Home Malware Programs Adware TV Wizard Ads

TV Wizard Ads

Posted: January 5, 2015

Threat Metric

Ranking: 6,805
Threat Level: 2/10
Infected PCs: 8,343
First Seen: July 3, 2014
Last Seen: October 13, 2023
OS(es) Affected: Windows

TV Wizard is classified as a PUP (Potentially Unwanted Application). TV Wizard claims to be a free app that allow users to 'turn off the lights' on their favorite websites for movies. At first, TV Wizard seems like a useful tool for movie lovers, but in reality it is an app created by Small Island Development that is designed to display advertisements. When users click these annoying ads, they may be redirected to unwanted or possibly infected websites that may install additional malware onto their systems. TV Wizard is not a virus itself, but it does exhibit some adware capabilities that may cause changes to your browser and system, so it is advisable to remove it.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\ProgramData\byyoqxpw\dat\tkzvohig.exe File name: C:\ProgramData\byyoqxpw\dat\tkzvohig.exe
MD5: fd2af0dd0ef286df33b85be4ab15c29e
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
C:\ProgramData\TVWizard\uninstall.exe /kb=y /ic=1 File name: C:\ProgramData\TVWizard\uninstall.exe /kb=y /ic=1
Mime Type: unknown/exe /kb=y /ic=1
Group: Malware file

Registry Modifications

The following newly produced Registry Values are:

CLSID{378ae41c-c4af-5e7b-7b4e-6e6acf69a208}{5bad8210-7a65-5974-4b90-e1594613ebe9}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}TVWizard

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\Application Data\TVWizard%ALLUSERSPROFILE%\TVWizard%Homedrive%\TVWizard%LOCALAPPDATA%\TVWizard%UserProfile%\Local Settings\Application Data\TVWizard
The following URL's were detected:
www.gettvwizard.com
Loading...