84,488,480 programs installed

Should I remove safe save?

What percent of users and experts removed it?
80% remove it20% keep it
Overall Sentiment
Bad
What do people think about it?
(click star to rate)
How common is it?
Global Rank #22,880
United States Rank #40,848
Reach 0.0084%
Lifespan of installation (until removal)
< 24.34 days
717.97 days >
Average installed length: 377.24 days

Versions

VersionDistribution
4.3.7.199 0.61%
3.3.0.1726 0.61%
2.2.0.1811 0.61%

safe save

What is safe save?

Safe Saver (Safe Save) from Moshe Caspi of bestdealapp.info is an adware/spyware web browser hijacker. The browser extension includes various features that will modify the default or custom settings of the browser including the home page and search settings. The browser extension will modify the user's home page and search settings as well as various other web browser functionality such as new tabs, etc.

In addition, the software will manipulate the security of the PC and Windows Internet Explorer by setting approved security zones for the following domains:
- reportbox3.info
- world-downloads.info
- goodbarlife.com (fallback domain)
- grapzip.in

Safe Save malware will then attempt to download various files from these domains and install them within the OS in various temporary directories such as the Internet Explorer Cache. Once installed, the software will add various execution points including a CopyHookHandler, and Approved Shell Extension, a Browser Helper Object and Plugins for Chrome and Firefox.

About  (from Moshe Caspi)

Safesaver is a brand new cross browser add-on that helps you to get the best online shopping experience. As soon as it is downloaded and installed, it scans the Web for the latest coupons, and discounts. We all just love to get discounts on the items we usually buy, but it's even better when the discounts just come to ...  Read more
Overview
  • Malware detected in the program
  • Integrates into the web browser
  • Typically distributed through a pay-per-install bundle
  • Hijacks the web browser's home page
  • The experts agree, you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in safe save.
51b9f69153a80.dll (0f449a5256bcfd0c8d914040735f55de) has been flagged by the following 14 scanners:
Anti-Virus softwareVersionDetection
avast! 2014.9-130703 Win32:MultiPlug-X [PUP]
AVG 2014.0.3486 Generic5
Comodo Security 16537 ApplicUnwnt
ESET-NOD32 7.8519 a variant of Win32/Adware.MultiPlug.I
IKARUS anti.virus t3scan.2.0.3.0 Win32.SuspectCrc
K7 AntiVirus 13.170.8947 Riskware
K7GW 13.12.7.0.12 Riskware
McAfee 5600.7124 Artemis!0F449A5256BC
McAfee-GW-Edition 7.7124 Artemis!0F449A5256BC
Sophos 4.90 FastSave
Trend Micro 10.465.03 ADW_MULTIPLUG
TrendMicro-HouseCall 7.2.184 ADW_MULTIPLUG
Vba32 AntiVirus 3.12.22.2 BScope.Adware.MegaSearch
VIPRE Antivirus 19250 Trojan.Win32.Generic!BT
       View all 14 all detections
safe save has been found to be bundled with 3rd party software. If you have not purposefully installed this, you should be safe uninstalling it.

Program detailsProgram details

Displayed publisher: safe save
URL: safesaver.net
Help link: safesaver.net/terms.html
Installation folder: C:\ProgramData\safe save
Uninstaller: "C:\ProgramData\safe save\uninstall.exe" /path=C:\ProgramData\safe save
Estimated size: 541.87 KB

Program filesFiles installed by safe save

Program module:51b9f69153a80.dll (Malware detected)
Path:C:\ProgramData\safe save\51b9f69153a80.dll
MD5:0f449a5256bcfd0c8d914040735f55de
  • uninstall.exe

Program behaviorsBehaviors exhibited

Internet Explorer BHO
  • 51b9f69153a80.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'saafE save' with the class of {D0F9E304-9940-5E44-0976-2AD8E348E37B}.

How do I remove safe save?

You can uninstall safe save from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program safe save, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove safe save.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

How do I reset my web browser?

If your web browser homepage and search settings have been modfied by safe save you can restore them to their previous default settings.
Microsoft Internet Explorer
Mozilla Firefox
Google Chrome

OS VERSIONS
Win 7 (SP1) 64%
Win XP 1%
 
USER ACTIONS
Uninstall it 80%
Keep it 20%
 
GLOBAL RANK
#22,880

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 7 74.55%
Windows 10 18.18%
Windows XP 4.85%
Windows Vista 2.42%
Which OS releases does it run on?
Windows 7 Ultimate 28.83%
Windows 7 Home Premium 23.93%
Windows 7 Professional 9.82%
Windows 7 Home Basic 7.36%
Microsoft Windows XP 4.91%
Windows 8 4.29%

Distribution by countryGeography

14.56% of installs come from the United States
Which countries install it?
  United States 14.56%
  MA 5.06%
  Brazil 4.43%
  Italy 4.43%
  United Kingdom 4.43%
  Taiwan 3.80%
  Mexico 3.80%
  Indonesia 3.80%
  Thailand 3.16%
  India 3.16%
  Iran 2.53%
  Germany 2.53%
  Canada 2.53%
  Saudi Arabia 2.53%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Hewlett-Packard 27.27%
Dell 20.66%
Acer 20.66%
Toshiba 11.57%
ASUS 8.26%
Samsung 4.13%
GIGABYTE 2.48%
Lenovo 2.48%
Sony 1.65%
Intel 0.83%
Common models
Dell Inspiron N5010 3.70%
HP Pavilion g6 Notebook P... 3.70%
Dell Inspiron 3521 2.78%
HP Pavilion g4 Notebook P... 2.78%
Dell Dell System XPS L5... 1.85%
HP Pavilion dv6 Notebook ... 1.85%


comments1 comment

user comment
expert comment
AdwareBuster (Expert)over a year ago
Some versions of that adware/malware are signed by 'Yakov Cohen'.