Home Malware Programs Adware Safe Monitor

Safe Monitor

Posted: June 14, 2013

Threat Metric

Ranking: 9,286
Threat Level: 2/10
Infected PCs: 5,769
First Seen: June 14, 2013
Last Seen: September 21, 2023
OS(es) Affected: Windows

Safe Monitor is an adware program that is marketed as an anti-spying add-on that helps you protect yourself from websites that are tracking your information (via cookies and other commonly-used methods). In spite of its assurances, there have been many fraudulent and simply suspicious business practices surrounding Safe Monitor – most importantly, its site's usage of a fake Norton endorsement seal. Although Safe Monitor may offer some minor advantages for your web-browsing privacy, Safe Monitor subtracts with one hand what Safe Monitor delivers with the other, and you usually should uninstall Safe Monitor from your computer with any anti-malware product capable of dealing with malicious browser add-ons.

Safe Monitor: Safety from Spies in Exchange for Advertisements Piped Directly to You

With the rather provocative tag line of 'See who's spying on you,' Safe Monitor claims to monitor sites for invasions of privacy on a live basis, enabling you to catch a glimpse of the kind of information websites habitually monitor through cookie files and similar means. However, this function only is secondary to what SpywareRemove.com malware researchers consider being Safe Monitor's main point: displaying advertisements in your browser. Safe Monitor attempts to engender an air of legitimacy in its business by explaining this function in its privacy policy, but most PC users would consider up to five advertisements per page a high price to pay for Safe Monitor's iffy advantages.

It has been found that Safe Monitor's advertisements occur in various formats, including temporary web pages inserted between you and your destination website, text links, graphical advertisements and search result-based advertisements. Similar to many types of adware, Safe Monitor's privacy policy also states very specifically that Safe Monitor isn't responsible for the content or safety of advertisements Safe Monitor displays – making Safe Monitor a minor danger to your PC, as well as an irritant.

Changing the Channel Away from Safe Monitor

As a not-so-safe 'monitor,' Safe Monitor usually should be removed from your computer, and its symptoms make Safe Monitor easy to detect after its installation. While Safe Monitor also claims that Safe Monitor is 'easy to uninstall,' SpywareRemove.com malware experts warn that many browser changes enacted by Safe Monitor usually will not be removed whenever you try to remove Safe Monitor through standards methods. Anti-malware products can be employed for deleting Safe Monitor completely.

The most significant feature in all of Safe Monitor's marketing is a lie: its fake Norton-brand seal of quality. All PC users should be alert for similar scams, and stay aware of the fact that a simple graphics image on a website does not necessarily mean that that site is trustworthy. Because SpywareRemove.com malware experts haven't seen any browser exploits related to Safe Monitor's site, Safe Monitor's website only is dangerous to your computer in that it may encourage you to install Safe Monitor deliberately.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



safemonitor_Setup.exe File name: safemonitor_Setup.exe
Size: 1.42 MB (1423448 bytes)
MD5: aa4b7d081ef4f2c1ca0fe219e57bb7ca
Detection count: 91
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: June 14, 2013

Registry Modifications

The following newly produced Registry Values are:

CLSID{384997EE-E3BE-49C4-9ECA-C62B7C08128A}HKEY..\..\..\..{RegistryKeys}SOFTWARE\Classes\Wow6432Node\AppID\DynConIE.DLLSOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{FED6A736-129B-49C7-857E-25FC91E87DB3}Software\Mozilla\Firefox\Extensions\support@safemonitorapp.comSOFTWARE\Wow6432Node\Classes\AppID\DynConIE.DLLSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{FED6A736-129B-49C7-857E-25FC91E87DB3}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}SafeMonitor

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\SafeMonitor%LOCALAPPDATA%\SafeMonitor%PROGRAMFILES%\SafeMonitor%PROGRAMFILES(x86)%\SafeMonitor
The following URL's were detected:
safemonitorapp

Related Posts

Loading...