Threat Search: 

ThreatExpert's Statistics for Adware.WhenUSearchBar [Symantec]:

Adware.WhenUSearchBar [Symantec] is also known as:
Threat AliasNumber of Incidents
Adware-OneStep [McAfee]240
not-a-virus:AdWare.Win32.OneStep.c [Kaspersky Lab]182
Adware.OneStep!sd5 [PC Tools]157
Adware.OneStepSearch [PC Tools]44
Adware-WhenUSearch [McAfee]7
Adware:Win32/WhenU.B [Microsoft]4
Adware.WhenU!sd5 [PC Tools]3
not-a-virus:AdTool.Win32.WhenU.c [Kaspersky Lab]3
not-a-virus:AdWare.Win32.OneStep.a [Kaspersky Lab]3
Adware.Agent.YHL [PC Tools]2
Adware.SaveNow!sd5 [PC Tools]2
not-a-virus:AdWare.Win32.SaveNow.bb [Kaspersky Lab]2
not-a-virus:AdWare.Win32.SaveNow.bd [Kaspersky Lab]2
Adware.OneStep.C [PC Tools]1
Adware-StatBlaster [McAfee]1
BrowserModifier:Win32/OneStepSearch [Microsoft]1
not-a-virus:AdWare.Win32.SaveNow.ao [Kaspersky Lab]1
not-a-virus:AdWare.Win32.SaveNow.bs [Kaspersky Lab]1

Adware.WhenUSearchBar [Symantec] is known to be created as:
%ProgramFiles%\filesubmit\oswdvaz118.exe
%ProgramFiles%\onestepsearch\onestep.dll
%ProgramFiles%\onestepsearch\uninstall.exe
%ProgramFiles%\themexp\oswdvaz118.exe
%ProgramFiles%\vanquish media inc\win32s.exe
%Temp%\4ca69052.exe
%Temp%\is-e4q6n.tmp\osgluz118.exe
%Temp%\is-ecqiq.tmp\osgluz118.exe
%Temp%\is-kc7u1.tmp\osgluz118.exe
%Temp%\osgc.tmp\osgluz118.exe
%Temp%\search-new.dll
%Temp%\search-new.exe
Notes:
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).