Threat Search: 

ThreatExpert's Statistics for AdWare.Win32.WhenU [Ikarus]:

AdWare.Win32.WhenU [Ikarus] is also known as:
Threat AliasNumber of Incidents
Adware.Savenow [Symantec]157
Adware.WhenU_SaveNow [PC Tools]147
not-a-virus:WebToolbar.Win32.WhenU.z [Kaspersky Lab]120
Adware-SaveNow [McAfee]27
not-a-virus:WebToolbar.Win32.WhenU.a [Kaspersky Lab]26
Adware:Win32/WhenU.A [Microsoft]23
not-a-virus:AdWare.Win32.SaveNow.bo [Ikarus]20
not-a-virus:.WebToolbar [Ikarus]10
Virus.Win32.AdWare [Ikarus]10
not-a-virus:AdTool.Win32.WhenU.a [Kaspersky Lab]6

AdWare.Win32.WhenU [Ikarus] is known to be created as:
%ProgramFiles%\filesubmit\hllewchter.zip\vvsninst.exe
%ProgramFiles%\sky fire\vvsninst.exe
%Temp%\vvsninst.exe
Notes:
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).