Follow:

 

Adware:Win32/Safesaver


Microsoft security software detects and removes this program.

This adware shows you advertisements to as you browse the web.

It can be downloaded from the program's website or bundled with some third-party software installers.

Our evaluation criteria resource page has more information on how and why we identify potentially unwanted software.



What to do now

This program may create an uninstaller that can be accessed from the Control Panel. Running this uninstaller won't remove this program completely, but it will remove the browser plugin from Internet Explorer:
  • For Windows 8, open the Start screen, type Uninstall and then go to Settings. In the search results, go to Uninstall a program.
  • For Windows 7 and Vista, open the Start menu and navigate to Control Panel then Programs and then Uninstall a Program.
  • For XP, open the Start menu and navigate to Control Panel then Add or Remove Programs.

Choose the program you want to remove, and then click or tap Uninstall or Uninstall/Change and follow the prompts.

The entry for this program may be called:

  • ssaafe isavee
  • safe ussAve
  • saafe ssaVea

 

The uninstaller won't remove the plugin from other browsers, such as Firefox or Chrome. To fully restore your PC we recommend you do a system restore:

You can use the following free tools to detect and remove this program and other potentially unwanted software from your PC:

 

Threat behavior

Installation

When run, the installer for Adware:Win32/Safesaver adds a plugin to Internet Explorer. You cannot disable the plugin due to protection software installed by the program:

The program creates a folder in %ProgramData% with the same name as the plugin and installs files related to the plugin there.

The program creates an installation entry in the Programs and Features section of the Control Panel. Running this uninstaller may stop the adware from displaying ads, but it will not completely remove all the files related to the program.

To fully remove this program you may need to do a system restore (see the What to do now section on Summary tab).

Adware:Win32/Safesaver can be installed from the program's website or it may be bundled with some third-party software installation programs.

Behavior

Once installed, Adware:Win32/Safesaver displays ads to you as you browse the Internet, both in websites and on search engine results, as in the following examples:

 

It can also redirect you from where you wanted to go, and instead ask you to fill out a survey to gain a "gift" or other offer. These surveys are not associated with the companies they are advertising:

Recommendations

Do not install applications from untrusted sources. We recommended you download legitimate free applications directly from the vendor. Downloading free applications online such as video players, video codecs, and free games can expose you to a large risk of installing potentially unwanted software at the same time.

Analysis by Geoff McDonald


Symptoms

You might see the following when using your Internet browser:

  • Extra advertisements when using search engines such as Bing and Google
  • Pop-ups
  • Coupons
  • Your web browser is sent to pages where you have to complete surveys or install other programs

Prevention


Alert level: High
First detected by definition: 1.155.227.0
Latest detected by definition: 1.177.1340.0 and higher
First detected on: Jul 18, 2013
This entry was first published on: Jul 18, 2013
This entry was updated on: Jan 06, 2014

This threat is also detected as:
No known aliases