Threat Search: 

ThreatExpert's Statistics for not-a-virus:AdWare.Win32.SaveNow.bo [Ikarus]:

not-a-virus:AdWare.Win32.SaveNow.bo [Ikarus] is also known as:
Threat AliasNumber of Incidents
Adware.WhenU_SaveNow [PC Tools]545
Adware-SaveNow [McAfee]540
Adware.Savenow [Symantec]483
Adware:Win32/WhenU.A [Microsoft]462
not-a-virus:WebToolbar.Win32.WhenU.a [Kaspersky Lab]423
not-a-virus:AdTool.Win32.WhenU.a [Kaspersky Lab]122
AdWare.Win32.WhenU [Ikarus]20
Generic.dx [McAfee]3
Adware:Win32/WhenU.gen [Microsoft]1

not-a-virus:AdWare.Win32.SaveNow.bo [Ikarus] is known to be created as:
%ProgramFiles%\filesubmit\hllewchter.zip\vvsninst.exe
%ProgramFiles%\sky fire\vvsninst.exe
%Temp%\vvsninst.exe
Notes:
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).