Prevx Research Division
WYZO.EXE
Cloaked MalwareIt is possible that your PC could be infected. The file name WYZO.EXE is used by both safe and unsafe programs.
You should urgently check your PC to make sure it is not infected. The free version of Prevx will scan your PC in less than two minutes and check for millions of spyware and malware infections including WYZO.EXE. Don't put your confidential data, or your identity at risk, check your PC now with Prevx.
Associated Malware Groups
The unsafe files using this name are associated with the malware group:
- Cloaked Malware
File Behavior
WYZO.EXE has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- This Process Deletes Other Processes From Disk
- Can communicate with other computer systems using HTTP protocols
- Executes a Process
- Creates a TCP port which listens and is available for communication initiated by other computers
- Registers a Dynamic Link Library File
- This process creates other processes on disk
- Can make outbound communication to other computers, IM chat rooms and other services using IRC protocols
- Communicates with other computers using FTP connections
- Executes Processes stored in Temporary Folders
- Adds products to the system registry
- Writes to another Process's Virtual Memory (Process Hijacking)
- Adds an ActiveX component changing or modifying the function of your browser
- Deletes an ActiveX component
WYZO.EXE has been the subject of the following behavior:
- Created as a process on disk
- Executed as a Process
- Terminated as a Process
- Has code inserted into its Virtual Memory space by other programs
- Deleted as a process from disk
- Executed by Internet Explorer
- Changes to the file command map within the registry
Country Of Origin
The filename WYZO.EXE was first seen on Jun 21 2007 in the following geographical regions of the Prevx community:
- on Jun 21 2007
- Europe on Jun 21 2007
- Lithuania on Aug 3 2007
- South Africa on Jan 28 2012
File Name Aliases
WYZO.EXE can also use the following file names:
- WYSIWYG.WEB.BUILDER.V7.6.0 CRACKED [QQDJR].EXE
- X ANTHOLOGY 2011.EXE
- 43327741
Filesizes
The following file size has been seen:
- 3,818,496 bytes
- 569,344 bytes
- 3,808,256 bytes
Vendor, Product and Version Information
Files with the name WYZO.EXE have been seen to have the following Vendor, Product and Version Information in the file header:
- Wyzo Ltd.; Wyzo; 2.0.0.3
- Wyzo Ltd.; Wyzo; Personal
File Type
The filename WYZO.EXE refers to many versions of an executable program.