English | Deutsch


How to remove the Save virus


Most antivirus programs identify Save.exe as malware, for instance Kaspersky identifies it as not-a-virus:WebToolbar.Win32.WhenU.y, and TrendMicro identifies it as Adware_whenu.
The free file information forum can help you find out how to remove it. If you know more about this file, please leave a comment or a hint for other users.

Click to Run a Free Virus Scan for the Save.exe malware


Save.exe file information

The process known as WhenU Save or Save belongs to software WhenU Save or WhenU SaveNow or UnInstall Envy24 Family Audio by WhenU.com (www.whenu.com) or WHENU.COM INC or Vomba Network.

Description: Save.exe is located in a subfolder of "C:\Program Files" - usually C:\Program Files\Save\. Known file sizes on Windows 7/XP are 803,184 bytes (40% of all occurrences), 478,320 bytes and 13 more variants. http://www.file.net/process/save.exe.html 
File Save.exe is not a Windows core file. The process starts when Windows starts (see Registry key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run). File Save.exe is a Verisign signed file. The file is certified by a trustworthy company. The program has no visible window. The program listens for or sends data on open ports to a LAN or the Internet. Save.exe is able to monitor applications. Therefore the technical security rating is 44% dangerous, however also read the users reviews.
If you have any problems with Save.exe, you can also uninstall the software WhenU Save or WhenU SaveNow using the "Add or Remove Programs" function of Windows Control Panel (Windows: Start, Settings, Control Panel, Add or Remove Programs).

Recommended: Identify Save.exe related errors

If Save.exe is located in a subfolder of "C:\Documents and Settings", the security rating is 50% dangerous. The file size is 198,576 bytes (80% of all occurrences) or 642,928 bytes. The process has no file description. The program is not visible. The file has a digital signature. The application starts when Windows starts (see Registry key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run). File Save.exe is not a Windows system file. Save.exe is able to hide itself and monitor applications.

External information from Paul Collins:

  • "WhenUSave" definitely not required. SaveNow adware

Important: Some malware camouflages itself as Save.exe, particularly when located in the c:\windows or c:\windows\system32 folder. Therefore, you should check the Save.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.



Score

User Comments

EMC NetWorker (backup application)
  RickyT   (further information)
Belonged to Legato backup in my case. Slow and annoying but not dangerous and shouldn't be removed.
  Klas  
This look like Spyware/Bot/keylogger. Stuff to slllooowws your comp down.
  Just a dude  
Hard to uninstall. Launches a website to uninstall...
  Hacktor  
makes it sometimes difficult to start the computer
   
Does not belong to Windows XP. EMC or Legato Networker backup software does contain a legitimate file named "save.exe"
  The Duke  
Maybe not only adware. I didnt try to sisasseble it and understand what exactly it is doing, but according to "netstat -b" data it's connecting to some hosts that I would'n like to be connected to. Security rating = 5. Evil shit.
  MuToGeN  
BearShare exe
   
More comments can be found here:
    (further information)
Rating chart


Summary: Average user rating of Save.exe: based on 99 votes with 9 reviews.
24 users think Save.exe is essential for Windows or an installed application. 6 users think it's probably harmless. 17 users think it's neither essential nor dangerous. 26 users suspect danger. 26 users think Save.exe is dangerous and recommend removing it. 9 users doesn't grade Save.exe ("not sure about it").


Do you have additional information?
What do you know about Save.exe: 
How do you rate it: 
Link for more info's: 
Your Name: 


Save scanner


Security Task Manager shows all running Windows tasks including embedded hidden functions (e.g. keyboard or browser monitoring, autostart entry). A unique security risk rating indicates the likelihood of the process being potential spyware, malware, keylogger or a Trojan.

Spyware Doctor detects and removes sleeping spyware, adware, trojans, keyloggers, malware and tracking threats from your hard disk. Ideal supplement to Security Task Manager.

SpeedUpMyPC scans, cleans, repairs and optimizes your computer.


Other processes


Save.exe [all]