Home Malware Programs Adware WhenU.SaveNow

WhenU.SaveNow

Posted: January 25, 2010

Threat Metric

Threat Level: 2/10
Infected PCs: 35
First Seen: July 24, 2009
OS(es) Affected: Windows

WhenU.SaveNow is dangerous adware that displays advertisements while it secretly runs on an infected PC. The creators of WhenU.SaveNow include additional code that carries the adverts. The adverts can be viewed through pop-up windows or through a bar that exists on the computer screen. Sometimes, they can be viewed through text links or in integrated search results.

WhenU.SaveNow may or may not track a user's personal information. WhenU.SaveNow typically stores itself as a browser toolbar. If a user's toolbar is behaving differently or something appears strange, then it could be a sign that the user has the malicious WhenU.SaveNow on his/her computer system. If a user's web browser is being redirected, then this could also be a sign that the computer is infected with the malicious WhenU.SaveNow.

Aliases

Trj/CI.A [Panda]AdWare.Signed-Win32.SurfAccuracy [Ikarus]Win-Trojan/Xema.variant [AhnLab-V3]Adware:Win32/WhenU [Microsoft]TR/Zlob.198576 [AntiVir]UnclassifiedMalware [Comodo]DeepScan:Generic.Zlob.D682487B [BitDefender]Win32.Genetik [eSafe]WS.Reputation.1 [Symantec]a variant of Win32/Adware.Vomba.AA [NOD32]Artemis!252A97204D02 [McAfee]WhenU.Save [Sunbelt]WhenU [Sophos]Adware.WhenU.SaveNow [Prevx1]WhenU.SaveNow (threat-c) [Microsoft]
More aliases (37)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%APPDATA%\Save\Save.exe File name: Save.exe
Size: 198.57 KB (198576 bytes)
MD5: 252a97204d0272bcc88e5c67e8d253c0
Detection count: 80
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Save
Group: Malware file
Last Updated: November 23, 2011
Save.exe File name: Save.exe
Size: 365.12 KB (365120 bytes)
MD5: 990db24d6ca4a4d96fcaa3eb94275d72
Detection count: 21
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
Loading...