FF AntiVirus Save Removal Guide

FF AntiVirus Save is a fictitious alert that claims to be displayed by Mozilla Firefox. According to our researchers, the user could see it after being redirected to a particular suspicious web page. Apparently, the fake notification might ask to update the browser. The bad news is if the user agrees with it the threat may install a suspicious plugin instead. It appears to be it could spy on the user or show him potentially dangerous advertising content. Therefore, if you notice anything similar while browsing with Mozilla Firefox, we would recommend eliminating FF AntiVirus Save as fast as possible. The fake alert might be a bit troublesome, but luckily our specialists found out how to get rid of it, and if you want to learn it too we encourage you to follow the recommended deletion steps located a bit below. Also, users who wish to get to know this threat better should read our report as well.

Usually, such notifications come as redirects, or they are displayed by adware or other unreliable applications installed on the computer. Naturally, the fact that you see it might mean your computer is vulnerable. In which case we would advise you not only to pick a reliable security tool but also make sure you do not click suspicious ads or visit potentially malicious web pages in the future. Moreover, if you recently installed any software downloaded from untrustworthy sources, such as torrent or other P2P file-sharing networks and suspect FF AntiVirus Save could be displayed by some threat that sneaked in, it would be advisable to perform a system scan. Otherwise, the fake alert might return later on.

According to our specialists, FF AntiVirus Save should appear after the user gets redirected to guardedsearchingext.xyz. The website should use Mozilla Firefox logo and its official website’s design elements. This is why the fake alert could look so authentic to some users. However, the suspicious domain name (guardedsearchingext) and its extension (.xyz) should raise suspicion. What’s more, in the middle of the fictitious site there is supposed to be “Install now” button. The text around should claim the browser needs a manual update to ensure “you are protected on the internet.”

Clicking the installation button could result in the browser opening a pop-up warning not to install the suggested extension. Nevertheless, the site may show a pop-up explaining it is supposed to happen, and the user should ignore the warning and allow it to install a plugin. It might need permissions to “Access your data for all websites” and “Access browser tabs.” Such requests should look suspicious as well, especially when you are about to install an unknown extension and have no idea why it may need access to your data. Not to mention, according to FF AntiVirus Save web page it was supposed to update your browser; not place a new extension on it.Unfortunately, it seems this plugin could collect user’s information or show ads redirecting to scam web pages, sites containing malware, etc.

As we mentioned earlier, given it is a fake alert we strongly advise not to interact with it. The best course of action would be to eliminate it at once. The instructions located a bit below will explain how to remove FF AntiVirus Save manually, although to make sure there are no other threats related to it on the device it would be a smart idea to scan the system with a security tool of your choice.

Get rid of FF AntiVirus Save

1. Tap F11 to exit full-screen mode.
2. Click Ctrl+Alt+Delete and launch Task Manager.
3. Select the Processes tab and find the browser’s process.
4. Mark it and press the End Task button to kill it.
5. Exit your Task Manager.
6. Relaunch the browser.

Restore the affected browser

Internet Explorer

1. Tap Alt+X.
2. Open the Internet Options.
3. Choose Advanced and click Reset.
4. Select Delete personal settings.
5. Press Reset and click Close.

Mozilla Firefox

1. Press the Help icon.
2. Access Troubleshooting information.
3. Select Refresh Firefox.
4. Click Refresh Firefox again.
5. Choose Finish.

Google Chrome

1. Press Alt+F and open Settings.
2. Scroll below to select Show advanced settings.
3. Slide down again, and press Reset Settings.
4. Select Reset.