84,488,480 programs installed

Should I remove Safer-Surf?

What percent of users and experts removed it?
87% remove it13% keep it
Overall Sentiment
What do people think about it?
(click star to rate)
How common is it?
Global Rank #22,158
United States Rank #24,056
Reach 0.0089%
Lifespan of installation (until removal)
< 9.37 days
276.39 days >
Average installed length: 145.22 days


What is Safer-Surf?

Safer-Surf is an Internet toolbar/plugin (for Internet Explorer it runs as a BHO, in Chrome and Firefox it will run as an extension) that plugs into the user's default web browser and will modify a number of settings such as taking control of the browser's search and home pages, new tab functionality as well as DNS 'not found' redirection. Additionally this potentially unwanted program will change some security settings of the browser that might also lower the overall security of the user's PC. This is done in order to allow the program to run uninterrupted.

What to be aware of while this adware is running:
- Displays advertisements in the browser, often for other PUPs
- Injects ads that would normally not appear
- Tracks Internet usages such as domains visited
- May modify standard web browser settings lowering overall security
- May update itself and install new versions without knowledge
- Usually installed with minimal or no consent through a 3rd party downloader

As disclosed in the privacy policy, Safer-Surf will track and report behaviors or the user while the plugin is installed including but not limited to the URLs and web pages the user visits as well as search terms and search results the user queries.


During setup, the program creates a startup registration point in Windows in order to automatically start when any user boots the PC. It adds a Browser Helper Object (BHO) to Internet Explorer. In the Mozilla Firefox browser, it will add an add-on. The primary executable is named Safer-Surf.exe. A majority of users end up uninstalling this less than a week of it being installed. The setup package generally installs about 255 files and is usually about 2.62 MB (2,745,309 bytes).
  • Malware detected in the program
  • Automatically starts with Windows
  • Integrates into the web browser
  • Known to include offers within the setup
  • Injects advertisements unassociated with the underlying web page
  • Hijacks the web browser's home page
  • The experts agree, you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in Safer-Surf.
Safer-Surf.exe (070a27992dc75ed85a9317150a0226d4) has been flagged by the following 11 scanners:
Anti-Virus softwareVersionDetection
Lavasoft Ad-Aware 807 Gen:Variant.Graftor.155161
Bitdefender Gen:Variant.Graftor.155161
Dr.Web Trojan.Lyrics.167
Emsisoft Anti-Malware Gen:Variant.Graftor.155161
F-Secure 11.2014-20-11_5 Gen:Variant.Graftor.155161
G Data 14.11.24 Gen:Variant.Graftor.155161
McAfee-GW-Edition 7.6941 BehavesLike.Win32.PWSZbot.cm
MicroWorld-eScan Gen:Variant.Graftor.155161
SUPERAntiSpyware 10227 Trojan.Agent/Gen-Renos
Symantec 11/20/2014 rev. 5 WS.Reputation
TrendMicro-HouseCall 7.2.324 Suspicious_GEN.F47V0908
177.dll (d8ee2c9974416dca86e106b918328463) has been flagged by the following 22 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware Gen:Variant.Zusy.103904
AegisLab 1.5 AdWare.MSIL.DomaIQ
Agnitum Outpost PUA.AddLyrics!
Antiy-AVL Trojan/Win32.TSGeneric
avast! 8.0.1489.320 Win32:Adware-gen [Adw]
AVG Generic5.BGUP
AVware Revizer.b (fs)
Baidu-International Adware.Win32.AddLyrics.BBM
Bitdefender 7.2 Gen:Variant.Zusy.103904
Comodo Security 19774 ApplicUnwnt
Emsisoft Anti-Malware Gen:Variant.Zusy.103904 (B)
ESET-NOD32 10550 a variant of Win32/AdWare.AddLyrics.BM
Fortinet FortiGate Riskware/AddLyrics
F-Secure 11.0.19100.45 Gen:Variant.Zusy.103904
G Data 24 Gen:Variant.Zusy.103904
McAfee Artemis!D8EE2C997441
McAfee-GW-Edition v2014.2 BehavesLike.Win32.BadFile.dh
MicroWorld-eScan Gen:Variant.Zusy.103904
Panda Antivirus Trj/Genetic.gen
Qihoo-360 Win32/Trojan.f36
TrendMicro-HouseCall 9.700.0.1001 TROJ_GEN.R047H09HR14
VIPRE Antivirus 33854 Revizer.b (fs)
178.dll (8eaabc79d8e6a17291b17857fbc23e43) has been flagged by the following 18 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware Gen:Variant.Zusy.103904
Agnitum Outpost PUA.AddLyrics!
Antiy-AVL Trojan/Win32.SGeneric
AVG Generic5.BHVB
Avira TR/Zusy.xynynabr
AVware Revizer.b (fs)
Baidu-International Adware.Win32.AddLyrics.BBM
Bitdefender 7.2 Gen:Variant.Zusy.103904
Dr.Web Trojan.Lyrics.167
Emsisoft Anti-Malware Gen:Variant.Zusy.103904 (B)
ESET-NOD32 10369 a variant of Win32/AdWare.AddLyrics.BM
F-Secure 11.0.19100.45 Gen:Variant.Zusy.103904
G Data 24 Gen:Variant.Zusy.103904
Kingsoft AntiVirus 2013.4.9.267 Win32.Troj.Generic.a.(kcloud)
MicroWorld-eScan Gen:Variant.Zusy.103904
NANO AntiVirus Trojan.Win32.Lyrics.deivgu
Symantec 20141.1.0.330 WS.Reputation.1
VIPRE Antivirus 32820 Revizer.b (fs)
       View all 51 all detections
Safer-Surf has been seen bundling various 3rd party software during the installation process. Make sure to check for and remove unused programs.

Program detailsProgram details

Displayed publisher: Safer-Surf-software
Installation folder: C:\Program Files\ver4safer-surf
Uninstaller: C:\Program Files\ver4Safer-Surf\Uninstall.exe
Estimated size: 2.62 MB

Program filesFiles installed by Safer-Surf

Program executable:Safer-Surf.exe (Malware detected)
Name:Bo Nd Sa
Surfing surfing
Path:C:\Program Files\ver4safer-surf\Safer-Surf.exe
Additional files:
  • Safer-Surf.exe - Bo Nd Sa (Surfing surfing)
  • (Malware detected) 177.dll
  • 177.xpi
  • 177_x64.dll
  • (Malware detected) 178.dll
  • 178.xpi
  • 178_x64.dll
  • Uninstall.exe

Program behaviorsBehaviors exhibited

2 Internet Explorer BHOs
  • 177.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'Safer-Surf' with the class of {A5EDB57A-DD49-11F5-51E8-7F8A2F97EAAC}.
  • 178.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'Safer-Surf' with the class of {B77A1877-1C7D-D07F-0805-7AB9C129FD78}.
Startup File (All Users Run)
  • Safer-Surf.exe is loaded in the all users (HKLM) registry as a startup file name 'Safer-Surf' which loads as C:\Program Files\ver4Safer-Surf\Safer-Surf.exe.

How do I remove Safer-Surf?

You can uninstall Safer-Surf from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program Safer-Surf, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove Safer-Surf.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

How do I reset my web browser?

If your web browser homepage and search settings have been modfied by Safer-Surf you can restore them to their previous default settings.
Microsoft Internet Explorer
Mozilla Firefox
Google Chrome

Win 7 (SP1) 56%
Win 8.1 1%
Automatically starts? Yes
(Found in the run registry)
Uninstall it 87%
Keep it 13%

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 7 65.34%
Windows 10 30.68%
Windows XP 2.27%
Windows Vista 1.70%
Which OS releases does it run on?
Windows 7 Home Premium 24.43%
Windows 7 Ultimate 21.59%
Windows 7 Professional 14.20%
Windows 8.1 10.80%
Windows 8.1 Pro 7.39%
Windows 8 4.55%

Distribution by countryGeography

35.47% of installs come from the United States
Which countries install it?
  United States 35.47%
  Saudi Arabia 9.36%
  Brazil 6.40%
  DZ 3.94%
  India 3.94%
  IQ 3.94%
  Australia 3.45%
  United Kingdom 2.96%
  Belgium 2.46%
  Egypt 2.46%
  Spain 1.97%
  Germany 1.48%
  France 1.48%
  Jordan 1.48%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Hewlett-Packard 32.20%
Dell 20.34%
Acer 17.80%
Toshiba 8.47%
Samsung 5.08%
ASUS 3.39%
Lenovo 3.39%
Intel 2.54%
NEC 1.69%
Sony 1.69%
Common models
HP Pavilion g6 Notebook P... 2.73%
HP Pavilion 15 Notebook P... 2.73%
HP 15 Notebook PC 2.73%
Samsung 300E5EV/300E4EV/2... 2.73%
Dell Inspiron 3521 1.82%
Dell Inspiron N5040 1.82%


user comment
No one has commented yet. Help others learn more about this software, share your comments.