Home / malware

PDF

Adware:Win32/ContinueToSave

First posted on 11 January 2014.
Source: Microsoft

Aliases :

There are no other names known for Adware:Win32/ContinueToSave.

Explanation :

Threat behavior

Installation


This program silently installs itself as an Internet Explorer add-on, a Chrome extension, and a Firefox plug-in. You won't see it installing, but you will see ads appear in web searches that you normally wouldn't.

You can see the add-on in the Manage Add-ons window in Internet Explorer:



You can see the extension in the Extensions section in Chrome settings:



You can see the extension in the Add-ons Manager in Firefox:



It also creates an entry in the Programs and Features section of the Control Panel. Running this uninstaller removes Adware:Win32/ContinueToSave from your computer. The entry may be called "cONtiinueetosavE" or something similar:



Behavior

Adware:Win32/ContinueToSave inserts ads into search results (with the label "Enhanced Results" and "Ads by safesaver") and may also show pop-up windows with ads.

The ads can look like this:







Analysis by Chris Stubbs

Symptoms

The following could indicate that you have this program on your PC:

• You see pop-up ads such as these:
  
  
  
• You see ads that say they are "by safesaver":
  
  

Last update 11 January 2014

 

TOP