Spyware - SAVE.EXE

We have found multiple references to a file named SAVE.EXE. Hopefully, the Properties for this file include a company name.

Most commonly, SAVE.EXE or SAVENOW.EXE is a Spyware program from WhenU.com. It tracks your internet usage and relays the information to it's clients. It generates popup ads while you browse the web. If you notice you're suddenly getting a lot of popup-ads it's probably due to Save.exe.

What's worse is WhenU.com is able to steal referrals so if you purchase products online they'll get the affiliate money instead of the site that recommended or highlighted the product.

SAVE.EXE may have found its way on to your system when you downloaded free software such as Bearshare, WeatherCast, NewNet, or ClockSync. Or it may have installed via an ActiveX control just by opening a webpage into your browser.

Some versions of SAVE.EXE and SAVENOW.EXE can be removed by going to Control Panel > Add/Remove programs.

This Microsoft knowledgebase article describes stability problems in Windows 98 and Me that are related to SAVE.EXE or SAVENOW.EXE. Detailed removal instructions are included: http://support.microsoft.com/default.aspx?scid=kb;en-us;Q302463.

There are some valid and safe files using this name. SAVE.EXE from Adobe is a Plug-In for Pagemaker which enables you to collect all the files your service provider will need to output your publication. If you have this Save.exe you're ok.
Adobe Save For Service Provider 1.1 Plug-in

Spyware

Remove