Threat Database Adware Safer Browser

Safer Browser

By GoldSparrow in Adware

Threat Scorecard

Ranking: 2,210
Threat Level: 10 % (Normal)
Infected Computers: 230,761
First Seen: January 26, 2015
Last Seen: September 21, 2023
OS(es) Affected: Windows

The Safer Browser program is classified by security analysts as a browser hijacker that prevents users and other applications from changing the online settings it applies to your PC. The Safer Browser app may change your home page, new tab and default search engine to use Native-search.com or another low-quality search aggregator. You should keep in mind that the Safer Browser application can be remotely instructed to modify the way web pages are presented to you and inject ads as a way to generate pay-per-click revenue for its developers. Browser hijackers such as Safer Browser restrict the user from accessing options of their web client and may redirect users to unsafe web locations. The Safer Browser tool is known to auto-start with Windows thanks to a registry key and infected users are notified with a pop-up during system boot-up that Safer Browser has enabled protection. In this case, it protects its operations and its ability to monetize your clicks. Moreover, Safer Browser may collect data such as your IP address, bookmarks and preferred online resources to understand better what ads may interest you. You should note that the Safer Browser hijacker is distributed with freeware bundles that most users handle via the 'Express' or 'Typical' option. Additionally, the Safer Browser executable may be located in the AppData or Temp folder of Windows to make it harder for users to remove it manually. You may want to use a reputable anti-malware tool that can purge all files associated with Safer Browser from your system.

SpyHunter Detects & Remove Safer Browser

Registry Details

Safer Browser may create the following registry entry or registry entries:
File name without path
Safer Browser.lnk
Regexp file mask
%WINDIR%\System32\Tasks\SaferBrowserProtectTask
%WINDIR%\System32\Tasks\SaferUpdateTaskMachineCore
%WINDIR%\System32\Tasks\SaferUpdateTaskMachineUA
%WINDIR%\Tasks\SaferUpdateTaskMachineCore.job
%WINDIR%\Tasks\SaferUpdateTaskMachineUA.job
SOFTWARE\Classes\AppID\SaferUpdate.exe
SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\{9E357C12-4CA8-43F1-8EEC-7B65F6F532E3}
SOFTWARE\Classes\Safer.OneClickCtrl.9
SOFTWARE\Classes\Safer.Update3WebControl.3
SOFTWARE\Classes\SaferHTML
SOFTWARE\Classes\SaferUpdate.CoCreateAsync
SOFTWARE\Classes\SaferUpdate.CoreClass
SOFTWARE\Classes\SaferUpdate.CoreClass.1
SOFTWARE\Classes\SaferUpdate.CoreMachineClass
SOFTWARE\Classes\SaferUpdate.CoreMachineClass.1
SOFTWARE\Classes\SaferUpdate.CredentialDialogMachine
SOFTWARE\Classes\SaferUpdate.CredentialDialogMachine.1.0
SOFTWARE\Classes\SaferUpdate.OnDemandCOMClassMachine
SOFTWARE\Classes\SaferUpdate.OnDemandCOMClassMachine.1.0
SOFTWARE\Classes\SaferUpdate.OnDemandCOMClassMachineFallback
SOFTWARE\Classes\SaferUpdate.OnDemandCOMClassMachineFallback.1.0
SOFTWARE\Classes\Technologies.OneClickProcessLauncherMachine
SOFTWARE\Classes\Technologies.OneClickProcessLauncherMachine.1.0
SOFTWARE\Clients\StartMenuInternet\Safer Browser
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SaferUpdate.exe
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SaferBrowserProtectTask
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SaferUpdateTaskMachineCore
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SaferUpdateTaskMachineUA
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\safer.exe
Software\Microsoft\Windows\CurrentVersion\Run\SaferBrowserIsDefault
SOFTWARE\MozillaPlugins\@update.safer.com/Safer Update;version=3
SOFTWARE\MozillaPlugins\@update.safer.com/Safer Update;version=9
SOFTWARE\RegisteredApplications\Safer Browser
SOFTWARE\Safer Technologies
Software\Safer Technologies\Safer Browser
SOFTWARE\Wow6432Node\Classes\AppID\SaferUpdate.exe
SOFTWARE\Wow6432Node\Clients\StartMenuInternet\Safer Browser
SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SaferUpdate.exe
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\safer.exe
SOFTWARE\Wow6432Node\MozillaPlugins\@update.safer.com/Safer Update;version=3
SOFTWARE\Wow6432Node\MozillaPlugins\@update.safer.com/Safer Update;version=9
SOFTWARE\Wow6432Node\Safer Technologies
SOFTWARE\Wow6432Node\Safer Technologies\Safer Browser

Directories

Safer Browser may create the following directory or directories:

%LOCALAPPDATA%\Safer Technologies
%PROGRAMFILES%\Safer Technologies
%UserProfile%\Local Settings\Application Data\Safer Technologies

URLs

Safer Browser may call the following URLs:

//search2.search

Related Posts

Trending

Most Viewed

Loading...