Safe-Saver Generic
from InstalleRex-WebPick
What is Safe-Saver Generic?
This adware extension plugs into the user's web browser for IE, Chrome and Firefox and will display additional advertisements in search engines such as Bing and Google. It installs itself as a browser extension/toolbar and runs as a background process. Once installed, it displays ads by injecting new ads in search as well as various web pages that use 3rd party advertising and replaces these ads with its own. It also constantly will display pop-up ads when the user is doing various activities such as watching a video or viewing a specific shopping web site.
About (from InstalleRex-WebPick)
This free, ad-supported application allows you to browse coupons and deals from merchant sites. The application works by detecting supported coupons while you browse the site and displays them in the browser through a drop down window. This browser application integrates a new feature that displays search results from ... Read more
Overview
During setup, the program registers itself to launch on boot through a Windows Schedule Task in order to automatically start-up (this is typically done to avoid any UAC prompts). It adds a Browser Helper Object (BHO) to Internet Explorer. The primary executable is named Safe-Saver Generic-bg.exe. A majority of users end up uninstalling this less than a week of it being installed. The setup package generally installs about 13 files and is usually about 7.2 MB (7,553,690 bytes). The installed file Safe-Saver Generic-updater.exe is the auto-update component of the program which is designed to check for software updates and notify and apply them when new versions are discovered.
This browser extension utilizes Crossrider framework, a cross-browser toolbar/plugin platform used to develop, deploy and monetize web browser toolbars for Internet Explorer, Chrome and Firefox. Crossrider extension provide monetization options, mostly potentially unwanted apps, for toolbars including coupons, search assistant (home page and search hijacking) and in-text contextual advertising. Many adware programs (defined by a number of anti-virus vendors) are built using Crossrider as it provides a quick an easy way to deploy ad-supported features that will assist in browser search hijacking.
- Malware detected in the program
- Automatically starts with Windows
- Integrates into the web browser
- Uses the Crossrider toolbar framework
- During install it may hijack/modify the browser's homepage and search provider
- Runs disconnected from the browser as a background process
- Typically distributed through a pay-per-install bundle
- Injects advertisements unassociated with the underlying web page
- The experts agree, you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in Safe-Saver Generic.
Safe-Saver Generic-bho.dll (c2edc19494d8527cc1d813f58ad9a33d) has been flagged by the following 4 scanners: |
Anti-Virus software | Version | Detection |
ESET-NOD32 |
8.9099 |
a variant of Win32/Toolbar.CrossRider.H |
Kingsoft AntiVirus |
331020.49267 |
Win32.Troj.Generic.a.(kcloud) |
Symantec |
1/11/2014 rev. 7 |
Adware.Adpopup |
VIPRE Antivirus |
23756 |
Crossrider (fs) |
Safe-Saver Generic-enabler.exe (1c8a607404c53127cea0219c05037b80) has been flagged by the following 3 scanners: |
Anti-Virus software | Software version | Detection |
Dr.Web |
|
Trojan.Crossrider.9 |
ESET-NOD32 |
9099 |
a variant of Win32/Toolbar.CrossRider.J |
VIPRE Antivirus |
23756 |
Crossrider (fs) |
Safe-Saver Generic-updater.exe (9c122de35a491f00c4615be581b04738) has been flagged by the following 3 scanners: |
Anti-Virus software | Software version | Detection |
AVG |
13.0.0.3169 |
Generic_r.GS |
ESET-NOD32 |
9099 |
a variant of Win32/Toolbar.CrossRider.J |
VIPRE Antivirus |
23756 |
Crossrider (fs) |
Safe-Saver Generic-chromeinstaller.exe (83c35b5c361433c4222133d5e7c48c20) has been flagged by the following 2 scanners: |
Anti-Virus software | Software version | Detection |
ESET-NOD32 |
9099 |
a variant of Win32/Toolbar.CrossRider.J |
VIPRE Antivirus |
23756 |
Crossrider (fs) |
Safe-Saver Generic-codedownloader.exe (eec5f656291c41a8d5f07f39aeb88797) has been flagged by the following 2 scanners: |
Anti-Virus software | Software version | Detection |
ESET-NOD32 |
9099 |
a variant of Win32/Toolbar.CrossRider.J |
VIPRE Antivirus |
23756 |
Crossrider (fs) |
View all 14 all detections
Safe-Saver Generic has been found to be bundled with 3rd party software. If you have not purposefully installed this, you should be safe uninstalling it.
Program details
Displayed publisher: Safe Saver
URL: justplug.it
Installation folder: C:\Program Files\safe-saver generic
Uninstaller: C:\Program Files\Safe-Saver Generic\Uninstall.exe
Estimated size: 7.2 MB
Files installed by Safe-Saver Generic
Program executable: | Safe-Saver Generic-bg.exe |
Name: | Safe-Saver Generic |
| Safe-Saver Generic exe |
Path: | C:\Program Files\safe-saver generic\Safe-Saver Generic-bg.exe |
MD5: | c6134a3f4baca2c6f1a5d778d89c6842 |
Additional files:
-
Safe-Saver Generic-bg.exe (by Safe Saver) - Safe-Saver Generic (Safe-Saver Generic exe)
-
(Malware detected) Safe-Saver Generic-bho.dll (by Safe Saver) - Safe-Saver Generic BHO
-
Safe-Saver Generic-buttonutil.exe
-
Safe-Saver Generic-buttonutil64.exe
-
(Malware detected) Safe-Saver Generic-chromeinstaller.exe
-
(Malware detected) Safe-Saver Generic-codedownloader.exe
-
(Malware detected) Safe-Saver Generic-enabler.exe
-
Safe-Saver Generic-firefoxinstaller.exe
-
(Malware detected) Safe-Saver Generic-updater.exe
-
Uninstall.exe - Safe-Saver Generic Installer
-
Safe-Saver Generic-buttonutil.dll
-
Safe-Saver Generic-buttonutil64.dll
-
Safe-Saver Generic-helper.exe
Behaviors exhibited
Internet Explorer BHO
- Safe-Saver Generic-bho.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'Safe-Saver Generic' with the class of {11111111-1111-1111-1111-110311391186} (CrossriderApp0033986).
5 Scheduled Tasks (Boot/Login)
- Safe-Saver Generic-updater.exe is automatically launched at startup through a scheduled task named Safe-Saver Generic-updater.
- Safe-Saver Generic-firefoxinstaller.exe is automatically launched at startup through a scheduled task named Safe-Saver Generic-firefoxinstaller.
- Safe-Saver Generic-enabler.exe is automatically launched at startup through a scheduled task named Safe-Saver Generic-enabler.
- Safe-Saver Generic-codedownloader.exe is automatically launched at startup through a scheduled task named Safe-Saver Generic-codedownloader.
- Safe-Saver Generic-chromeinstaller.exe is automatically launched at startup through a scheduled task named Safe-Saver Generic-chromeinstaller.
How do I remove Safe-Saver Generic?
You can uninstall Safe-Saver Generic from your computer by using the Add/Remove Program feature in the Window's Control Panel.
- On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
- Windows Vista/7/8/10: Click Uninstall a Program.
- Windows XP: Click Add or Remove Programs.
- When you find the program Safe-Saver Generic, click it, and then do one of the following:
- Windows Vista/7/8/10: Click Uninstall.
- Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
- Follow the prompts. A progress bar shows you how long it will take to remove Safe-Saver Generic.
- If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.
How do I reset my web browser?
If your web browser homepage and search settings have been modfied by Safe-Saver Generic you can restore them to their previous default settings.
Microsoft Internet Explorer
- Open Internet Explorer and click the Tools button, and then click Internet options.
- Click the Advanced tab, and then click Reset. Select the Delete personal settings check box if you would also like to remove search providers, Accelerators and home pages. When Internet Explorer finishes applying default settings, click Close, and then click OK.
- The changes will take effect the next time you open IE.
Mozilla Firefox
- At the top of the Firefox window, click the Firefox button, go over to the Help sub-menu and select Troubleshooting Information.
- To continue, click Reset Firefox in the confirmation window that opens. It will close and be reset.
- When it's done, a window will list the information that was imported. Click Finish and Firefox will open.
Google Chrome
- Open Chrome and click the Chrome menu on the browser toolbar.
- Select Settings. In the "Search" section, click Manage search engine. Check if (Default) is displayed next to your preferred search engine. If not, mouse over it and click Make default. Mouse over any other suspicious search engine entries that are not familiar and click X to remove them.
- When the "Show Home button" checkbox is selected, a web address appears below it. If you want the Homepage button to open up a different webpage, click Change to enter a link.
- Restart Google Chrome.
HOW IT STARTS
Scheduled task? Yes
(Runs on Windows boot)
|
|
USER ACTIONS
|
Uninstall it 88%
Keep it 12%
|
|
|
MOST USED OS
~99%
Windows 7 (SP1)
|
Geography
83.33% of installs come from the United States
Which countries install it?
United States |
83.33% |
Saudi Arabia |
16.67% |