What is WSN.exe and how do i get rid of it?

Posted on 2006-05-07
Last Modified: 2007-11-27
Hi i have AVG anti-virus installed and it keeps recognising WSN.exe as a virus when i run a scan. it does not seem to get rid of it though. i have looked it up and it seems to be some kind of spyware. i have spybot, spyware doctor ad-aware and spy sweeper on my computer and none of these seem to be recognising it. please could someone advise exactly what this is and more importantly how i can get it off my computer.
thanks in advance
Question by:lotage23
    LVL 16

    Expert Comment

    Hi there lotage23,

    WNS.exe is call WhenuSaveNow and its spyware.  You should be able to remove it from Add/Remove Programs in your Control Panel.  Look for any programs you have not installed and do not know what they are.  File size will be arounf 300kb.

    LVL 97

    Expert Comment

    Greetings, lotage23 !

    WSN.exe is part of SaveNow Spyware and cannot be removed with antivirus software. You need antispyware or trojan removal tool.

    1. Run Ewido to remove trojans
    Update the definition and run in Safe Mode.

    Spy Sweeper for removing Spyware
    SpyBot S&D searches your harddisk for so-called spy- or adbots;

    2. If still no joy, download HijackThis

    Run the program and you will find many entries. Most are OK. Post the log at and click Analyse, Save.  Post a link to the saved list here.

    Best wishes!
    LVL 32

    Expert Comment

    I would first try the suggestions above, but if they don't seem to be helping, then try this:

    First locate the file named WSN.exe (probably in c:\windows or c:\windows\system32)


    (0) If running XP Home, boot in safe mode, if XP Pro, then start with step (1)

    (1) Right click on the file in Windows Explorer or My Computer, select Properties

    (2) Click on the Security tab.

    (3) Click on the Advanced button.

    (4) Uncheck the box labeled "Inherit from Parent...", then click "Remove"

    (5) Close all windows.

    (6) Reboot.

    After reboot the file will be unable to run (because no one can access it any more). The symptoms should be gone.

    At this point you can clean up with a standard anti-spyware program. I suggest Ewido, but you can try others that you already have.

    Author Comment


    that is the saved file from hijackthis if you can spot anything on there and please advise.
    LVL 32

    Accepted Solution

    There is nothing bad in the HJT log.

    You should be able to delete that file either in safe mode, or just disable it using the method I suggested in my above post.
    LVL 97

    Expert Comment


    1. Did you run Ewido?

    2. If Ewido does not remove it, look for the file wsn.exe and delete it. Use Killbox or Unlocker in Safe Mode to remove hard to remove file.

    Killbox to remove stuborn files

    3. If wsn.exe cannot be found, Since your Hijackthis log is clean, AVG may be giving you a false positive.  

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    When the confidentiality and security of your data is a must, trust the highly encrypted cloud fax portfolio used by 12 million businesses worldwide, including nearly half of the Fortune 500.
    Ransomware continues to be a growing problem for both personal and business users alike and Antivirus companies are still struggling to find a reliable way to protect you from this dangerous threat.
    This video is in connection to the article "The case of a missing mobile phone (". It will help one to understand clearly the steps to track a lost android phone.
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now