Adware.SafeGuard

By Domesticus in Adware

Threat Scorecard

Ranking:	11,438
Threat Level:	20 % (Normal)
Infected Computers:	6,714

First Seen:	April 1, 2015
Last Seen:	August 26, 2023
OS(es) Affected:	Windows

Adware.SafeGuard is a malignant worm application which usually initiates, shows, or downloads advertisements to the affected computer. Adware.SafeGuard often creates pop-ups, toolbars, etc. Adware.SafeGuard is aimed at collecting information about users and send them to host computers without any awareness and permission. Adware.SafeGuard will change your home page to another marketing website. Adware.SafeGuard will change your browser code and disable you to set your browser options. Remove Adware.SafeGuard before it steals your private details.

Table of Contents

SpyHunter Detects & Remove Adware.SafeGuard

File System Details

Adware.SafeGuard may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	DelYAC_x64.sys	5de0bfd0c60dbb418d33f09243e2275a	2,326
Name: DelYAC_x64.sys MD5: 5de0bfd0c60dbb418d33f09243e2275a Size: 16.98 KB (16984 bytes) Detections: 2,326 Type: System file Path: C:\WINDOWS\DelYAC_x64.sys Group: Malware file Last Updated: June 27, 2022
2.	DelYAC_x86.sys	3f03c884f48022fdae115d6153f50b01	1,564
Name: DelYAC_x86.sys MD5: 3f03c884f48022fdae115d6153f50b01 Size: 16.44 KB (16448 bytes) Detections: 1,564 Type: System file Path: C:\Windows\DelYAC_x86.sys Group: Malware file Last Updated: March 28, 2022
3.	SGUpdaterSvc.exe	853c452d51a947273292df4838397262	511
Name: SGUpdaterSvc.exe MD5: 853c452d51a947273292df4838397262 Size: 16.39 KB (16392 bytes) Detections: 511 Type: Executable File Path: C:\Windows.old.001\Program Files\SafeGuard\SGUpdaterSvc.exe Group: Malware file Last Updated: May 29, 2023
4.	SafeGuardSrv.exe	a11a527214f0e73cba97b3822a0101ae	347
Name: SafeGuardSrv.exe MD5: a11a527214f0e73cba97b3822a0101ae Size: 585.74 KB (585744 bytes) Detections: 347 Type: Executable File Path: C:\Program Files (x86)\SafeGuard\SafeGuardSrv.exe Group: Malware file Last Updated: October 9, 2022
5.	2705443.del	a0bfd785ddecd1af8396236e3e4737a9	310
Name: 2705443.del MD5: a0bfd785ddecd1af8396236e3e4737a9 Size: 2.81 MB (2813984 bytes) Detections: 310 Path: C:\ProgramData\System32\2705443.del Group: Malware file Last Updated: October 9, 2021
6.	trz1D91.tmp	f174ffd0ecbb61929d64cbb1cf3a0ad9	130
Name: trz1D91.tmp MD5: f174ffd0ecbb61929d64cbb1cf3a0ad9 Size: 2.81 MB (2812960 bytes) Detections: 130 Type: Temporary File Path: C:\ProgramData\System32\trz1D91.tmp Group: Malware file Last Updated: February 16, 2021
7.	SafeGuard32.dll	f8c47045b74ad65ae2394c7ade7ea424	6
Name: SafeGuard32.dll MD5: f8c47045b74ad65ae2394c7ade7ea424 Size: 2.77 MB (2771896 bytes) Detections: 6 Type: Dynamic link library Path: %ALLUSERSPROFILE%\System32 Group: Malware file Last Updated: August 22, 2016
8.	SafeGuard32.dll	583d2164fd7226d83289cb1ae098bcc5	6
Name: SafeGuard32.dll MD5: 583d2164fd7226d83289cb1ae098bcc5 Size: 2.77 MB (2771896 bytes) Detections: 6 Type: Dynamic link library Path: %ALLUSERSPROFILE%\System32 Group: Malware file Last Updated: August 22, 2016
9.	SafeGuard32.dll	967a67e12d3bb4ee5948b1bf122873f0	6
Name: SafeGuard32.dll MD5: 967a67e12d3bb4ee5948b1bf122873f0 Size: 2.77 MB (2771896 bytes) Detections: 6 Type: Dynamic link library Group: Malware file Last Updated: August 22, 2016
10.	SafeGuard32.dll	0008c6da17d948df62afddf8b08037f4	4
Name: SafeGuard32.dll MD5: 0008c6da17d948df62afddf8b08037f4 Size: 2.77 MB (2771896 bytes) Detections: 4 Type: Dynamic link library Path: %ALLUSERSPROFILE%\System32 Group: Malware file Last Updated: August 22, 2016
11.	eProtect.sys	63736a6259d588d13158012d42550992	2
Name: eProtect.sys MD5: 63736a6259d588d13158012d42550992 Size: 17.28 KB (17280 bytes) Detections: 2 Type: System file Path: \??\C:\Windows\system32 Group: Malware file Last Updated: August 22, 2016
12.	SafeGuard32.dll	ced49ae8e8fb636dd5e1e2c7d9f1f75b	2
Name: SafeGuard32.dll MD5: ced49ae8e8fb636dd5e1e2c7d9f1f75b Size: 2.77 MB (2771896 bytes) Detections: 2 Type: Dynamic link library Path: %ALLUSERSPROFILE%\System32 Group: Malware file Last Updated: August 22, 2016
13.	SafeGuard32.dll	fa75b86f1311ac016cdffbca821dcc39	1
Name: SafeGuard32.dll MD5: fa75b86f1311ac016cdffbca821dcc39 Size: 2.6 MB (2601400 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\System32 Group: Malware file Last Updated: August 22, 2016
14.	SafeGuard32.dll	4cafd7b231fb5f22d00a01bb0f1e5238	1
Name: SafeGuard32.dll MD5: 4cafd7b231fb5f22d00a01bb0f1e5238 Size: 180.22 KB (180224 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\System32 Group: Malware file Last Updated: August 22, 2016
15.	SafeGuard32.dll	6ecd32503f7794d3ded47f019d275cf9	1
Name: SafeGuard32.dll MD5: 6ecd32503f7794d3ded47f019d275cf9 Size: 1.03 MB (1032192 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\System32 Group: Malware file Last Updated: August 22, 2016
16.	SafeGuard32.dll	65b34a5de7f0168435ee344bd7945e5f	1
Name: SafeGuard32.dll MD5: 65b34a5de7f0168435ee344bd7945e5f Size: 1.53 MB (1536952 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\System32 Group: Malware file Last Updated: August 22, 2016
17.	SafeGuard32.dll	577d2a6c7dc30d912203dcc11b1dec7e	1
Name: SafeGuard32.dll MD5: 577d2a6c7dc30d912203dcc11b1dec7e Size: 671.74 KB (671744 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\System32 Group: Malware file Last Updated: August 22, 2016
18.	SafeGuard32.dll	38d8862a98f76b75d97f7d6a65b081dc	1
Name: SafeGuard32.dll MD5: 38d8862a98f76b75d97f7d6a65b081dc Size: 1.53 MB (1536952 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\System32 Group: Malware file Last Updated: August 22, 2016
19.	EProtect_amd64.sys	f49744d74c9a8e2bdfc7d2d4db6eb54e	1
Name: EProtect_amd64.sys MD5: f49744d74c9a8e2bdfc7d2d4db6eb54e Size: 19.32 KB (19328 bytes) Detections: 1 Type: System file Path: \??\C:\Windows Group: Malware file Last Updated: August 22, 2016
20.	SafeGuard32.dll	f9bd6c1c7d3383ecd7685b7844477f14	1
Name: SafeGuard32.dll MD5: f9bd6c1c7d3383ecd7685b7844477f14 Size: 2.77 MB (2771896 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\System32 Group: Malware file Last Updated: August 22, 2016
21.	EProtect_amd64.sys	e65630eedd84e16ececbb8f1e73be03a	1
Name: EProtect_amd64.sys MD5: e65630eedd84e16ececbb8f1e73be03a Size: 19.85 KB (19856 bytes) Detections: 1 Type: System file Path: \??\C:\Windows Group: Malware file Last Updated: August 22, 2016
22.	SafeGuard32.DLL	1153d1fa3ae4c6753c0ecf7fec0b8273	1
Name: SafeGuard32.DLL MD5: 1153d1fa3ae4c6753c0ecf7fec0b8273 Size: 2.81 MB (2812960 bytes) Detections: 1 Type: Dynamic link library Path: %ALLUSERSPROFILE%\System32 Group: Malware file Last Updated: August 22, 2016
23.	%UserProfile%\Application Data\antispy.exe
Name: %UserProfile%\Application Data\antispy.exe Type: Executable File Group: Malware file
24.	%Documents and Settings%\[UserName]\Desktop\Protection Center Support.lnk
Name: %Documents and Settings%\[UserName]\Desktop\Protection Center Support.lnk Type: Shortcut Group: Malware file

Registry Details

Adware.SafeGuard may create the following registry entry or registry entries:

File name without path

Uninstall SafeGuard.lnk

HKEY..\..\..\..{RegistryKeys}

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings 'WarnOnPostRedirect' = '0'

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings 'ProxyOverride' = ''

HKEY_CURRENT_USER/Software\Microsoft\Windows\CurrentVersion\Run

HKEY_CURRENT_USER\Software\Paladin Antivirus

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run 'tmp'

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System 'DisableTaskMgr' = '1'

SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\SafeGuardApp.exe

SOFTWARE\Microsoft\Tracing\SafeGuard_RASAPI32

SOFTWARE\Microsoft\Tracing\SafeGuard_RASMANCS

SOFTWARE\SafeGuard

SOFTWARE\SafeGuardApp

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\SafeGuardApp.exe

SOFTWARE\Wow6432Node\SafeGuard

SOFTWARE\Wow6432Node\SafeGuardApp

SYSTEM\ControlSet001\services\SafeGuard Update Service

SYSTEM\ControlSet002\services\SafeGuard Update Service

SYSTEM\CurrentControlSet\services\SafeGuard Update Service

HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}

SafeGuard

Directories

Adware.SafeGuard may create the following directory or directories:

%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\SafeGuard

%APPDATA%\Microsoft\Windows\Start Menu\Programs\SafeGuard

%LOCALAPPDATA%\Alerts_LLC

%LOCALAPPDATA%\SafeGuard

%PROGRAMFILES%\SafeGuard

%PROGRAMFILES(x86)%\SafeGuard

%UserProfile%\Local Settings\Application Data\SafeGuard

%WINDIR%\SysWOW64\config\systemprofile\AppData\Local\SafeGuard

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Adware.SafeGuard

Threat Scorecard

EnigmaSoft Threat Scorecard

SpyHunter Detects & Remove Adware.SafeGuard

File System Details

Registry Details

Directories

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen