Adware.Whenu.Savenow.E

Propagation : medium
Dégât : very low
Size: varies
Détecté : 2005 Aug 18

SYMPTOMS:

Presence of the following files:

  • %ProgramFiles%\VVSN\VVSN.exe
  • %ProgramFiles%\VVSN\VVSN.cfg

TECHNICAL DESCRIPTION:

Adware.Whenu.Savenow.E is an adware program that downloads and displays advertisements.
It can be manualy installed or comes as a component of another program, in that case user will be prompted and he can accept or not the SaveNow License Agreement.


Than it creates the following files:

  • %ProgramFiles%\VVSN\VVSN.exe
  • %ProgramFiles%\VVSN\VVSN.cfg


and the following registry entry:

  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\ "VVSN" = "%ProgramFiles%\VVSN\VVSN.exe"

Removal instructions:

Please let BitDefender disinfect your files.

ANALYZED BY:

Sorin Ciorceri ,virus researcher