Weathercast is spyware!

I have had this damnable program installed on my machine by bad websites so often, it isn't even funny. I'd like to see Weathercast included in the list of spyware that Spyware Blaster guards against. Weathercast includes a stupid program called SAVE.EXE which runs in memory and crashes the computer and freezes the Web browser. It's a very bad piece of software and is detected by Adaware and Spybot (if they'd ever put out a downloadable update).

 

Yes..that is a nastsy bugger. Java will be here to hep you in regards to his software..but in the meantime these threads may help you and others.

Have a nice day,

John

program called save.exe is trying to access the internet


http://www.dslreports.com/forum/remark,6238101~root=security,1~mode=flat

Weather.exe,SaveUninst.exe,SaveNow

http://www.dslreports.com/forum/remark,6223841~root=security,1~mode=flat

 

I'll take a look at it - you can help expedite the process by posting the links to any webpages that you find that install it. (If not, it may be a while before I find any.)

But please, if you do post links, make sure you edit the "http" in the front to be "hxxp" - so the links are not clickable (and so people do not accidentally install this parasite on their machines).

Thanks!

-Javacool

 

I can't remember what sites specifically, but some of the EZboards installed it and I believe Bravenet.com and CJB.net. Sorry I can't be of more help, but it was installed by many different sites I went to.

 

Well if you do come across it again, I would greatly appreciate if you could record the website and post it here.

In any case, I'll keep looking.

Best regards,

-Javacool

 

Hi Javacool, I'm not sure how much help this is. I didn't install the program to check if it's the same as is being spoken of in this thread, so hopefully spywarekiller could confirm if this and the one (s)he downloaded are one and the same. Here's the URL and CLSID of the one I found at Weathercast's site:

 

Thank you! This has been added in the most recent database update (3/21/03).

And yes, this is indeed the version that installs the "Save" parasite from WhenU.

Best regards,

-Javacool

 

WOOHOO! Finally protected from that horrible program. You have no idea how many times I had to uninstall it from my machine. TY TY TY!

 

Hey, sorry for digging up an old thread, but this was the closest match I could find when I went searching.

Does SpywareGuard detect/block SaveNow? I have someone who has something installing it 3, 4 times a day and I suggest SWGuard until we figure what the heck is doing it.

 

Hi Mike,

There are several instances of SaveNow in SpywareBlaster among which the CLSID mentioned above.
And I'm 95% sure (can't try now) SpywareGuard stops the installer for SaveNow that I have in my collection, but from your description I would suspect this is a new one.

Regards,

Pieter

 

No, I don't think it's anything new. I think she has a file sharing program running that's reinstalling it every time she removes. I told her to use SWG until we figured out for sure what was reinstalling it.

 

Well, it certainly won't hurt to install both and if it isn't a new one, that should cover it.
There are some screensaver programs that bundle SaveNow as well. Have you asked about those?

from: http://app.whenu.com/SALogin

Regards,

Pieter