SafeSearch. How to delete? (Removal tutorial)

removal by Gabriel E. Hall - - | Type: Browser hijacker
12

Important information about SafeSearch virus

SafeSearch virus has been targeting web browsers for almost two years. It seems that this annoying browser hijacker is not willing to give up. AVSoftware designed this program as a reliable and safe search engine that filters malicious websites. However, if you read the Privacy Policy carefully, you will find out that developers reveal that some of the provided links might lead to questionable sites that may contain dangerous viruses. Bear in mind that if you encounter a virus, creators of SafeSearch.ch will not take any responsibility for your damage. It’s only your fault that you end up on malicious site after clicking on a dangerous link in the search results. Indeed, hijacker delivers modified search results, so they may differ from results provided by Google or other reputable search engines. However, virus prevents users from accessing reliable search engines. To know that your computer was infected is really simple. You either notice changed homepage or default search engine, or face unexpected redirects to SafeSearch. Besides, hijacker won’t let you restore previous settings. Once it gets inside it takes full control of all popular web browsers. Don’t let virus have fun on your browsers and remove SafeSearch as soon as it appears on the screen. Reimage might help you a lot in the elimination process.

Browser hijacker spreads bundled with various free programs and after infiltration stays resident in background. It might modify registry settings in order to stay longer on the PC. It came inside to deliver commercial content. Developers of SafeSearch virus wants you to visit various promotional websites, so they include sponsored links into search results and initiate unexpected redirects. You may end up on a strange website when you start typing an address in URL bar or when you click on another link. Beware that after one unlucky SafeSearch redirect you might catch unpleasant computer infection. Hijacker has another feature that worries us – it may collect information about users. In their Privacy Policy developers state that they do not collect personally identifiable or private information and do not share any gathered information with third-parties. However, they record information related to your browsing activity: IP address, cookie information, browsing history, etc. Indeed, it seems like not a big problem that someone has access to your browsing history, but don’t forget that this program entered your computer without your knowledge. So, you cannot be sure what hidden purposes the developers have. Initiate SafeSearch removal and protect yourself from all possible threats.

The picture of SafeSearch search engine

How does browser hijacker spread?

If you download software from unknown websites or using file-sharing services, you might face SafeSearch hijack as well. This potentially unwanted program spreads bundled with regular software and sneaks inside the system when users choose ‘Basic’ or ‘Quick’ installation mode. Using this setup, you let install PUPs without even realising it. Bear in mind that installers do not adequately inform about additional programs. Therefore, you have always monitor installation process and ‘unpack’ software by choose ‘Advanced’ or ‘Custom’ installation mode. It allows opting the list of optional installs and declining them. If you see the list, but you cannot unmark them, you should quit installation and look for another program. Besides, you should read EULA, Terms and Agreements, Privacy Policy or other provided documents. There you can find important information that will help to make a decision if a program is worth installing.

SafeSearch removal procedure

SafeSearch.ch virus causes lots of unwanted and disturbing activities. There’s no need to deal with redirects, pop-ups, and corrupted search results. You can easily get rid of the infection and get back to normal browsing. Besides, browser hijacker might install various third-party tools and application that might reduce your computer’s speed and even try to steal your private information. Do not risk and remove SafeSearch! At the end of the article, you will find a step-by-step guide how to eliminate virus manually. Follow these steps carefully, because it’s important to delete all virus-related components in order to avoid another hijack. However, you can initiate automatic SafeSearch removal and dedicate this job for a professional program.

If you want to uninstall SafeSearch automatically, you can use one of these programs: Reimage, Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus, Malwarebytes Anti Malware Computer security experts recommend these programs because they can detect and remove potentially unwanted programs and viruses from your computer, including all dangerous and malicious components related to them. Besides, these programs guarantee immediate and ongoing system protection.

We might promote some affiliate products. An entire disclosure is provided in our Terms and Conditions. By Downloading any recommended Anti-spyware software to uninstall SafeSearch you accept our privacy policy and terms and conditions.
try it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Computer security experts recommend using Reimage to uninstall SafeSearch. Reimage scans the entire computer system and checks whether it is infected with spyware/malware or not. If you want to remove computer threats and secure your computer system, you should consider buying the licensed version of Reimage.

Note: Manual assistance needed implies that one or all of removal tools have failed to remove the threat without manual intervention. In such scenario, please follow the manual removal guide, which is provided below.

You can find more details about this program in Reimage review.

You can find more details about this program in Reimage review.
Press mentions on Reimage
Press mentions on Reimage

SafeSearch manual removal instructions

End these processes:
aanyvkcf.exe,safesearch.exe,rgzcdhtn.exe

Remove these registry values:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunaanyvkcf
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunSafeSearch
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunrgzcdhtn
HKEY_CURRENT_USERSoftwarePrimeSoft
HKEY_CURRENT_USERSoftwareSafeSearch
HKEY_CLASSES_ROOT.QSCH
HKEY_CLASSES_ROOTQSCH File
HKEY_CLASSES_ROOTSafeSearch.SafeSearchBHO
HKEY_CLASSES_ROOTSafeSearch.SafeSearchBHO.1
HKEY_CLASSES_ROOTCLSID{00000000-0000-0000-0000-000000000001}
HKEY_CLASSES_ROOTInterface{28E6CCE2-3F2C-4B3D-9CB4-2FC8715A3ECE}
HKEY_CLASSES_ROOTTypelib{82E9DE01-D860-40E4-B9C1-91F0E8272962}
HKEY_CLASSES_ROOTTypelib{CB5006EE-F57D-4116-B7B6-48EB564FE0F0}
HKEY_CLASSES_ROOTmimedatabasecontent typeapplication/x-QSCH
HKEY_USERS.defaultSoftwareNetscapeNetscape NavigatorTrusted External Applications%System%aanyvkcf.exe=yes
HKEY_USERS.defaultSoftwareNetscapeNetscape NavigatorSuffixesApplication/x-QSCH
HKEY_LOCAL_MACHINESoftwareMicrosoftInternet ExplorerToolbar{00000000-0000-0000-0000-000000000001}
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallaanyvkcf
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallrgzcdhtn

Remove these DLLs:
safesearch.dll,_safesearch.dll

Remove these files:
aanyvkcf.exe,safesearch.exe,rgzcdhtn.exe,safesearch.dll,_safesearch.dll

Remove these directories:
C:Program FilesPrimesoftSafeSearch

Manual SafeSearch Removal Instructions:

WindowsMac OS XInternet ExplorerMicrosoft EdgeFirefoxGoogle ChromeSafari

Uninstall SafeSearch in Windows systems

You can detect malware using Reimage.
You need to purchase a licensed version of it to remove threats.
More details about Reimage.

SafeSearch removal requires uninstalling all programs that are related to this browser hijacker. Look for these programs and remove them: SafeSearch, SafeSearch ToolbarSafeSear.ch, Trovi, Music Search App and Genieo. If you keep one of these programs, you might encounter another virus attack.

  1. Go to Start Control Panel Programs and Features (if you are Windows XP user, open Add/Remove Programs).Go to 'Start -> Control Panel -> Programs and Features' (if you are 'Windows XP' user, open 'Add/Remove Programs').
  2. If you are Windows 10 / Windows 8 user, click on Windows icon in the lower left corner of the screen to open Quick Access Menu. Then click Control Panel and select Uninstall a Program. If you are 'Windows 10 / Windows 8' user, click on Windows icon in the lower left corner of the screen to open 'Quick Access Menu'. Then click 'Control Panel' and select 'Uninstall a Program'.
  3. Remove SafeSearch and programs related to it
    Now, take a look at the list of programs and find SafeSearch or other programs that you do not remember installing.
  4. Right-click on these programs and select "Uninstall." Then click OK to save changes. Right-click every suspicious program and select 'Uninstall'
  5. Delete SafeSearch from Windows shortcuts
    Right-click on the shortcut of Mozilla Firefox and click Properties. Right-click on web browsers' icon and click 'Properties'
  6. Now, go to Shortcut tab and find Target field. Then delete the URL that is associated with your virus. Open 'Shortcut' tab and erase 'http://isearch.babylon.com...' or other shady URL

Follow the same steps as explained above with all other shortcuts of Internet browsers, including Google Chrome and Internet Explorer. Please check Start Menu, Desktop, and taskbar to find all shortcuts.

WindowsMac OS XInternet ExplorerMicrosoft EdgeFirefoxGoogle ChromeSafari

Uninstall SafeSearch in Mac OS X system

You can detect malware using Reimage.
You need to purchase a licensed version of it to remove threats.
More details about Reimage.

  1. Users who use OS X should click on Go button, which can be found at the top left corner of the screen and select Applications. Click on 'Go' to open a drop-down menu and select 'Applications'.
  2. Wait until you see Applications folder and look for SafeSearch or any other suspicious programs on it. Now right click on every of such entries and select Move to Trash.Click on each malicious application and select 'Move to Trash'
WindowsMac OS XInternet ExplorerMicrosoft EdgeFirefoxGoogle ChromeSafari

Delete SafeSearch from Internet Explorer (IE)

You can detect malware using Reimage.
You need to purchase a licensed version of it to remove threats.
More details about Reimage.

To complete virus elimination, you have to look for suspicious add-ons and uninstall them.

  1. Delete suspicious browser add-ons
    Launch Internet Explorer, and then open IE by clicking on the Gear icon, which is located at the top right corner of the Internet browser. Then, click Manage Add-ons. Open browser menu and go to 'Manage add-ons'
  2. Manage Add-ons window will appear on your screen. Now, search for SafeSearch and other questionable browser add-ons. Right-click them on each of them and select Disable. To eliminate malicious applications, right-click on each of them and click 'Disable'
  3. If virus altered your homepage, change it:
    Click the Gear icon at the top right corner of the Internet browser and then click Internet Options. Stay in General section.
  4. Now, delete malicious URL and enter Delete suspicious URL, type in your preferable site name and click 'Apply' to save
  5. Reset all Internet Explorer settings
    Click on Gear icon and then opt for Internet options. Then go to Advanced section.
  6. Click Reset.
  7. A new window appears, and then you have to tick Delete personal settings and click Reset to finalise SafeSearch removal. In 'Advanced' tab, click 'Reset'. Then tick 'Delete personal settings' and click 'Reset'.
WindowsMac OS XInternet ExplorerMicrosoft EdgeFirefoxGoogle ChromeSafari

Delete SafeSearch from Microsoft Edge

You can detect malware using Reimage.
You need to purchase a licensed version of it to remove threats.
More details about Reimage.

SafeSearch virus might have installed various extensions that might have malicious features. Get rid of all of them!

Reset settings in Microsoft Edge (Technique No.1):

  1. Open Microsoft Edge browser, then click on More button, which is situated at the top right edge of the screen
  2. Select Settings from the drop down menu.
  3. When the Settings panel appears, find Clear browsing data section and hit Choose what to clear button. Open Settings and click on 'Choose what to clear' button
  4. Then mark all components that you wish to delete and after that hit Clear. Click 'Clear'
  5. Right-click the Start button (that has Windows logo on it) and choose Task Manager. Right-click the Start button again and choose 'Task Manager'
  6. Go to Processes tab and look for Microsoft Edge.
  7. Right-click on it and select Go to details. If there is no Go to details option, select More details and carry out previous instructions. Right-click on 'Microsoft Edge' and choose 'Go to details' option If 'Go to details' option does not show up, choose 'More details' instead
  8. Once Details tab appears, look for entries that contain Microsoft Edge name. Right-click on such individual entries and choose End Task option to terminate them. Locate all entries that relate to Microsoft Edge and click 'End Task'

Reset Microsoft Edge (Technique No.2):

In case the Technique No.1 did not help you to fix the problem, use advanced Edge reset option.

  1. Important: you must backup your files before you use these tips
  2. Locate this folder on your PC: C:\Users\%username%\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe.
  3. Select all items in this folder and right-click with your mouse. Select Delete. Open Microsoft Edge folder on your PC, click every entry with the right mouse button and select 'Delete'
  4. Click on the Start button (that has Windows Logo on it) and in Search my stuff field, type in window power.
  5. With the right button of your mouse, click on every entry and select Run as administrator. Locate where Windows PowerShell is, right-click on it and click on 'Run as administrator' option
  6. Once you get Admin's rights, Windows PowerShell window should show up shortly. Paste this line:
    Get-AppXPackage -AllUsers -Name Microsoft.MicrosoftEdge | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register $($_.InstallLocation)\AppXManifest.xml -Verbose}
    after PS C:\WINDOWS\system32> and hit Enter. Copy and then paste the necessary command and hit 'Enter'

After completing these steps, Microsoft Edge should be SafeSearch-free.

WindowsMac OS XInternet ExplorerMicrosoft EdgeFirefoxGoogle ChromeSafari

Delete SafeSearch from Mozilla Firefox (FF)

You can detect malware using Reimage.
You need to purchase a licensed version of it to remove threats.
More details about Reimage.

Look through the list of extensions. There you might find various toolbars and add-ons that are related to SafeSearch virus. Uninstall them all.

  1. Delete suspicious browser extensions
    Launch Mozilla Firefox, and then open menu (click a button at the top right corner). Then, go to Add-ons Extensions. Open browser menu and go to 'Add-ons'
  2. Now, locate SafeSearch and other suspicious extensions. Click Remove to eliminate them. Go to 'Extensions' and locate malicious browser add-ons. Hit 'Remove' button to delete each entry
  3. If virus altered your homepage, change it:
    Open Firefox menu (click the button at the top right corner), and go to Options General.
  4. Delete malicious URL and then enter the address of the website that you want to set as your homepage.
  5. Click OK to save the changes. Open 'General' tab and delete the URL from 'Home Page' field or just simply click 'Restore to Default'. Then click on 'OK' button to apply changes.
  6. Reset all Mozilla Firefox settings
    Click on the Firefox at the top left corner and then click the question mark. Then, select Troubleshooting Information. Open menu by clicking on the indicated icon and on '?'. Then select 'Troubleshooting Information'.
  7. Reset Firefox to its default state message should appear then. You will see Reset Firefox button. Click this button a few times and finalise SafeSearch removal. Hit 'Reset Firefox' button a few times
WindowsMac OS XInternet ExplorerMicrosoft EdgeFirefoxGoogle ChromeSafari

Delete SafeSearch from Google Chrome

You can detect malware using Reimage.
You need to purchase a licensed version of it to remove threats.
More details about Reimage.

Check the list of extension and look for these entries: SafeSearch, SafeSearch ToolbarSafeSear.ch, Trovi, Music Search App and Genieo. These add-ons might are related to SafeSearch virus, so you have to uninstall them.

  1. Remove malicious extensions
    Launch Google Chrome, and then open menu (click a button at the top right corner). Then, go to Tools Extensions. Open browser's menu, then click 'Tools' and 'Extensions'
  2. Now, look for SafeSearch and other suspicious extensions and then click the trash icon to remove them. Find malicious extensions and click on the Trash bin icon to remove them
  3. If virus altered your homepage, change it:
    Open menu and select Settings.
  4. Find Open a specific page or set of pages under On startup section and click Set pages. Open browser's menu, then go to 'Settings' and select 'Set pages' under 'On startup' section
  5. An additional window should pop-up. Here, remove dubious URLs and add a new page that you wish to set as a homepage. Remove malicious search sites by clicking 'X'
  6. Open Chrome menu and go to Settings Manage Search engines under the Search section. Once you open browser's 'Settings', click on 'Manage search engines...' button
  7. In Search Engines..., configure default search engine settings. Remove untrustworthy ones. We advise you to leave only Google or another reputable website of your choice. Remove malicious search sites by clicking 'X'
  8. Reset all Google Chrome settings
    Open menu by clicking the button at the top right corner of Google Chrome, and go to Settings.
  9. Scroll down to find Reset browser settings button. Click on it. When in 'Settings', click Show advanced settings and then find 'Reset browser settings' button. Click on it.
  10. Click Reset to approve this action and finish SafeSearch removal. Click 'Reset' to finish the removal process.
WindowsMac OS XInternet ExplorerMicrosoft EdgeFirefoxGoogle ChromeSafari

Delete SafeSearch from Safari

You can detect malware using Reimage.
You need to purchase a licensed version of it to remove threats.
More details about Reimage.

  1. Delete suspicious browser extensions
    Open Safari web browser and click on Safari in menu at the top left of the screen. Once you do this, select Preferences. Click on 'Safari' and then select 'Preferences'
  2. Here, select Extensions and look for SafeSearch or other suspicious entries. Click on the Uninstall button to get rid each of them. Go to 'Extensions' and remove untrustworthy extensions
  3. If virus altered your homepage, change it:
    Open your Safari web browser and click on Safari in menu section. Here, select Preferences as it was displayed previously and select General.
  4. Here, look at the Homepage field. If it was altered by SafeSearch, remove unwanted link and enter the one that you want to use for your searches. Remember to include the "http://" before typing in the address of the page. Go to 'General' section and find Homepage field. Delete suspicious URL and replace it with a URL of your choice.
  5. Reset all Safari settings
    Open Safari browser and click on Safari in menu section at the top left of the screen. Here, select Reset Safari.... Click on 'Safari' and then select 'Reset Safari...'
  6. Now you will see a detailed dialog window filled with reset options. All of those options are usually checked, but you can specify which of them you want to reset. Click the Reset button to complete SafeSearch removal process. Select all checkboxes and click 'Reset'
Even if you have completed all the steps above, we still strongly recommend you to scan your computer system with a powerful anti-malware software. It is advisable to do that because an automatic malware removal tool can detect and delete all remains of SafeSearch, for instance, its registry keys. The anti-malware program can help you to easily detect and eliminate possibly dangerous software and malicious viruses in an easy way. You can use any of our top-rated malware removal programs: Reimage, Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus or Malwarebytes Anti Malware.

About the author

Gabriel E. Hall
Gabriel E. Hall

If you found this free removal tutorial helpful, please consider making a donation to support us. Even the smallest amount will be appreciated and will help to keep this service alive.

More information about the author

Source: http://www.2-spyware.com/remove-safesearch.html

Uninstall guides in different languages