Home Malware Programs Adware Word Wizard Ads

Word Wizard Ads

Posted: September 14, 2015

Threat Metric

Ranking: 14,906
Threat Level: 2/10
Infected PCs: 3,321
First Seen: September 9, 2015
Last Seen: July 24, 2023
OS(es) Affected: Windows

Word Wizard is not the application you should use in case you want to improve your searches or the process of translating information. The benefits of keeping this tiny program are very questionable, but the presence of some annoying side effects is guaranteed. All Word Wizard does is allow its clients to perform a Google search or a translation of the highlighted terms directly, without the need to open new tabs. This feature may sound appealing to the less experienced users. However, the tech-savvy ones know that popular web browsers have already created this function and offer it for free. This fact gives security experts enough reasons to assume the real cause for the creation of Word Wizard is far less noble. Its developers profit from the presence of large amounts of artificially created advertisements. This behavior is why the specialists classify Word Wizard as adware. You may be disturbed to notice many aggressive pop-ups, banners, animations and hyperlinked words whenever you launch a web browser. Word Wizard comes as an add-on that works equally well on Google Chrome, Mozilla Firefox and Internet Explorer, so makes no difference which browser you launch, the effects will be the same. The commercial materials are not only annoying but may also trouble the performance of the web clients. It is even possible to experience random freezes and crashes. What is more, the new pop-ups and banners are far from safe as they may take you towards dangerous parts of the web. Some of these pop-ups may even encourage you to install software that may be unsafe. Although the add-on is very tiny, it attaches to your web clients very firmly, so you should use special security software to delete it.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



MsiExec.exe File name: MsiExec.exe
Mime Type: unknown/exe
Group: Malware file

Registry Modifications

The following newly produced Registry Values are:

Regexp file mask%WINDIR%\system32\Drivers\WWFD_[RANDOM CHARACTERS]_1_10_0_[RANDOM CHARACTERS].sys%WINDIR%\System32\Tasks\WordWizard Auto Updater[RANDOM CHARACTERS]HKEY..\..\..\..{RegistryKeys}SOFTWARE\Microsoft\Tracing\WordWizardAutoUpdateClient_RASAPI32SOFTWARE\Microsoft\Tracing\WordWizardAutoUpdateClient_RASMANCSSOFTWARE\Wow6432Node\Microsoft\Tracing\WordWizardAutoUpdateClient_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\WordWizardAutoUpdateClient_RASMANCS

Additional Information

The following URL's were detected:
www.wpmage.com
Loading...