How to remove the Save virus
Most antivirus programs identify Save.exe as malware, for instance Kaspersky identifies it as not-a-virus:WebToolbar.Win32.WhenU.y, and TrendMicro identifies it as Adware_whenu.
The free file information forum can help you find out how to remove it. If you know more about this file, please leave a comment or a hint for other users.
Save.exe file information
Description: Save.exe is located in a subfolder of "C:\Program Files" - usually C:\Program Files\Save\.
Known file sizes on Windows 7/XP are 803,184 bytes (40% of all occurrences), 478,320 bytes and 13 more variants.
File Save.exe is not a Windows core file. The process starts when Windows starts (see Registry key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run). File Save.exe is a Verisign signed file. The file is certified by a trustworthy company. The program has no visible window. The program listens for or sends data on open ports to a LAN or the Internet. Save.exe is able to monitor applications. Therefore the technical security rating is 44% dangerous, however also read the users reviews.
If you have any problems with Save.exe, you can also uninstall the software WhenU Save or WhenU SaveNow using the "Add or Remove Programs" function of Windows Control Panel (Windows: Start, Settings, Control Panel, Add or Remove Programs).
Recommended: Identify Save.exe related errors
If Save.exe is located in a subfolder of "C:\Documents and Settings", the security rating is 50% dangerous. The file size is 198,576 bytes (80% of all occurrences) or 642,928 bytes. The process has no file description. The program is not visible. The file has a digital signature. The application starts when Windows starts (see Registry key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run). File Save.exe is not a Windows system file. Save.exe is able to hide itself and monitor applications.
External information from Paul Collins:
- "WhenUSave" definitely not required. SaveNow adware
Important: Some malware camouflages itself as Save.exe, particularly when located in the c:\windows or c:\windows\system32 folder. Therefore, you should check the Save.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.
RickyT (further information)
Just a dude
Security Task Manager shows all running Windows tasks including embedded hidden functions (e.g. keyboard or browser monitoring, autostart entry). A unique security risk rating indicates the likelihood of the process being potential spyware, malware, keylogger or a Trojan.
Spyware Doctor detects and removes sleeping spyware, adware, trojans, keyloggers, malware and tracking threats from your hard disk. Ideal supplement to Security Task Manager.
SpeedUpMyPC scans, cleans, repairs and optimizes your computer.
ctdetect.exe adgjdet.exe googledesktop.exe Save.exe aswlsvc.exe staropen.sys asio.sys ntos.exe guardmailru.exe winampa.exe fixcamera.exe [all]