Threat Database Adware Surf Safely Ads

Surf Safely Ads

By GoldSparrow in Adware

Threat Scorecard

Ranking: 16,701
Threat Level: 20 % (Normal)
Infected Computers: 554
First Seen: July 14, 2014
Last Seen: June 25, 2023
OS(es) Affected: Windows

The Surf Safely browser plug-in is offered by SuperWeb LLC. as an application that can provide an additional layer of security and delete your Web browsing tracks. The Surf Safely browser plug-in is similar in functionality to the Web Surf Shield and Protected Surf programs. Security authorities reveal that the Surf Safely plug-in is an adware that may act as a Web filter that blocks the native ads on e-commerce portals to provide advertisements from partners and generate pay-per-click revenue for its creators. Moreover, the Surf Safely adware might change your proxy and DNS settings to reroute your Internet traffic through the servers of advertisers. The purpose of the Surf Safely adware lies far off the security and anonymity you may be promised to. The Surf Safely adware may use data like your download and search history as well as your bookmarks collection to engage in behavioral marketing.

Internet browsers that are affected by the Surf Safely adware might crash and redirect users to sponsored sites. The ads by Surf Safely may not be distinguishable from the ads you encountered on Amazon and eBay before the infection because of the implementation of ActionScript and JavaScript. However, the Surf Safely adware may place the slogan 'Ad by Surf Safely' on banners and transitional pages loaded with marketing content that would be presented to you whenever you switch between sites and opened tabs. Additionally, the Surf Safely adware may load windows under your main browser windows to welcome you to install programs like WiseEnhance and You-Bar after you finish surfing the Internet. The programs mentioned before are considered to be badware and may cause registry errors. The Surf Safely adware may install its files in the Temp folder under the hidden AppData directory where temporary Internet files are stored. Security authorities advise users to purge the Surf Safely adware by using a credible anti-spyware solution that can find and delete its binary.

SpyHunter Detects & Remove Surf Safely Ads

File System Details

Surf Safely Ads may create the following file(s):
# File Name MD5 Detections
1. FrameworkEngine.exe e07aad279dd7b0fcf13552538d7e7b31 4
2. FrameworkEngine.exe 971a1ec6822dd4ad033b37b001c0e2ff 2
3. FrameworkEngine.exe c923229ea5a58dece4ab9809f8d4f4ad 2
4. FrameworkBHO.dll 548c8bdecc9cc421a5b06fc78c8f99cc 2
5. FrameworkBHO64.dll 21c28f4e5fbcd1d2331477ecea3634dd 2
6. FrameworkBHO.dll a6ead8b48272bb0528f9db0b3cac8ad1 2
7. FrameworkEngine.exe d75db282cfc9db00503ef2a7d78b6ec1 1
8. FrameworkEngine.exe ca04cdf0e289d2f2e5c5f6ad7741c9cf 1
9. FrameworkEngine.exe 939ba457a662dcd13e9c18bf02693e1d 1
10. FrameworkEngine.exe f751b88f74cd4adab3abb65c1b40aa0d 1
11. FrameworkEngine.exe c38ac6adb4cb97275ccf197188a0cfed 1
12. FrameworkEngine.exe d2edb8bcac7d3614547fe2902738eb71 1
13. FrameworkEngine.exe 0c5782ba26f4817fe249caa0483e6445 1
14. FrameworkEngine.exe dbb9a1fe2a66ff9fa8691d51eed9bd58 1
15. FrameworkBHO64.dll 7a9eb341e31cc9484a8eb28262a54f8b 1
16. C:\Users\\appdata\Local\Surf Safely\uninstall.exe
17. chrome_installer.js
18. clear_cache.js
19. common.js
20. firefox_installer.js
21. ie_installer.js
22. installer.js
23. main_installer.js
24. migrate.js
25. projectInstaller.js
26. repair.js
27. repair_data.json
28. SoftwareDetector.exe
29. sqlite3.exe
30. storageedit.exe

Registry Details

Surf Safely Ads may create the following registry entry or registry entries:
CLSID
{2139705E-FE4C-492C-B08C-77EBD02CD897}
{48B32EA3-DCF8-4C2A-9649-EEB6809AFF66}
{4920DE57-8B61-417F-B689-D0F3B74B3981}
{49EADED5-8B21-418B-9084-91F3E94BC481}
{6C85A1C9-0F93-4B46-BE67-D409D64C7E67}
{6CE7A11D-0F50-4BCF-8498-4C09E84CEA67}
{8167D7E6-93D6-4499-A3CF-6DDF9A716826}
{81ADD76E-938C-4450-BEBF-14DFFD718226}
SOFTWARE\38986
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{48B32EA3-DCF8-4C2A-9649-EEB6809AFF66}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6C85A1C9-0F93-4B46-BE67-D409D64C7E67}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6C85A1C9-0F93-4B46-BE67-D409D64C7E67}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{6C85A1C9-0F93-4B46-BE67-D409D64C7E67}
Software\Proxy\installations\Surf Safely
SOFTWARE\Surf Safely
SOFTWARE\Wow6432Node\38986
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{48B32EA3-DCF8-4C2A-9649-EEB6809AFF66}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{6C85A1C9-0F93-4B46-BE67-D409D64C7E67}
SOFTWARE\Wow6432Node\Proxy\Installations\Surf Safely
SOFTWARE\Wow6432Node\Surf Safely

Directories

Surf Safely Ads may create the following directory or directories:

%APPDATA%\Microsoft\Windows\Start Menu\Programs\Surf Safely
%APPDATA%\{6C85A1C9-0F93-4B46-BE67-D409D64C7E67}
%LOCALAPPDATA%\Surf Safely
%PROGRAMFILES%\Surf Safely
%PROGRAMFILES(x86)%\Surf Safely
%USERPROFILE%\AppData\LocalLow\{6C85A1C9-0F93-4B46-BE67-D409D64C7E67}

Trending

Most Viewed

Loading...