Safe Finder

Safe Finder Description

Safe Finder is a PUP (Potentially Unwanted Program). Safe Finder may be distributed by bundling Safe Finder with popular freeware downloads, and is commonly found on certain popular software download websites. Computer users may be tricked into installing Safe Finder, by making it difficult to opt out of installing Safe Finder and by making it seem as if Safe Finder is a legitimate, useful program.

Safe Finder may Expose Computer User to Threat Infections

Safe Finder is marketed as a safe alternative to popular search engines. Surprisingly, Safe Finder is marketed as a way for computer users to stay away from threatening websites and accessing safe and reliable search results when conducting a search online. However, Safe Finder may do the opposite of this; Safe Finder may make the computer users be exposed to threatening online content while at the same time may fail to deliver reliable search results. This is because Safe Finder may be associated with numerous advertisements and affiliate marketing schemes. Search results using Safe Finder may result in advertisements that range from known online hoaxes like fake software updates and bogus technical support services to advertisements falsely advertising that the computer user has won a contest in order to trick computer users into clicking on them. Search results on Safe Finder are mainly sponsored links that promote these kinds of unwanted services.

How Safe Finder Works

Safe Finder is a PUP that may be installed as a Web browser extension or add-on. Once Safe Finder has been installed, Safe Finder may change the affected Web browser's default search engine and homepage to a fake search engine associated with Safe Finder, isearch.safefinder.net, setting this as the default Web page. If computer users try to replace this unwanted search engine with Google, Bing or another reliable search engine, it will revert when the affected Web browser starts up. This is because Safe Finder may change the Windows' start-up settings as part of its installation process, removing the computer user's settings every time Safe Finder is installed.

How Safe Finder may be Used to Profit at the Expense of Computer Users

The main goal of Safe Finder is to profit from advertising and affiliate marketing. To do this, Safe Finder may try to increase the ranking and page views of its associated Web pages. Instead of delivering useful content so that computer users may visit these websites, however, Safe Finder may force them to visit these Web pages repeatedly. Safe Finder may use fake search results, pop-up windows, and Web browser redirects to ensure that computer users are exposed to this content repeatedly and against their will. Doing this increases advertisement revenue and money from affiliate marketing. Safe Finder may be associated with tracking components that keep track of computer users' online searches and other online activities for use in marketing.

Common Problems that may be Associated with Safe Finder

If Safe Finder is installed on your computer, Safe Finder may cause a wide variety of symptoms and issues that may make it difficult to use the affected PC. The following are problems that may be linked to Safe Finder:

  • Safe Finder may be linked to performance problems on affected computers. Safe Finder may cause affected Web browsers to become slow, crash and freeze frequently and fail to load webpages.
  • Safe Finder may cause affected Web browsers to become hard to use due to repeated redirects and constant pop-up messages interrupting the computer users' activities.
  • Safe Finder may interfere with other software on the affected computer. It is very common for these kinds of PUPs to cause security software to display constant error messages, or other programs crash frequently.
Aliases: Riskware/Toolbar_Linkury [Fortinet], a variant of Win32/Toolbar.Linkury.A, PUP/LinkUry [Panda], Adware.Linkury.B (B), Adware.Linkury.1 [DrWeb], PUA.Toolbar.Linkury!, Win32:SmartBar-A [PUP] [Avast], Suspicious_GEN.F47V0612, Adware.Linkury (fs), Artemis!447953059FC9 [McAfee] and Adware.Linkury.B.

Technical Information

File System Details

Safe Finder creates the following file(s):
# File Name Size MD5 Detection Count
1 %SystemDrive%\Users\NATHI NATHA\AppData\Local\RGMService\RGMUpdater.exe 85,504 c069c1bd3b37556cda040807f416aa4f 1,268
2 %ALLUSERSPROFILE%\_tmp.exe\_tmp.exe 266,330 1770d359d9b45f8e08c0120f1607cbb1 518
3 %SYSTEMDRIVE%\Users\user\Desktop\_MEGA\51d2eb7c4d53caea2a1ad30f154dad582c4c17b3b1f044b562d171a0cb4c99d8.exe\51d2eb7c4d53caea2a1ad30f154dad582c4c17b3b1f044b562d171a0cb4c99d8.exe 49,859 13d4ee06fe8476e0464a3602ec01f5f9 456
4 %PROGRAMFILES(x86)%\ProductUI\Startup.exe 169,472 85084201ba44f6907a2f6272eeb0a4aa 280
5 %SYSTEMDRIVE%\AdwCleaner\Quarantine\C\Program Files (x86)\ProductUI\Startup.exe.vir\Startup.exe.vir 78,848 505f414ea2c85f39c3b8a260a2556099 53
6 %LOCALAPPDATA%\Smartbar\Application\SafeFinder.exe 28,952 5e94dfe7de36e4de80f759ed1405063f 1
7 C:\users\user\appdata\Local\smartbar\application\browserhelper.exe c5768f028a5521c1ee77ffef812d1022 N/A
More files

Registry Details

Safe Finder creates the following registry entry or registry entries:
Directory
%ALLUSERSPROFILE%\Application Data\Hayzumflex
%ALLUSERSPROFILE%\Application Data\holdtam
%ALLUSERSPROFILE%\Application Data\holdtams
%ALLUSERSPROFILE%\Application Data\Kolnixo
%ALLUSERSPROFILE%\Application Data\Kolnixos
%ALLUSERSPROFILE%\Application Data\lamzap
%ALLUSERSPROFILE%\Application Data\quoteex
%ALLUSERSPROFILE%\Application Data\SafeFinder
%ALLUSERSPROFILE%\Application Data\utatity
%ALLUSERSPROFILE%\Hayzumflex
%ALLUSERSPROFILE%\Hayzumflexs
%ALLUSERSPROFILE%\holdtam
%ALLUSERSPROFILE%\holdtams
%ALLUSERSPROFILE%\Kolnixo
%ALLUSERSPROFILE%\Kolnixos
%ALLUSERSPROFILE%\konksolex
%ALLUSERSPROFILE%\lamzap
%ALLUSERSPROFILE%\quoteex
%ALLUSERSPROFILE%\SafeFinder
%ALLUSERSPROFILE%\SafeFinders
%ALLUSERSPROFILE%\Saophase
%ALLUSERSPROFILE%\Saophases
%ALLUSERSPROFILE%\statdex
%ALLUSERSPROFILE%\UltimateSecurityPackages
%COMMONPROGRAMFILES%\Anflex
%COMMONPROGRAMFILES%\Apeco
%COMMONPROGRAMFILES%\Applus
%COMMONPROGRAMFILES%\Blackin
%COMMONPROGRAMFILES%\BlackTrax
%COMMONPROGRAMFILES%\Canbam
%COMMONPROGRAMFILES%\Coffan
%COMMONPROGRAMFILES%\Dingfind
%commonprogramfiles%\Donex
%COMMONPROGRAMFILES%\Dongcof
%COMMONPROGRAMFILES%\DoubleJob
%COMMONPROGRAMFILES%\Doubletough
%COMMONPROGRAMFILES%\Doublewarm
%COMMONPROGRAMFILES%\Ecotam
%COMMONPROGRAMFILES%\Faselex
%COMMONPROGRAMFILES%\Finla
%COMMONPROGRAMFILES%\Freeair
%COMMONPROGRAMFILES%\Freetrax
%COMMONPROGRAMFILES%\Freshex
%COMMONPROGRAMFILES%\FreshTech
%COMMONPROGRAMFILES%\Geojob
%COMMONPROGRAMFILES%\Goldtough
%COMMONPROGRAMFILES%\Goodtop
%COMMONPROGRAMFILES%\Greenfix
%COMMONPROGRAMFILES%\Groovelex
%COMMONPROGRAMFILES%\Hattough
%COMMONPROGRAMFILES%\Haywarm
%COMMONPROGRAMFILES%\Holdtom
%COMMONPROGRAMFILES%\Homelax
%COMMONPROGRAMFILES%\Hotair
%COMMONPROGRAMFILES%\Hotex
%COMMONPROGRAMFILES%\Hotfind
%COMMONPROGRAMFILES%\Hotity
%COMMONPROGRAMFILES%\Hotstring
%COMMONPROGRAMFILES%\Icetom
%COMMONPROGRAMFILES%\Infind
%COMMONPROGRAMFILES%\Insoft
%COMMONPROGRAMFILES%\Isflex
%COMMONPROGRAMFILES%\Itplus
%COMMONPROGRAMFILES%\Jaycom
%COMMONPROGRAMFILES%\Jaycore
%COMMONPROGRAMFILES%\Jaydox
%COMMONPROGRAMFILES%\Jayhome
%COMMONPROGRAMFILES%\K-ron
%COMMONPROGRAMFILES%\Kayin
%COMMONPROGRAMFILES%\Keykix
%COMMONPROGRAMFILES%\Kintough
%COMMONPROGRAMFILES%\Kon-Dox
%COMMONPROGRAMFILES%\Konkfind
%COMMONPROGRAMFILES%\KonkSing
%COMMONPROGRAMFILES%\Labity
%COMMONPROGRAMFILES%\Latcore
%COMMONPROGRAMFILES%\Lexicom
%COMMONPROGRAMFILES%\Lightstrong
%COMMONPROGRAMFILES%\Lighttouch
%COMMONPROGRAMFILES%\Medhold
%COMMONPROGRAMFILES%\Movetop
%COMMONPROGRAMFILES%\Namfax
%COMMONPROGRAMFILES%\Newtax
%COMMONPROGRAMFILES%\Opedex
%COMMONPROGRAMFILES%\Overlax
%COMMONPROGRAMFILES%\OverTough
%COMMONPROGRAMFILES%\OzerPhase
%COMMONPROGRAMFILES%\Ozersoft
%COMMONPROGRAMFILES%\Quotelab
%COMMONPROGRAMFILES%\Randax
%COMMONPROGRAMFILES%\Raning
%COMMONPROGRAMFILES%\Ranklux
%COMMONPROGRAMFILES%\Redhome
%COMMONPROGRAMFILES%\Rontax
%COMMONPROGRAMFILES%\Roundtam
%COMMONPROGRAMFILES%\Runcom
%COMMONPROGRAMFILES%\Saillight
%COMMONPROGRAMFILES%\SailSanis
%COMMONPROGRAMFILES%\Saltit
%COMMONPROGRAMFILES%\Saltzap
%COMMONPROGRAMFILES%\San-Fan
%COMMONPROGRAMFILES%\Sancom
%COMMONPROGRAMFILES%\Saneco
%COMMONPROGRAMFILES%\Sanhome
%COMMONPROGRAMFILES%\SanStrong
%COMMONPROGRAMFILES%\ScotFresh
%COMMONPROGRAMFILES%\Silflex
%COMMONPROGRAMFILES%\Singleair
%COMMONPROGRAMFILES%\Solfind
%COMMONPROGRAMFILES%\Solkix
%COMMONPROGRAMFILES%\Solo-Eco
%COMMONPROGRAMFILES%\Solola
%COMMONPROGRAMFILES%\Stanron
%COMMONPROGRAMFILES%\StatFresh
%COMMONPROGRAMFILES%\StimDom
%COMMONPROGRAMFILES%\Stimity
%COMMONPROGRAMFILES%\StringIty
%COMMONPROGRAMFILES%\Strong-Hold
%COMMONPROGRAMFILES%\Subphase
%COMMONPROGRAMFILES%\Sunlight
%COMMONPROGRAMFILES%\Suntax
%COMMONPROGRAMFILES%\TamLux
%COMMONPROGRAMFILES%\Tamtech
%COMMONPROGRAMFILES%\Taning
%COMMONPROGRAMFILES%\Tempdox
%COMMONPROGRAMFILES%\Tempit
%COMMONPROGRAMFILES%\Tinin
%COMMONPROGRAMFILES%\Touchit
%COMMONPROGRAMFILES%\TouchLax
%commonprogramfiles%\Transplus
%COMMONPROGRAMFILES%\Transwarm
%COMMONPROGRAMFILES%\Treeing
%COMMONPROGRAMFILES%\Tripplecom
%COMMONPROGRAMFILES%\Trippleron
%COMMONPROGRAMFILES%\Trislab
%COMMONPROGRAMFILES%\truetrax
%COMMONPROGRAMFILES%\U--Ex
%COMMONPROGRAMFILES%\UltimateSecurityPackage
%COMMONPROGRAMFILES%\Unacom
%COMMONPROGRAMFILES%\Unatouch
%COMMONPROGRAMFILES%\Vaiacof
%COMMONPROGRAMFILES%\Vaiahome
%commonprogramfiles%\Ventoplus
%COMMONPROGRAMFILES%\ViaEx
%COMMONPROGRAMFILES%\Villatop
%COMMONPROGRAMFILES%\Voling
%COMMONPROGRAMFILES%\Voya-Ing
%COMMONPROGRAMFILES%\Warmfresh
%COMMONPROGRAMFILES%\Warmtrax
%COMMONPROGRAMFILES%\X-Light
%COMMONPROGRAMFILES%\Zaam-It
%COMMONPROGRAMFILES%\Zaamcom
%COMMONPROGRAMFILES%\Zaamlam
%COMMONPROGRAMFILES%\Zaamstring
%COMMONPROGRAMFILES%\Zathkix
%COMMONPROGRAMFILES%\Zathlab
%COMMONPROGRAMFILES%\Zentrax
%COMMONPROGRAMFILES%\Zottouch
%COMMONPROGRAMFILES%\Zummatouch
%COMMONPROGRAMFILES(x86)%\Airlex
%COMMONPROGRAMFILES(x86)%\Airtop
%COMMONPROGRAMFILES(x86)%\Alphaqvostock
%COMMONPROGRAMFILES(x86)%\Anflex
%COMMONPROGRAMFILES(x86)%\Apeco
%COMMONPROGRAMFILES(x86)%\Applus
%COMMONPROGRAMFILES(x86)%\Blackin
%COMMONPROGRAMFILES(x86)%\Blacktip
%COMMONPROGRAMFILES(x86)%\BlackTrax
%COMMONPROGRAMFILES(x86)%\Can-It
%COMMONPROGRAMFILES(X86)%\Canbam
%COMMONPROGRAMFILES(x86)%\Coffan
%COMMONPROGRAMFILES(x86)%\Dingfind
%COMMONPROGRAMFILES(x86)%\DomQuadtop
%commonprogramfiles(x86)%\Donex
%COMMONPROGRAMFILES(x86)%\Dongcof
%COMMONPROGRAMFILES(x86)%\DoubleJob
%COMMONPROGRAMFILES(x86)%\Doubletough
%COMMONPROGRAMFILES(x86)%\Doublewarm
%COMMONPROGRAMFILES(x86)%\Driptintrax
%COMMONPROGRAMFILES(x86)%\Ecotam
%COMMONPROGRAMFILES(x86)%\Fase-Dex
%COMMONPROGRAMFILES(x86)%\Faselex
%COMMONPROGRAMFILES(x86)%\Finla
%COMMONPROGRAMFILES(x86)%\Freeair
%COMMONPROGRAMFILES(x86)%\FreeGohold
%COMMONPROGRAMFILES(x86)%\Freetrax
%COMMONPROGRAMFILES(x86)%\Freshex
%COMMONPROGRAMFILES(x86)%\FreshTech
%COMMONPROGRAMFILES(x86)%\Geo-Fresh
%COMMONPROGRAMFILES(x86)%\Geojob
%COMMONPROGRAMFILES(x86)%\Geonamtrax
%COMMONPROGRAMFILES(x86)%\Goldtough
%COMMONPROGRAMFILES(x86)%\GoodSing
%COMMONPROGRAMFILES(X86)%\Goodtop
%COMMONPROGRAMFILES(x86)%\Greenfix
%COMMONPROGRAMFILES(x86)%\Groovelex
%COMMONPROGRAMFILES(x86)%\Hattough
%COMMONPROGRAMFILES(x86)%\Haywarm
%COMMONPROGRAMFILES(x86)%\Holdtom
%COMMONPROGRAMFILES(x86)%\Homelax
%COMMONPROGRAMFILES(x86)%\Hotair
%COMMONPROGRAMFILES(x86)%\Hotex
%COMMONPROGRAMFILES(x86)%\Hotfind
%COMMONPROGRAMFILES(x86)%\Hotity
%COMMONPROGRAMFILES(x86)%\Hotstring
%COMMONPROGRAMFILES(x86)%\Icetom
%COMMONPROGRAMFILES(x86)%\Indigotough
%COMMONPROGRAMFILES(X86)%\Infind
%COMMONPROGRAMFILES(x86)%\Insoft
%COMMONPROGRAMFILES(x86)%\Isflex
%COMMONPROGRAMFILES(x86)%\Itplus
%COMMONPROGRAMFILES(X86)%\Jaycom
%COMMONPROGRAMFILES(x86)%\Jaycore
%COMMONPROGRAMFILES(x86)%\Jaydox
%COMMONPROGRAMFILES(x86)%\Jayhome
%COMMONPROGRAMFILES(x86)%\K--Lex
%COMMONPROGRAMFILES(x86)%\K-ron
%COMMONPROGRAMFILES(X86)%\Kankix
%COMMONPROGRAMFILES(x86)%\Kaycore
%COMMONPROGRAMFILES(x86)%\Kayin
%COMMONPROGRAMFILES(x86)%\Kaylight
%COMMONPROGRAMFILES(x86)%\KaySankix
%COMMONPROGRAMFILES(x86)%\Keykix
%COMMONPROGRAMFILES(x86)%\Keyron
%COMMONPROGRAMFILES(x86)%\Kintough
%COMMONPROGRAMFILES(x86)%\Konkfind
%COMMONPROGRAMFILES(x86)%\KonkSing
%COMMONPROGRAMFILES(x86)%\La-Trax
%COMMONPROGRAMFILES(X86)%\Labity
%COMMONPROGRAMFILES(x86)%\Latcore
%COMMONPROGRAMFILES(x86)%\Lexicom
%COMMONPROGRAMFILES(x86)%\Lightstrong
%COMMONPROGRAMFILES(x86)%\Lighttouch
%COMMONPROGRAMFILES(x86)%\Med-Stock
%COMMONPROGRAMFILES(X86)%\Medhold
%COMMONPROGRAMFILES(x86)%\Medlatis
%COMMONPROGRAMFILES(x86)%\Movetop
%COMMONPROGRAMFILES(x86)%\Namfax
%COMMONPROGRAMFILES(x86)%\Newtax
%COMMONPROGRAMFILES(x86)%\Opedex
%COMMONPROGRAMFILES(x86)%\Overlax
%COMMONPROGRAMFILES(x86)%\OverTough
%COMMONPROGRAMFILES(X86)%\OzerPhase
%COMMONPROGRAMFILES(x86)%\Ozersoft
%COMMONPROGRAMFILES(x86)%\Quotelab
%COMMONPROGRAMFILES(X86)%\Randax
%COMMONPROGRAMFILES(x86)%\Raning
%COMMONPROGRAMFILES(x86)%\Ranklux
%COMMONPROGRAMFILES(x86)%\Red-Job
%COMMONPROGRAMFILES(x86)%\Redhome
%COMMONPROGRAMFILES(x86)%\Redron
%COMMONPROGRAMFILES(x86)%\Ronfix
%COMMONPROGRAMFILES(x86)%\Rontax
%COMMONPROGRAMFILES(x86)%\Roundtam
%COMMONPROGRAMFILES(x86)%\Runcom
%COMMONPROGRAMFILES(x86)%\S-stock
%COMMONPROGRAMFILES(x86)%\Saillight
%COMMONPROGRAMFILES(x86)%\Sailtouch
%COMMONPROGRAMFILES(x86)%\Saltit
%COMMONPROGRAMFILES(x86)%\Saltzap
%COMMONPROGRAMFILES(x86)%\San-Fan
%COMMONPROGRAMFILES(x86)%\Sancom
%COMMONPROGRAMFILES(x86)%\Saneco
%COMMONPROGRAMFILES(x86)%\Sanhome
%COMMONPROGRAMFILES(x86)%\SanStrong
%COMMONPROGRAMFILES(x86)%\Saotop
%COMMONPROGRAMFILES(x86)%\ScotFresh
%COMMONPROGRAMFILES(X86)%\Silflex
%COMMONPROGRAMFILES(x86)%\Silverron
%COMMONPROGRAMFILES(x86)%\Singleair
%COMMONPROGRAMFILES(x86)%\Singlelamlam
%COMMONPROGRAMFILES(x86)%\Solfind
%COMMONPROGRAMFILES(x86)%\Solkix
%COMMONPROGRAMFILES(x86)%\Solo-Eco
%COMMONPROGRAMFILES(x86)%\Solola
%COMMONPROGRAMFILES(x86)%\Stanron
%COMMONPROGRAMFILES(x86)%\StatFresh
%COMMONPROGRAMFILES(x86)%\StimDom
%COMMONPROGRAMFILES(x86)%\Stimity
%COMMONPROGRAMFILES(x86)%\Stock-Home
%COMMONPROGRAMFILES(x86)%\StringIty
%COMMONPROGRAMFILES(x86)%\Strong-Hold
%COMMONPROGRAMFILES(x86)%\Subphase
%COMMONPROGRAMFILES(x86)%\Sun-Warm
%COMMONPROGRAMFILES(x86)%\Sunlight
%COMMONPROGRAMFILES(x86)%\Suntax
%COMMONPROGRAMFILES(x86)%\TamLux
%COMMONPROGRAMFILES(x86)%\Tamtech
%COMMONPROGRAMFILES(x86)%\Taning
%COMMONPROGRAMFILES(x86)%\Tempdox
%COMMONPROGRAMFILES(x86)%\Tempit
%COMMONPROGRAMFILES(x86)%\Tin-Light
%COMMONPROGRAMFILES(x86)%\Tinin
%COMMONPROGRAMFILES(x86)%\Toucheco
%COMMONPROGRAMFILES(x86)%\Touchit
%COMMONPROGRAMFILES(x86)%\TouchLax
%COMMONPROGRAMFILES(x86)%\Touchsing
%COMMONPROGRAMFILES(x86)%\Tran-Tough
%commonprogramfiles(x86)%\Transplus
%COMMONPROGRAMFILES(x86)%\Transwarm
%COMMONPROGRAMFILES(x86)%\Treeing
%COMMONPROGRAMFILES(x86)%\Tripplecom
%COMMONPROGRAMFILES(x86)%\Trippleron
%COMMONPROGRAMFILES(x86)%\Tris-Phase
%COMMONPROGRAMFILES(x86)%\Trislab
%COMMONPROGRAMFILES(x86)%\truetrax
%COMMONPROGRAMFILES(x86)%\U--Ex
%COMMONPROGRAMFILES(X86)%\UltimateSecurityPackage
%COMMONPROGRAMFILES(x86)%\Unacom
%COMMONPROGRAMFILES(x86)%\Unatouch
%COMMONPROGRAMFILES(x86)%\Vaiacof
%COMMONPROGRAMFILES(x86)%\Vaiahome
%commonprogramfiles(x86)%\Ventoplus
%COMMONPROGRAMFILES(x86)%\ViaEx
%COMMONPROGRAMFILES(X86)%\Villatop
%COMMONPROGRAMFILES(x86)%\Voling
%COMMONPROGRAMFILES(x86)%\Voya-Ing
%COMMONPROGRAMFILES(x86)%\Warmfresh
%COMMONPROGRAMFILES(X86)%\Warmtrax
%COMMONPROGRAMFILES(x86)%\X-Light
%COMMONPROGRAMFILES(x86)%\Zaam-It
%COMMONPROGRAMFILES(x86)%\Zaamcom
%COMMONPROGRAMFILES(x86)%\Zaamlam
%COMMONPROGRAMFILES(x86)%\Zaamstring
%COMMONPROGRAMFILES(x86)%\Zathkix
%COMMONPROGRAMFILES(x86)%\Zathlab
%COMMONPROGRAMFILES(x86)%\Zentrax
%COMMONPROGRAMFILES(x86)%\Zernimtone
%COMMONPROGRAMFILES(x86)%\ZimLa
%COMMONPROGRAMFILES(x86)%\Zoneis
%COMMONPROGRAMFILES(x86)%\Zonetough
%COMMONPROGRAMFILES(x86)%\Zottouch
%COMMONPROGRAMFILES(x86)%\Zummatouch
%COMMONPROGRAMFILES(x86)%\ZunRon
%PROGRAMFILES%\ProductUI
%PROGRAMFILES(x86)%\ProductUI
%PROGRAMFILES(x86)%\safefinder
Cookies
search.safefinder.com
Regexp file mask
%LOCALAPPDATA%\Stocktouch.exe
Registry key
Software\Microsoft\Internet Explorer\Approved Extensions\{9EB324CA-1466-4907-8392-92C9F653A229}
Software\Microsoft\Internet Explorer\DOMStorage\safefinder.com
Software\Microsoft\Internet Explorer\DOMStorage\search.safefinder.com
SOFTWARE\Microsoft\Internet Explorer\LowRegistry\DOMStorage\safefinder.com
SOFTWARE\Microsoft\Internet Explorer\LowRegistry\DOMStorage\search.safefinder.com
Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\SafeFinder.exe
SOFTWARE\Microsoft\Internet Explorer\Toolbar\{9eb324ca-1466-4907-8392-92c9f653a229}
SOFTWARE\Microsoft\Tracing\Hayzumflex_RASAPI32
SOFTWARE\Microsoft\Tracing\Hayzumflex_RASMANCS
SOFTWARE\Microsoft\Tracing\Quoteex_RASAPI32
SOFTWARE\Microsoft\Tracing\Quoteex_RASMANCS
SOFTWARE\Microsoft\Tracing\SafeFinder_RASAPI32
SOFTWARE\Microsoft\Tracing\SafeFinder_RASMANCS
SOFTWARE\Microsoft\Tracing\UltimateSecurityPackage_RASAPI32
SOFTWARE\Microsoft\Tracing\UltimateSecurityPackage_RASMANCS
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SafeFinder.exe
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\UltimateSecurityPackage.exe
SOFTWARE\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Hayzumflex.exe
SOFTWARE\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Quoteex.exe
SOFTWARE\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\UltimateSecurityPackage.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\HayzumflexU
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Stpro.exe
SOFTWARE\mtHayzumflex
Software\mtSafeFinder
SOFTWARE\mtUltimateSecurityPackage
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{9eb324ca-1466-4907-8392-92c9f653a229}
SOFTWARE\WOW6432Node\Microsoft\Tracing\Hayzumflex_RASAPI32
SOFTWARE\WOW6432Node\Microsoft\Tracing\Hayzumflex_RASMANCS
SOFTWARE\WOW6432Node\Microsoft\Tracing\Quoteex_RASAPI32
SOFTWARE\WOW6432Node\Microsoft\Tracing\Quoteex_RASMANCS
SOFTWARE\Wow6432Node\Microsoft\Tracing\SafeFinder_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\SafeFinder_RASMANCS
SOFTWARE\Wow6432Node\Microsoft\Tracing\UltimateSecurityPackage_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\UltimateSecurityPackage_RASMANCS
SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SafeFinder.exe
SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\UltimateSecurityPackage.exe
SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Hayzumflex.exe
SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Quoteex.exe
SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\UltimateSecurityPackage.exe
SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\App Paths\HayzumflexU
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\Stpro.exe
SOFTWARE\WOW6432Node\mtHayzumflex
SOFTWARE\Wow6432Node\mtUltimateSecurityPackage
SYSTEM\ControlSet001\services\Hayzumflex
SYSTEM\ControlSet002\services\Hayzumflex
SYSTEM\CurrentControlSet\services\Hayzumflex
Uninstaller
{B685D7F1-BAC8-4318-8137-A774268BBD39}
{UltimateSecurityPackage}
File name without path
http_search.cubokit.com_0.localstorage
http_search.cubokit.com_0.localstorage-journal
http_search.safefinder.com_0.localstorage
http_search.safefinder.com_0.localstorage-journal
search.safefinder[1].xml
CLSID
{9EB324CA-1466-4907-8392-92C9F653A229}
{EDF23B0E-D735-3964-B81F-0BF003A3EC3B}

More Details on Safe Finder

The following cookies were found:
  • search.safefinder.com
The following URL's were found:
Tip: We recommend blocking the domain names as well as the IP addresses associated with them.
  • www.linkury.com

Site Disclaimer

Enigmasoftware.com is not associated, affiliated, sponsored or owned by the malware creators or distributors mentioned on this article. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of malware. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, malware from their computer with the help of SpyHunter and/or manual removal instructions provided on this article.

This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your computer. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.