Uninstall Cucumberhead “Malware” (for Mac/OS X and Windows)

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

This page aims to help you remove the Cucumberhead “Malware.” The Cucumberhead removal below works for both Mac and Windows-using machines. Although Cucumberhead is frequently called “malware” by users who have a hard time understanding what it is, it is not actually one. Despite us calling Cucumberhead “malware”, this was done for expediency before we can properly convey that this is an adware, an advertising program that is not actually illegal – and malware always are.

These days it’s popular to call every single dangerous piece of software a virus, but are they all viruses and there are other types of unwanted programs. It’s common that when a user experiences an infection for the first time they name it as a virus and search for answers on the net using the same word. Technically, things aren’t as simple as calling everything a virus. In the last few years, hackers have started developing programs with different purposes and goals in mind. It has reached the point where computer threats started to differ a lot between themselves. And with that, security expert decided to name some of them with different names, according to their nature. One of such programs is the one you are most likely a victim of, Cucumberhead.

Knowledge is power, know your enemy

While you could just skip this short piece of text and jump straight to the removal steps below, remember that we’ve spent effort writing the following paragraphs with the purpose of educating you about this danger. This will benefit you greatly, such as knowing what to avoid in the future to prevent another infection, such as the one that you are currently dealing with. It’s always better to prevent something happening in the first place, rather than having to deal with it once it’s too late.

Cucumberhead, as you have probably guessed up to this point, is an application that is different from a virus. In fact its type has a name of its own, Adware. These things usually tend to be the same, or very similar in nature, and the only thing differentiating them is their name. As such, we are going to talk about Adware in general rather than Cucumberhead specifically, as its same thing. These software are always created with the purpose of filling your favorite browser such as Chrome or Firefox with obnoxious ads. Doing so has several benefits for the person responsible. One of them is gaining revenue every time someone clicks on one of the ads. This is defined as a pay-per-click advertising model and is one of the major ways for companies to pay back the people who allow placement of their ads on their websites. Every time a user clicks, a small amount of money gets sent to the website that the ad is located on. In most cases this is the creator of the Adware that has signed an affiliate agreement with the stores it advertises for. Unfortunately, many times these programs also link to known attack sites.

In terms of symptoms caused by Cucumberhead, one can experience several levels of annoyance when going about his daily browsing.

  1. When you open a page, the software places ads in different shapes and sizes.  One of the forms they take are the banners. Placed on the sides of the main content area, they are not as obstructive as the rest, but tend to be rather large to compensate for that fact.
  2. Next are the in text ads. You might notice that some of the words in the text that you are reading seem to have a different color. That’s because they are hyperlinks leading to dangerous websites. Sometimes, just by hovering your mouse over them, they might change shape into the last and most annoying of the bunch, pop-up ads.
  3. Pop-up ads are almost always big, obstructive images that carry some sort of advertisement.

Perhaps the worst of the things that Cucumberhead is capable of is the fact that they tap into your browsing related information and sent it back to its creator. Once it his hands, they go through an algorithm that helps the Adware by feeding it ads that are better suited to your tastes and preferences. You might see someone you’ve yearned after for a long time. Do not be fooled! This is almost always a fake offer in the hopes of making you click on it.

As always, be careful when following the removal instructions written below. Removing or uninstalling Cucumberhead can be intimidating for people inexperienced with the process, but removal guide should be of great help. You can also try to use our recommended uninstall tool instead.


Name Cucumberhead
Type Adware
Danger Level Medium (Unwanted advertisements can greatly hinder your browsing experience and trick you into downloading other Adware applications)
Symptoms Multiple ads placed all around the web page. Often in an annoying way and lead to other locations when clicked.
Distribution Method Packed with several popular installers while at the same time hidden in their advanced options.
Detection Tool Adware may be difficult to track down. Use SpyHunter – a professional parasite scanner – to make sure you find all files related to the infection.

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you’ll need to purchase the full version.
More information about SpyHunter and steps to uninstall.


Cucumberhead Removal

Readers are interested in:



Reboot in Safe Mode (use this guide if you don’t know how to do it).

This was the first preparation.


To remove parasite, you may have to meddle with system files and registries. Making a mistake and deleting the wrong thing may damage your system.
Avoid this by using SpyHunter - a professional Parasite removal tool.

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

Reveal All Hidden Files and Folders.

  • Do not skip this – Cucumberhead may have hidden some of its files.

Hold together the Start Key and R. Type appwiz.cpl –> OK.


You are now in the Control Panel. Look for suspicious entries. Uninstall it/them.

Type msconfig in the search field and hit enter. A window will pop-up:


Startup —> Uncheck entries that have “Unknown” as Manufacturer.


Hold the Start Key and R copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:

hosts_opt (1)

If there are suspicious IPs below “Localhost” – write to us in the comments.


Right click on the browser’s shortcut —> Properties.

NOTE: We are showing Google Chrome, but you can do this for Firefox and IE (or Edge).


Properties —–> Shortcut. In Target, remove everything after .exe.

ie9-10_512x512 Remove Cucumberhead from Internet Explorer:

Open IE, click IE GEAR —–> Manage Add-ons.

pic 3

Find the threat —> Disable. Go to IE GEAR —–> Internet Options —> change the URL to whatever you use (if hijacked) —> Apply.

firefox-512 Remove Cucumberhead from Firefox:

Open Firefox, click mozilla menu ——-> Add-ons —-> Extensions.

pic 6

Find the adware/malware —> Remove.
chrome-logo-transparent-backgroundRemove Cucumberhead from Chrome:

Close Chrome. Navigate to:

C:/Users/!!!!USER NAME!!!!/AppData/Local/Google/Chrome/User Data. There is a Folder called “Default” inside:

Rename the Folder to Backup Default

Rename it to Backup Default. Restart Chrome.

  • At this point the threat is gone from Chrome, but complete the entire guide or it may reappear on a system reboot.


Press CTRL + SHIFT + ESC simultaneously. Go to the Processes Tab. Try to determine which ones are dangerous. Google them or ask us in the comments.


This is the most important and difficult part. If you delete the wrong file, it may damage your system irreversibly. If you can not do this,
>> Download SpyHunter - a professional parasite scanner and remover.

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you'll need to purchase its full version. More information about SpyHunter and steps to uninstall.

Right click on each of the problematic processes separately and select Open File Location. End the process after you open the folder, then delete the directories you were sent to.



Type Regedit in the windows search field and press Enter.

Inside, press CTRL and F together and type the threat’s Name. Right click and delete any entries you find with a similar name. If they don’t show this way, go manually to these directories and delete/uninstall them:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

Remember to leave us a comment if you run into any trouble!