Sav.exe is Trojan.Lazdropper.
Trojan.Lazdropper is a specially crafted .tgz file(TAR file compressed by gzip) that drops malicious files by exploiting the Lhaz Unspecified Remote Code Execution Vulnerability (BID 25351).
Related files:
%UserProfile%\Local Setting\Temp\sav.exe (Backdoor.Trojan)
%System%\wuausrv.dll (Backdoor.Trojan)
%UserProfile%\Local Setting\Temp\~Thumbbs.TMP
Read more: http://www.symantec.com/enterprise/secur...
Kill the process sav.exe and remove sav.exe from Windows startup using RegRun Reanimator.
http://www.regrun.com
Removal: sav.exe is removed by RegRun.
Read more... Removal instructions...
Recommended software:
UnHackMe - easy removal Rootkits/Adware/Spyware.
http://www.unhackme.com
RegRun Security Suite - removal and protection.
http://www.regrun.com
RegRun Reanimator - free removal tool.
greatis.com/reanimator
RegRun - User's Choice
Vista Programs - full info...
What is hidden in MSDN?
.NET Secrets Revealed
Why software developers prefer Win32.FreeTechSecrets.com?
All Unix Manuals in Alphabetical Order
C# controls for .NET in 3 simple steps.
Constantly updated. Last update:
June 30 2008
Interesting information about Vista programs...
Need consultation?
Would you like to add your opinion?