Living Waterfalls Screensaver 1.0

Living Waterfalls Screensaver 1.0 is an adware bundler that installs Adware-SaveNow (WhenU) with itself.WhenU.SaveNow is an adware application that displays pop-up advertising on the desktop in response to users web browsing.

General information:

Malware Name: Living Waterfalls Screensaver 1.0
Malware Type: Adware Bundler
Company Name: 3d-screensaver-download
Company URL: http://www.3d-screensaver-download.com/
Threat Level: Low Risk
Operating System: WIN XP
Installation Type: Installed through EXE
Operation: Time of After Installation

Company Description:

3d-screensaver-download provides you the screen saver Living Waterfalls Screensaver 1.0 that shows living beauty on your desktop. Feel the power of this wonder of nature overwhelming you. Let yourself relax and disconnect from the routine life.

Spyware Description:

Living Waterfalls Screensaver 1.0 is an adware bundler that installs Adware-SaveNow (WhenU) with itself.WhenU.SaveNow is an adware application that displays pop-up advertising on the desktop in response to users web browsing.

Characteristics/Symptoms:

    -> It installs Adware-SaveNow (WhenU) with itself. -> WhenU.SaveNow is an adware application that displays pop-up advertising on the desktop in response to users web browsing.

Additional information might be found here:

google Search at Google for Living Waterfalls Screensaver 1.0
bing Search at Bing for Living Waterfalls Screensaver 1.0
yahoo Search at Yahoo for Living Waterfalls Screensaver 1.0

Processes Running:

Living Waterfalls.scr

File information Created after Installation:

File Location Size (Bytes) Type
C:\Documents and Settings\[USER]\Start Menu\Programs\Living Waterfalls Screensaver\ScreenSaver.com.lnk 632 Shortcut
C:\Documents and Settings\[USER]\Start Menu\Programs\Living Waterfalls Screensaver\Screensaver Settings.lnk 1363 Shortcut
C:\Documents and Settings\[USER]\Start Menu\Programs\Living Waterfalls Screensaver\Uninstall.lnk 723 Shortcut

Folder information Created after Installation:

Folder Location
C:\Program Files\SaveNo

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SaveNow UrlInfoAbout
HKEY_LOCAL_MACHINE \SOFTWARE\RI Soft Systems\Living Waterfalls Screensaver
HKEY_LOCAL_MACHINE \SOFTWARE\RI Soft Systems\Living Waterfalls Screensaver InstallDate