Home Malware Programs Adware GOSafer Ads

GOSafer Ads

Posted: March 2, 2015

Threat Metric

Ranking: 14,863
Threat Level: 2/10
Infected PCs: 4,134
First Seen: March 2, 2015
Last Seen: July 26, 2023
OS(es) Affected: Windows

GOSafer Ads are part of an adware application that is known to display random advertisements. The GOSafer Ads are sometimes presented as pop-ups or banners. Through use of GOSafer Ads by clicking on them computer users may witness their web browser redirecting to load another site that may have questionable content. GOSafer Ads are usually annoying and can interrupt use of the internet and even slow down the operation of some web browser applications. Removal of GOSafer Ads may warrant use of an antispyware program to safely detect and remove all related components.

Technical Details

Registry Modifications

The following newly produced Registry Values are:

Regexp file mask%WINDIR%\System32\drivers\gosaferdrv.sysHKEY..\..\..\..{RegistryKeys}SOFTWARE\GOSaferSYSTEM\ControlSet001\Enum\Root\LEGACY_GOSAFERDRVSYSTEM\ControlSet001\services\GOSaferSYSTEM\ControlSet001\services\gosaferdrvSYSTEM\ControlSet002\Enum\Root\LEGACY_GOSAFERDRVSYSTEM\ControlSet002\services\GOSaferSYSTEM\ControlSet002\services\gosaferdrvSYSTEM\CurrentControlSet\Enum\Root\LEGACY_GOSAFERDRVSYSTEM\CurrentControlSet\services\GOSaferSYSTEM\CurrentControlSet\services\gosaferdrvHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}GOSafer

Additional Information

The following directories were created:
%PROGRAMFILES%\GOSafer%PROGRAMFILES(x86)%\GOSafer
Loading...