Threat Search: 

ThreatExpert's Statistics for not-a-virus:WebToolbar.Win32.WhenU.a [Kaspersky Lab]:

not-a-virus:WebToolbar.Win32.WhenU.a [Kaspersky Lab] is also known as:
Threat AliasNumber of Incidents
Adware-SaveNow [McAfee]668
Adware.Savenow [Symantec]630
Adware.WhenU_SaveNow [PC Tools]574
Adware:Win32/WhenU.A [Microsoft]486
not-a-virus:AdWare.Win32.SaveNow.bo [Ikarus]423
not-a-virus:AdTool.Win32.WhenU.a [Kaspersky Lab]128
Adware.WhenU.AQ [PC Tools]106
AdWare.Win32.WhenU [Ikarus]26
Generic.dx [McAfee]12
not-a-virus:.WebToolbar [Ikarus]10
not-a-virus:AdWare.Win32.SaveNow.z [Ikarus]8
not-a-virus:AdWare.Win32.SaveNow.z [Kaspersky Lab]6
not-a-virus:AdTool.Win32.WhenU.a [Ikarus]5
Adware.SaveNow!sd5 [PC Tools]4
not-a-virus:AdWare.Win32.OneStep [Ikarus]4
Adware:Win32/WhenU.gen [Microsoft]2
not-a-virus:AdWare.Win32.Relevant.a [Kaspersky Lab]2
Adware.BearShare.A [PC Tools]1
Adware.BearShare.B [PC Tools]1
Adware.BearShare.C [PC Tools]1
Adware.BearShare.D [PC Tools]1
Adware.Relevant!sd5 [PC Tools]1
Adware.WhenU!sd5 [PC Tools]1
Backdoor.Win32.Agent.aber [Kaspersky Lab]1
Backdoor.Win32.Hupigon.gnzd [Kaspersky Lab]1
Dropper/Malware.1454917 [AhnLab]1
Generic PUP.g [McAfee]1
not-a-virus:AdTool.Win32.MyWebSearch [Ikarus]1
not-a-virus:AdWare.Win32.NewDotNet [Kaspersky Lab]1
not-a-virus:WebToolbar.Win32.MyWebSearch.ak [Kaspersky Lab]1
not-a-virus:WebToolbar.Win32.WhenU [Ikarus]1
Suspicious.MH690 [Symantec]1
Trojan.Win32.VB.mxl [Kaspersky Lab]1
Trojan-Downloader.Win32.Agent.brev [Kaspersky Lab]1
Trojan-Downloader.Win32.Agent.brzm [Kaspersky Lab]1
Trojan-Downloader.Win32.Delf.sgq [Kaspersky Lab]1
Trojan-Downloader.Win32.VB.lih [Kaspersky Lab]1
Trojan-Downloader.Win32.VB.lqa [Kaspersky Lab]1
Trojan-Downloader.Win32.VB.lsk [Kaspersky Lab]1
Trojan-Dropper.Win32.Agent.angs [Kaspersky Lab]1
Trojan-GameThief.Win32.WOW.llu [Kaspersky Lab]1
Win32.SuspectCrc [Ikarus]1

not-a-virus:WebToolbar.Win32.WhenU.a [Kaspersky Lab] has the following possible countries of origin:
OriginNumber of Incidents
Netherlands2
China1
Latvia1
Russian Federation1
Taiwan1

not-a-virus:WebToolbar.Win32.WhenU.a [Kaspersky Lab] is known to be created as:
%ProgramFiles%\filesubmit\hllewchter.zip\vvsninst.exe
%ProgramFiles%\sky fire\vvsninst.exe
%Temp%\vvsninst.exe
%Temp%\wusvinst.exe
%UserProfile%\daemon403-x86.exe
Notes:
  • %ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
  • %Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
  • %UserProfile% is a variable that specifies the current user's profile folder. By default, this is C:\Documents and Settings\[UserName] (Windows NT/2000/XP).