1 of 3
Danger level 7
Type: Browser Hijackers
Common infection symptoms:
  • Hijacks homepage
  • Changes default search engine

Whaatnext.com

Whaatnext.com is a potentially harmful search engine that may appear in your browsers without your knowledge. We have classified this malware infection as a browser hijacker as it has the capability to make changes to your browsers either arbitrarily or with your consent. Reports show that this hijacker is getting popular, so more and more computer users get exposed to unreliable third-party content. If you do not want to become an unfortunate victim of cyber criminals and their vicious deceptive tricks, you should delete Whaatnext.com right away. Keeping this browser hijacker on board may cause system security-related issues, not to mention the fact that it may have arrived in a bundle packed with other malicious installers. In any case, the presence of this malware infection is rather undesirable and not without risks. Please read our article to learn more about this browser hijacker and how you can protect your system for similar invaders.

This suspicious browser hijacker does not seem to be distributed through an official website, but, instead, it can be found in software bundles containing other malware infections as well. This is really bad news because it is not enough that Whaatnext.com may present you with unsafe third-party content, but you may also have adware applications and other malware on board that may introduce you to dangerous web content as well, for instance, through advertisements. Most users do not even notice that they infect their systems with such a bundle because they rush with the installation and do not make sure that they know the real content.

You can download such malicious software packages, for example, when you visit suspicious and unfamiliar websites, such as pornographic, torrent, and shareware sites. It is essential that you avoid these sites because they hold a lot of risks in the form of third-party ads. It is also possible that simply loading such a page could run a malicious code in the background and drop a few malware infections onto your computer without your noticing it. But the third-party ads can also be very deceptive on these sites and can look like a legitimate Windows dialog box alerting you about some errors, but once you click on the Ok, Yes, or Fix buttons, you will simply download a bundle of threats. It can also happen that you click accidentally somewhere on a page where you do not even see any content and get either redirected to a malicious site or, again, download some unwanted package. If you have visited such sites lately, you should delete Whaatnext.com right now and run a reliable malware scanner to identify other possible threats because unless you eliminate all of them, you will never be secure again using your computer.

When this browser hijacker is activated, it sets Whaatnext.com as your new home page and new tab page as well in Google Chrome and Mozilla Firefox. It might also work in Internet Explorer, but as yet, there have been no such reports. The server of this infection is located at the 104.18.46.60 IP address, which is in Phoenix, Arizona, and registered to Goddady.com, LLC. We have found another browser hijacker published by this company lately called Search.joygame.com, which targets mainly Turkish computer users. But we cannot say that these hijackers similar other than that, except for the reliability issues, of course.

There are several suspicious traits this search engine seems to exhibit. First of all, this tool does not have any legal documents available. Second, the main page is full of third-party ads that may well be unreliable. For example, at the top it displays a bar that says that an update is available now and shows a “Download and Install Now” button. However, if you click on it, you will get redirected to free.videodownloadconverter.com, which definitely has nothing to do with updating this search tool. It is also possible that you click on other content on this page and you will find yourself on a new tab page, but the previous page changes to onlinegame.travian.lt/?ad=10352_1114931120, for example. Again, it loads a potentially harmful site in your browser. The other third-party ads on its main page can also be misleading and alert you that you cannot see some content because you need to download a new plugin or a login error message to make you click on its fake sign-up button, and so on. You should never even think about clicking on these ads because you may easily get redirected to unsafe websites run by cyber criminals.

Unfortunately, this search engine is totally useless and potentially dangerous since its search results may be modified even though it seems to use the Google search engine to display results. We have found that third-party ads and links may be injected into the results pages, which can be risky to click on. This hijacker also has the ability to collect information about your online activities, including your search keywords. Based on this information, customized results and advertisements can be shown to you. However, these may come from unreliable third parties as well, such as cyber criminals. Clicking on their corrupted links and ads could land you on their malicious websites and you could easily become their next cyber crime victim.

We hope that you have realized that you are treading on a field of landmines with this browser hijacker on your computer. So let us share with you what you can do in order to completely remove Search.joygame.com from your system. The easiest way for you to do so is to delete the extension called "Search - Whaat next" from your Mozilla Firefox and Google Chrome browsers. But you can also try to manually remove them by deleting particular folders and files. If you need assistance with these steps, please use our instructions below and follow them step by step for best results. However, if you would like to effectively safeguard your operating system from malware threats, we suggest that you install a trustworthy antimalware application. Make sure you download a reliable program because the web is swarming with potentially harmful tools. We advise you to always run a web search on any software you want to download; that could save you from a lot of future headaches.

Remove Whaatnext.com from browsers

Google Chrome

  1. Tap Alt+F and choose Settings.
  2. Select Extensions on the left.
  3. Click on the unwanted extension and click on the trash can.
  4. Click Remove.

Mozilla Firefox

  1. Press Alt+T and go to Add-ons.
  2. Select Extensions on the left.
  3. Click on the unwanted extension and press Remove.

Manual removal

  1. Press Win+E to open the Windows File Explorer.
  2. Locate and delete %LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions\fmnjcabccmpfkplnpnkhnmhlaodgdpad.
  3. Locate and delete %UserProfile%\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\fmnjcabccmpfkplnpnkhnmhlaodgdpad.
  4. Locate and delete .xpi file (e.g., jid1-e7w0SHT82Gv9qA@jetpack.xpi) in %AppData%\Mozilla\Firefox\Profiles\36iwse76.default\extensions folder.
Download Spyware Removal Tool to Remove* Whaatnext.com
  • Quick & tested solution for Whaatnext.com removal.
  • 100% Free Scan for Windows
disclaimer
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.