SOSVirus » news » PUP.Optional.SafeGuard


SafeGuard is a program that usually installs without your knowledge via free software downloads. It displays many banners and advertising popup when internet browsing,


– It belongs to a family of PUP (Potentially Unwanted Program).
– Vendor : PUP.Optional

Main actions:

-It installs as a process launched at startup of the system (RP),
-It installs a program of extension for the browser Google Chrome (G2)
-It installs a plugin of the browser Mozilla Firefox (P2)
-It settled in the Base of registers to be launched each time the system (O4).
-It installs as a service to be launched each time the system (O23),(SS/SR).
-It starts a task planned in automatic (O39),
-It installs as a (O42) program,
-It creates a registry key ShareTools (ø53),
–It creates registry keys ‘Software’,
–It creates multiple files users (ø61),
-It creates a legacy key (O64),
-It creates many filesichiers (O43) (O88)
-It create MSI package file (O93)

ZHPDiag rapport:

-(. Alerts LLC-SafeGuard.) –C: Program FilesSafeGuardSafeGuard.exe
O4-HKLM.. Run: . (…) –C: Program FilesSafeGuardSafeGuardApp.exe
O23-Service: SafeGuard Update Service (SafeGuard Update Service). (…) -C: Program FilesSafeGuardSafeGuardSrv.exe
O42-Logiciel: SafeGuard-(. Safeguard.) –SafeGuard

O43-CF D: 03/05/2015-12: 09: 22-[]—-D C: Program FilesSafeGuard
O43-CF D: 03/05/2015-12: 09: 17-[]—-D C: ProgramDataMicrosoftWindowsStart MenuProgramsSafeGuard
O43-CF D: 03/05/2015-12: 09: 43-[]—-D C: UsersCoolmanAppDataLocalAlerts_LLC
O43-CF D: 03/05/2015-12: 09: 21-[]—-D C: UsersCoolmanAppDataLocalSafeGuard
O43-CF D: 03/05/2015-12: 09: 22-[]—-D C: UsersCoolmanAppDataRoamingMicrosoftWindowsStart MenuProgramsSafeGuard
SR-| Auto 01/04/2015 585744 | (SafeGuard Update Service). (…) -C: Program FilesSafeGuardSafeGuardSrv.exe
SR-| Auto 17/03/2015 16392 | (SGUpdater). (. Alerts LLC.) -C: Program FilesSafeGuardSGUpdaterSvc.exe


– Remove software via Windows Configuration Panel,
Remove with ZHPcleaner
Diagnose with ZHPDiag

1 Vote2 Votes3 Votes4 Votes5 Votes (No Ratings Yet)

Leave a Comment