Wednesday, December 3, 2008

WhenUSave Adware

Removing WhenUSave
Categories: Adware
Adware are programs that facilitate delivery for advertising content
to the user and in some cases gather information from the user's computer.


WhenUSave Also known as:

[Panda]Adware/ClockSync

Visible Symptoms:
Files in system folders:
[%PROFILE_TEMP%]\savedisclosure.exe
[%PROFILE_TEMP%]\savedisclosure.exe

How to detect WhenUSave:

Files:
[%PROFILE_TEMP%]\savedisclosure.exe
[%PROFILE_TEMP%]\savedisclosure.exe

Folders:
[%PROGRAMS%]\whenu
[%PROGRAM_FILES%]\save

Registry Keys:
HKEY_CLASSES_ROOT\wusn.1
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\whenusavemsg
HKEY_LOCAL_MACHINE\software\whenusave
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\whenusavepbtb

Registry Values:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run

Removing WhenUSave:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
Freak Trojan Symptoms

No comments: