Web Save

By ESGI Advisor in Adware

Threat Scorecard

Ranking: 7,400
Threat Level: 20 % (Normal)
Infected Computers: 5,986
First Seen: January 30, 2014
Last Seen: September 11, 2023
OS(es) Affected: Windows

Web Save Image

Web Save is a potentially unwanted program that may install itself on Internet Explorer, Google Chrome, and Mozilla Firefox Web browsers when PC users download or install free programs from suspicious download websites. The makers of Web Save may use misleading tactics in an attempt to install a Web Save add-on or plug-in on the computer system without the PC user's agreement. Web Save may spread and invade the computer through packaged free programs. Once installed, Web Save may create and display random discount coupon advertisements, sales and deals when computer users visit shopping related websites. Web Save may trace the PC user's Web browsing routine by recording websites the computer user visits and activity on those websites. Web Save declares to improve the computer user's Web browsing experience by saving time and money while shopping online; however, in truth, it's a potentially unwanted application.

SpyHunter Detects & Remove Web Save

File System Details

Web Save may create the following file(s):
# File Name MD5 Detections
1. XinSkkcaC7u.exe 29ee858c305012ac7e619fc88b8871b2 17
2. LKRNUCr.dll 9647bd96b0df6a4d3c76a1c944aeaa35 1

Registry Details

Web Save may create the following registry entry or registry entries:
SOFTWARE\Classes\safeweb.safeweb
SOFTWARE\Classes\safeweb.safeweb.1.1
SOFTWARE\Classes\websaave.websaave
SOFTWARE\Classes\websaave.websaave.3.7
SOFTWARE\Classes\websave.websave
SOFTWARE\Classes\websave.websave.3.7
SOFTWARE\Classes\websavve.websavve
SOFTWARE\Classes\websavve.websavve.3.7
Software\Microsoft\Internet Explorer\Approved Extensions\{86393703-D8BD-4B31-C9A1-79FF14B38CFE}
Software\Microsoft\Internet Explorer\Approved Extensions\{AF71B355-07C4-025C-CA6C-D5BE3F76077D}
Software\Microsoft\Internet Explorer\Approved Extensions\{BC6CA8E5-7205-E562-4264-78C8D8C22D80}
Software\Microsoft\Internet Explorer\Approved Extensions\{ECA14627-7FC8-03E7-C72C-ECC3B3ABA234}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{1A9D5CBD-560B-AAE6-5EDB-A3CF8621E2E2}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{336A7D45-FD6B-6307-DCB4-0B8107327778}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{425A69E1-699C-2BCF-C6A7-E280F3C3090E}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{539F0461-1852-3202-C340-8C4958CEAF2D}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{86393703-D8BD-4B31-C9A1-79FF14B38CFE}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{A9A1A044-FDAF-A9EE-9D28-FA513E99138C}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{AF71B355-07C4-025C-CA6C-D5BE3F76077D}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{BC6CA8E5-7205-E562-4264-78C8D8C22D80}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{D6CB05A7-8D79-BD48-4C0F-963CF06B359B}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{DB9B07B2-1A9D-25BC-6BFD-637AA10D8A36}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{E2CABFBB-0C90-11E6-9BD5-F14229A368E7}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{ECA14627-7FC8-03E7-C72C-ECC3B3ABA234}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{FB6B7634-BEE5-E9FA-AEAC-750D7A91B273}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{FB7A1DA2-6E81-14ED-2703-5B9A6019A342}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{7DD5E91C-3864-77EC-7635-D14910C2A03E}
{497C131E-2032-051B-B32A-C69A960FBB13}
{7DD5E91C-3864-77EC-7635-D14910C2A03E}

Directories

Web Save may create the following directory or directories:

%ALLUSERSPROFILE%\Application Data\ssafeweb
%ALLUSERSPROFILE%\Application Data\websavE
%ALLUSERSPROFILE%\seafEwaeb
%ALLUSERSPROFILE%\ssAfeeweb
%ALLUSERSPROFILE%\ssafeweb
%ALLUSERSPROFILE%\weBsavie
%ALLUSERSPROFILE%\websaVVe
%ALLUSERSPROFILE%\websavE
%ALLUSERSPROFILE%\weobsave
%ALLUSERSPROFILE%\wuebsave
%PROGRAMFILES%\safeweb
%PROGRAMFILES%\seafEwaeb
%PROGRAMFILES%\ssafeweb
%PROGRAMFILES%\weBsavie
%PROGRAMFILES%\webbsave
%PROGRAMFILES%\websaVVe
%PROGRAMFILES%\websaave
%PROGRAMFILES%\websavE
%PROGRAMFILES%\weobsave
%PROGRAMFILES(x86)%\safeweb
%PROGRAMFILES(x86)%\seafEwaeb
%PROGRAMFILES(x86)%\ssafeweb
%PROGRAMFILES(x86)%\weBsavie
%PROGRAMFILES(x86)%\webbsave
%PROGRAMFILES(x86)%\websaVVe
%PROGRAMFILES(x86)%\websaave
%PROGRAMFILES(x86)%\websavE
%PROGRAMFILES(x86)%\wuebsave

URLs

Web Save may call the following URLs:

wEbsave
webbsave
websAve
weobsave
wuebsaVe

Trending

Most Viewed

Loading...