Exterminate It! Antimalware

malpedia

Known threats:699,742 Last Update:November 20, 22:46

Testimonials

After scanning my computer many times using big name anti-virus and malware programs I still had several problems. Finally Exterminate It found multiple infections from NetSky. I sent Exterminate It a sample and the next day I received an e-mail instructing me to update and rescan. After following the instructions ZAP the worm/trojan was gone. My computer seems to be completly back to normal now. Good Job Exterminate It!

Melvin

File: SaveSense

Location of SaveSense and Associated Malware

Check whether SaveSense is present in the following locations:

SaveSense file locations that are Windows version independent:

  • C:\Windows\System32\Tasks\SaveSense

If you find SaveSense file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The SaveSense file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of SaveSense File^

File SizeFile Md5Last Seen
3248ECA5BB768E3D4F02DA9D8D6735AB9E39Jun 28, 2014
3288FDD35600D819ECCC6E0EC3D3E59499F3Jul 1, 2014
324093191199A06696E2754CB01FA231BFD5Jul 5, 2014
3234FD74B1C59612B1345F933882C8A5305AJul 6, 2014
320896E77A90FCE09E7BFECED341231B8AFAJul 10, 2014
3278C6ED2D196E1A9A12CEBB63C189BB0E76Jul 13, 2014
3240E01FE6BBF44C0D7CD06BDA00F5B12E86Jul 21, 2014
322496D910E43412D4D13F1442D8F25109F6Jul 29, 2014
32568D002F8DD46811C083E95E2A8895CBE1Jul 29, 2014
324864683C77ED245B06BAF6993D1067474AAug 1, 2014
322448C3B4144C09412780087D5F9480D54EAug 5, 2014
3244E3E7C80811D4A846AEEBE576F115825AAug 7, 2014
3256FE89C164E6C852E1E20E7349E52C96F5Aug 9, 2014
322664F0827B41CAB6F7B1EAC234AA5A2175Aug 16, 2014
3220A4C4C3541AD26A595CE27C1006CAA8D0Aug 17, 2014
3232BDEB3E6D88A1CC6080E16663A1DF78AEAug 28, 2014
3262C32071F887A300A2FB280D18024D0E36Sep 1, 2014
3232E88B202992E2B0C2858D5645D2D5863ASep 6, 2014
32484C344C59E79399D2559365F4EE1A7918Sep 9, 2014
32185CF707EC133E012CD4D32B30DE777786Sep 10, 2014
3224C58E86BBBC14D006090FFE3AE1C4A8AASep 18, 2014
3248177233A903CCC12FB6689DF04FAE2908Sep 20, 2014
32144AEED8F2A02F63BFE9536F9820F1ECB2Sep 29, 2014
32885C62ABB084DAFC3E8C5D336DB03AF067Oct 10, 2014
32168B897962FCD18321EBEF41D096A2A83COct 14, 2014
3232D53967F05247A0D5C6E36013DC9F9D03Oct 19, 2014
32689621C8E854A64511D79672296159EFD4Oct 30, 2014
3242E0937330FC87FE830EDD5091CF2021E7Nov 3, 2014
3260B021602FD2045396B97D68E9A0D0DB32Nov 9, 2014
3244CC6F260024EB2970D6DB5C5FC5A412D5Dec 16, 2014
3232987520DE5C7F865B77EE454ADA673EC0Mar 26, 2015
3258704C0619E8EEDC1FDB04F164908C8F74Apr 22, 2015
3266DB53A7C920B4B17A501FAC5077F92F48Jun 10, 2015
3232B13A1E163F6D512D010030A11915C98BJul 20, 2015
32402DBEB345A47D88D3E65E61174DF1CFECOct 30, 2015
3236D1F4A05BD025590F447327DF3D9A2369Dec 22, 2015
3224F320B7146A3FA5F20F36371596C9FF6DJan 30, 2016
324032A0A0585DE8E6549B65929A17DCBF9EFeb 16, 2016
27963F1516E459D0645130C8B55AAD4F8640Mar 11, 2016
33420C5F5793F7A8C2D738AAABFD7D9A5050Mar 24, 2016
3268BD3D873EF9169A8B9D2AED6CBFD7829CJul 11, 2016
328415F0F1839EF4B15387F0AD3904F33C88Aug 11, 2016
323269E5686AA25F8BB27AAD68B613EBD33ENov 14, 2016
32244452DB3135CB84EF2D6B773BD8AFC048Nov 23, 2016
26420036225606B11EEF50C7D19F6AFBFE17Jan 10, 2017
32306021997A42CB644D794F45AA695A8199Jan 11, 2017
2642A9B852980BE3CF1FCB31DF0BD6F32A79Feb 20, 2017
324066C1E34A4217F9EECBA6EB0C03988156Mar 7, 2017
32243F0B87C1653AB27388354AD010D004D7Mar 25, 2017
3232304A5A284E294B946C2319F5F18F73C6Mar 28, 2017

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove SaveSense^

  1. To enable deleting the SaveSense file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select SaveSense and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of SaveSense and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of SaveSense and Associated Malware.
  6. Notes:

    • The deletion of SaveSense will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of SaveSense will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a SaveSense malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type SaveSense. The name of the first found registry value referencing SaveSense is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to SaveSense, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of SaveSense and Associated Malware.