Adware.Whenu.Savenow.E
|
Spreading:
|
medium
|
|
|
Damage:
|
very low
|
|
Size:
|
varies
|
|
Discovered:
|
2005 Aug 18
|
SYMPTOMS:
Presence of the following files:
- %ProgramFiles%\VVSN\VVSN.exe
- %ProgramFiles%\VVSN\VVSN.cfg
TECHNICAL DESCRIPTION:
Adware.Whenu.Savenow.E is an adware program that downloads and displays advertisements.
It can be manualy installed or comes as a component of another program, in that case user will be prompted and he can accept or not the SaveNow License Agreement.
Than it creates the following files:
- %ProgramFiles%\VVSN\VVSN.exe
- %ProgramFiles%\VVSN\VVSN.cfg
and the following registry entry:
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\ "VVSN" = "%ProgramFiles%\VVSN\VVSN.exe"
Removal instructions:
Please let BitDefender disinfect your files.
ANALYZED BY:
Sorin Ciorceri ,virus researcher
