The most award-winning anti-spyware software

Get serious about removing spyware with Spy Sweeper - the award-winning anti-spyware software trusted by millions of home computer users.

$29.95

Spyware & Virus Directory

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

W95.Savior

Risk Level 1: Very Low

Also Known As: Win32.Savior.1832, W32/Savior, W95/Savior.1828

Infection Length: 2048 bytes

SUMMARY

W95.Savior infects Windows PE programs with an .EXE (executable) or .SCR (screen saver) extension. It infects files in the Windows, Windows System and current directories. It is not memory resident. When an infected file is executed, the virus infects up to three files in each of the directories mentioned previously.

Protection

Virus Definitions (Intelligent Updater) June 15, 1999

Threat Assessment

Wild

Wild Level: Low
Number of Infections: 0 - 49
Number of Sites: 0 - 2
Geographical Distribution: Low
Threat Containment: Easy
Removal: Easy

Damage

Damage Level: Low
Payload Trigger: January 7
Modifies Files: Windows PE.EXE and SCR files

Distribution

Distribution Level: Low

TECHNICAL DETAILS

The virus does carry a payload. If an infected file is executed and the date on the system is January 7th, the virus will attempt overwrite every file in each of the three directories regardless of the file type. Overwritten files will have a size of 666. It will also display a message box with the following text:

When executed, the virus searches for GetModuleHandle and GetProcAddress in the host programs import table. If both functions are not imported from KERNEL32.DLL, then the virus simply returns control to the host with out any side effects. Otherwise, the virus searches for several functions in KERNEL32.DLL loaded in memory to infect files. The virus will not infect files of a length less than 4096 bytes. An infected file will grow in size by 2048 bytes. However, the actual size of the virus is 1832 bytes long.

Spy Sweeper 5.2 stops spyware in its tracks while offering home computer users the ability to configure the program to suit their specific needs, such as:

Choose a Quick, Full or Custom Sweep: With Spy Sweeper 5.2, you can easily choose to perform a quick, full or customized sweep. If you're looking for an immediate diagnosis, choose a quick sweep. For a pinpointed search, customize your sweep to have Spy Sweeper skip files by folder or file extension. For a deep cleaning, opt for a full sweep.

Exclude Files from a Sweep: Spy Sweeper allows you to save time during a sweep by skipping specific files or different sections of your PC. You can select specific file extension, such as .xls or .mpg to exclude.

Additional Highlights

As soon as it's installed, Spy Sweeper gives 360 degrees of protection against spyware, including:

Simple Sweeps: Detecting spyware and removing unwanted programs found on your computer in three effortless steps

Easy Management: Quickly and simply configure program, sweep and upgrade options

Fast Home: Use the home screen to access the most commonly used functions of Spy Sweeper

Shields Summary: A redesigned shields summary page makes it simple to see at a glance which shields are on or off

Action Alerts: Receive clear, easy-to-understand notifications when new spyware threats are detected

"Spy Sweeper remains a favorite for protection from spyware."

"This program's dominance is apparent as soon as you install it."