WebZoom

WebZoom

Known Generic

by Jambodigital

What is WebZoom?

WebZoom is software application developed by Jambodigital. It is most commonly found on computers running Windows 7 with nearly 46.38% of installations running this operating system. WebZoom's installer is typically 3.00 MB in size and installs around 14 files.

WebZoom is most popular in the United States with 99.17% of installations residing in this country.

WebZoom adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, WebZoom is known to create 1 firewall exception to allow inbound and outbound connectivity.

Multiple virus scanners have detected malware in WebZoom.

cozwdhost.exe (MD5: 89bc6676c1cac62c5c03de102e48137a) has been flagged by 9 scanners:
Scanner Software Result
Avira Adware/ClickPotato.247280
CAT-QuickHeal AdWare.ZoomyLib.r4 (Not a Virus)
IKARUS anti.virus AdWare.Win32.ZoomyLib
McAfee Artemis!89BC6676C1CA
McAfee-GW-Edition Artemis
Microsoft Security Essentials Adware:Win32/ZoomyLib
Panda Antivirus Trj/Genetic.gen
Symantec Trojan.Gen.2
TrendMicro-HouseCall Suspicious_GEN.F47V0212
cozaghost.exe (MD5: 6187e8050332d69053fb743cb3b9a8f2) has been flagged by 19 scanners:
Scanner Software Result
Lavasoft Ad-Aware Gen:Variant.Adware.Strictor.77915
ALYac Gen:Variant.Adware.Strictor.77915
AVG Generic6
Avira Adware/ClickPotato.481776.1
AVware Trojan.Win32.Generic!BT
Bitdefender Gen:Variant.Adware.Strictor.77915
Emsisoft Anti-Malware Gen:Variant.Adware.Strictor.77915
G Data Gen:Variant.Adware.Strictor.77915
IKARUS anti.virus AdWare.Win32.PennyBee
McAfee Artemis!6187E8050332
McAfee-GW-Edition Artemis
Microsoft Security Essentials Adware:Win32/ZoomyLib
MicroWorld-eScan Gen:Variant.Adware.Strictor.77915
Panda Antivirus Trj/Genetic.gen
Symantec Trojan.Gen
Trend Micro TROJ_GEN.R047C0SBH15
TrendMicro-HouseCall TROJ_GEN.R047C0SBH15
VIPRE Antivirus Trojan.Win32.Generic!BT
CAT-QuickHeal AdWare.ZoomyLib.r4 (Not a Virus)

Software Behaviors

Services:
  • cozwdhost.exe runs as a service named 'cozwdhost' (cozwdhost).
  • cozaghost.exe runs as a service named 'cozaghost' (cozaghost).
Firewall:
  • cozaghost.exe is added as a firewall exception for 'C:\Documents and Settings\user\Application Data\micron\1.1.0.29\cozaghost.exe'.
Scheduled tasks:
  • cozaghost.exe is scheduled as a task named 'Tempo Runner coz32host'.

Software Details

URL:
–
Support:
–
Installation path:
C:\ProgramData\webzoom\1.1.0.29
Uninstaller:
C:\ProgramData\webzoom\1.1.0.29\Uninstaller.exe /ga=1503
Size:
3.00 MB
Language:
English

WebZoom Executable Details

Primary executable:
cozaghost.exe
Name:
WebZoom
Path:
C:\ProgramData\webzoom\1.1.0.29\cozaghost.exe
MD5:
6187e8050332d69053fb743cb3b9a8f2
SHA-1:
–
SHA-256:
–
Files installed by WebZoom
File Type Filename MD5
EXE
uninstaller.exe
37c7ef469df7d92e1a2a12192d9007b2
EXE
utils.exe
4a161af86d2342e52448fc3541c0d001
EXE
cozwdhost.exe
Malware
89bc6676c1cac62c5c03de102e48137a
EXE
cozahost.exe
918966be06c74fe59bf0d9dcccddf77b
EXE
cozaghost.exe
Adware
6187e8050332d69053fb743cb3b9a8f2
EXE
coz64host.exe
fe846722a17e663cc730ad03cae5f33d
EXE
coz32host.exe
cb6d9a27495d064533197f218a7e3313
DLL
webzoomL32.dll
facd66a016d7da92916d5e4235241b45
DLL
cozaghostutil32.dll
32305eebc8952e8ecf30e70665fde059
DLL
cozaghostL64.dll
80136a29ddc84166a295066cb17a8d81