Threat Search: 

ThreatExpert's Statistics for not-a-virus:AdTool.Win32.WhenU.i [Ikarus]:

not-a-virus:AdTool.Win32.WhenU.i [Ikarus] is also known as:
Threat AliasNumber of Incidents
Adware-SaveNow [McAfee]390
Adware.WhenU_SaveNow [PC Tools]365
Adware.Savenow [Symantec]313
Adware:Win32/WhenU.A [Microsoft]313
not-a-virus:AdTool.Win32.WhenU.i [Kaspersky Lab]171
not-a-virus:WebToolbar.Win32.WhenU.y [Kaspersky Lab]169
not-a-virus:WebToolbar.Win32.WhenU.i [Kaspersky Lab]24
Adware.WhenU!sd5 [PC Tools]12

not-a-virus:AdTool.Win32.WhenU.i [Ikarus] is known to be created as:
%ProgramFiles%\save\acm.dll
%ProgramFiles%\save\save.exe
Note: %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.