Threat Search: 

ThreatExpert's Statistics for Adware.WhenU_SaveNow [PC Tools]:

Adware.WhenU_SaveNow [PC Tools] is also known as:
Threat AliasNumber of Incidents
Adware-SaveNow [McAfee]1,258
Adware.Savenow [Symantec]1,240
Adware:Win32/WhenU.A [Microsoft]1,052
not-a-virus:WebToolbar.Win32.WhenU.a [Kaspersky Lab]573
not-a-virus:AdWare.Win32.SaveNow.bo [Ikarus]545
not-a-virus:AdTool.Win32.WhenU.i [Ikarus]365
not-a-virus:WebToolbar.Win32.WhenU.y [Kaspersky Lab]221
not-a-virus:AdTool.Win32.WhenU.i [Kaspersky Lab]185
not-a-virus:AdTool.Win32.WhenU.a [Kaspersky Lab]178
AdWare.Win32.WhenU [Ikarus]147
not-a-virus:WebToolbar.Win32.WhenU.z [Kaspersky Lab]144
Generic.dx [McAfee]61
not-a-virus:AdWare.Win32.SaveNow.z [Kaspersky Lab]56
not-a-virus:AdWare.Win32.SaveNow.z [Ikarus]49
not-a-virus:WebToolbar.Win32.WhenU.i [Kaspersky Lab]24
Adware-xplus [McAfee]18
not-a-virus:.WebToolbar [Ikarus]13
Adware.WhenU!sd5 [PC Tools]12
Virus.Win32.AdWare [Ikarus]12
not-a-virus:AdWare.Win32.SaveNow.ar [Kaspersky Lab]10
not-a-virus:AdWare.Win32.SaveNow.ay [Kaspersky Lab]7
not-a-virus:AdWare.Win32.SaveNow.m [Kaspersky Lab]7
not-a-virus:AdTool.Win32.WhenU.g [Kaspersky Lab]5
not-a-virus:AdWare.Win32.SaveNow.ag [Kaspersky Lab]5
not-a-virus:AdWare.Win32.SaveNow.c [Kaspersky Lab]5
not-a-virus:AdWare.Win32.SaveNow.bc [Kaspersky Lab]4
not-a-virus:AdWare.Win32.SaveNow.bi [Kaspersky Lab]4
not-a-virus:AdWare.Win32.SaveNow.e [Kaspersky Lab]4
Generic PUP.g [McAfee]3
SoftwareBundler:Win32/KaZaA [Microsoft]3
Adware-WhenUSearch [McAfee]2
not-a-virus:AdWare.WhenU [Ikarus]2
not-a-virus:AdWare.Win32.SaveNow [Ikarus]2
not-a-virus:AdWare.Win32.SaveNow.af [Kaspersky Lab]2
not-a-virus:AdWare.Win32.SaveNow.av [Kaspersky Lab]2
not-a-virus:AdWare.Win32.SaveNow.aw [Kaspersky Lab]2
not-a-virus:AdWare.Win32.SaveNow.az [Kaspersky Lab]2
not-a-virus:AdWare.Win32.SaveNow.bl [Kaspersky Lab]2
not-a-virus:AdWare.Win32.SaveNow.by [Kaspersky Lab]2
not-a-virus:AdWare.Win32.SaveNow.w [Kaspersky Lab]2
PE_VIRUT.XV [Trend Micro]2
W32/Virut.f [McAfee]2
Win-Trojan/Xema.variant [AhnLab]2
Adware:Win32/WhenU.D [Microsoft]1
Adware:Win32/WhenU.gen [Microsoft]1
Adware-RadLight [McAfee]1
Generic PUP.a [McAfee]1
not-a-virus:AdTool.Win32.WhenU.f [Kaspersky Lab]1
not-a-virus:AdTool.Win32.WhenU.j [Kaspersky Lab]1
not-a-virus:AdTool.Win32.WhenU.r [Kaspersky Lab]1
not-a-virus:AdTool.Win32.WhenU.t [Kaspersky Lab]1
not-a-virus:AdWare.Win32.SaveNow [Kaspersky Lab]1
not-a-virus:AdWare.Win32.SaveNow.aa [Kaspersky Lab]1
not-a-virus:AdWare.Win32.SaveNow.al [Kaspersky Lab]1
not-a-virus:AdWare.Win32.SaveNow.au [Kaspersky Lab]1
not-a-virus:AdWare.Win32.SaveNow.bh [Kaspersky Lab]1
not-a-virus:AdWare.Win32.SaveNow.bt [Kaspersky Lab]1
not-a-virus:AdWare.Win32.SaveNow.bv [Kaspersky Lab]1
not-a-virus:AdWare.Win32.SaveNow.ca [Kaspersky Lab]1
not-a-virus:AdWare.Win32.SaveNow.cb [Kaspersky Lab]1
not-a-virus:AdWare.Win32.SaveNow.h [Kaspersky Lab]1
not-a-virus:AdWare.Win32.SaveNow.o [Kaspersky Lab]1
not-a-virus:AdWare.Win32.SaveNow.q [Kaspersky Lab]1

Adware.WhenU_SaveNow [PC Tools] is known to be created as:
%ProgramFiles%\bearshare\installer\saveinstwm.exe
%ProgramFiles%\common files\whenu\dtplugin.dll
%ProgramFiles%\filesubmit\hllewchter.zip\vvsninst.exe
%ProgramFiles%\nostra player\saveinstwm.exe
%ProgramFiles%\save\acm.dll
%ProgramFiles%\save\save.exe
%ProgramFiles%\save\saveuninst.exe
%ProgramFiles%\save\saveupdate.exe
%ProgramFiles%\savenow\savenow.exe
%ProgramFiles%\savenow\uninst.exe
%ProgramFiles%\sky fire\vvsninst.exe
%ProgramFiles%\vvsn\vvsn.exe
%ProgramFiles%\weathercast\uninst.exe
%ProgramFiles%\weathercast\weather.exe
%Temp%\is-3uqee.tmp\bsaveinstwm.exe
%Temp%\is-hdahr.tmp\savenowinst.exe
%Temp%\is-jsmae.tmp\savenowinst.exe
%Temp%\vvsn_alns0604inst.exe
%Temp%\vvsninst.exe
Notes:
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).