresults.html

    • notyet_bw.gif

    • notyet.gif

    • notyet.html

    • open_bg.gif

    • open_bottom_bg.gif

    • open_bottom_left_bw.gif

    • open_bottom_left.gif

    • open_bottom_right_bw.gif

    • open_bottom_right.gif

    • open_browser.html

    • open_cancel_down.gif

    • open_cancel_on.gif

    • open_cancel.gif

    • open_open_down.gif

    • open_open_on.gif

    • open_open.gif

    • personals.html

    • quick_close_down.gif

    • quick_close_on.gif

    • quick_close.gif

    • quick_coupon.html

    • quick_instructions_top.gif

    • quick_instructions.html

    • quick_results_top.gif

    • quick_search.html

    • quick_tutorial.html

    • right_bg_grey.gif

    • right_bg.gif

    • right_instructions_on.gif

    • right_instructions_red.gif

    • right_instructions.gif

    • right_left_grey.gif

    • right_left.gif

    • right_main_bg.gif

    • right_more_left_grey.gif

    • right_more_left.gif

    • right_more_off.gif

    • right_more_on.gif

    • right_more_up.gif

    • right.html

    • search_star.gif


    • search.cch

    • search.db

    • search.dll

    • Search.exe

    • search.htm

    • search.html

    • searchupdate.exe

    • spacer.gif

    • splash_bg_bw.gif

    • splash_bg.gif

    • splash_bullet.gif

    • splash_close_down.gif

    • splash_close_on.gif

    • splash_close.gif

    • splash_learn_more_down.gif

    • splash_learn_more_on.gif

    • splash_learn_more.gif

    • splash.html

    • store.db

    • stores_loading.html

    • stores.html

    • tab_left_bg.gif

    • tab_left_down.gif

    • tab_left_off.gif

    • tab_left_on.gif

    • tab_right_down.gif

    • tab_right_off.gif

    • tab_right_on.gif

    • tab_right_red.gif

    • Thumbs.db

    • Toolbar.lnk

    • ui.cfg

    • Uninst.exe

    • uninst.ico

    • whse.exe

    • wuinst.dll

    • wuinst.inf


    Please, remember that viruses are always progressing and sometimes new files can appear. If you are using our offline PDF guide on How to remove Whenusearch, please check if you have it’s latest version.

    We do not guarantee that Whenusearch has the same file structure at the moment of deleting.

    After removing all files associated with Whenusearch that were listed above, reboot your system in normal mode and check if your PC works fine or you still have any troubles.

    It it is OK – congratulations! You have made a great job!

    If it is still NOT ok – use OSHI Defender to check your PC.

Similar threats

Associated threats

Virus files


The main symptoms of the infection of your computer

Fix all problems

Frequently Asked Questions

We have an answer

  • How does Whenusearch infect my computer?

  • I detected Whenusearch on my computer. What do I do?

  • What damage can Whenusearch do to my computer?

  • What are the main symptoms of Whenusearch?

  • Can Whenusearch spread to other computers?

  • Countries with the highest Whenusearch infection rates.

  • The first recorded appearance of Whenusearch

I have a question


You have a question?


How does Whenusearch infect my computer?

Whenusearch is an Adware-type virus. The most common way a computer becomes infected with Whenusearch is when a user downloads free software or browser toolbars.

Was the answer helpful?
Was the answer helpful?

I detected Whenusearch on my computer. What do I do?

If you have OSHI Defender installed on your computer, it will detect and remove Whenusearch and all related files. First, restart your browser and then check the Home Page to make sure that you’re still using your preferred search engine (Google, Bing, Yahoo, etc.), because Whenusearch replaces users’ search engines with ones that display ads.

Was the answer helpful?
Was the answer helpful?

What damage can Whenusearch do to my computer?

Developed by large companies, viruses like Whenusearch are mostly legal products that hackers use to make money on the ads that Whenusearch displays on infected computers.

Was the answer helpful?
Was the answer helpful?

What are the main symptoms of Whenusearch?

High network activity
Unusual browser settings
Pop-up windows

Was the answer helpful?
Was the answer helpful?

Can Whenusearch spread to other computers?

As a rule, Whenusearch requires user interaction and cannot automatically infect other computers on your local network or by using the same USB-disk on additional computers. There may be exceptions, though.

Was the answer helpful?
Was the answer helpful?

Countries with the highest Whenusearch infection rates.


Was the answer helpful?
Was the answer helpful?

The first recorded appearance of Whenusearch


Was the answer helpful?
Was the answer helpful?


Use the form below to send us your comments and questions

Address: Rm.709, Wellborne Commercial Centre, 8 Java Road, North Point, Hong Kong.

Report a problem

Please provide us with as much information and data as possible (Application name, application version, OSHI Defender version, OS version e.t.c.)

Affiliate program registration

Fill out following form and receive 80% commission per OSHI Defender sale