Remove Ads by BuyTheApp

Did you suddenly find yourself infected by Ads by BuyTheApp? Our free removal instructions can deal with Ads by BuyTheApp in absolutely no time.

buytheapp_opt

Ads by BuyTheApp is a virus categorized as Adware by security specialists. This type of viruses are considered less harmful than most, and are the proverbial weakest link in the malware food-chain. However, even with that being said they should still be removed immediately, because their main operations open doors for other viruses. It all makes sense if you think of Ads by BuyTheApp as someone’s weird idea of a marketing campaign: the virus creators get paid to promote websites, and they want you to continue receiving ads as long as possible, so they ensure it by making the adware install others like it.

How was I infected by Ads by BuyTheApp?

There are a few universally recognized ways any adware can infect your PC, not just Ads by BuyTheApp. Since prevention is the first line of defense against such things, we will list all the possible ways a virus can land on your PC. In the order of least to most likely, these are:

  1. Infected short links that people post on forums – these can only work if you aren’t aware the individual isn’t legitimate and might post a link to malicious software.
  2. Spam email and their attachments – this is pretty much self-explanatory.
  3. Fake ads and banners that pose as download manager that would supposedly speed up your connection and allow you to download a specific file (a song, a book, etc.) you are searching for.
  4. Free software bundled with a virus – since the creators of free software have to make money somehow, they resort to accepting deals to include the things with their programs. The good thing is that there is a good chance you may spot if the program is infected during the setup. If a program is in the red, and you monitor the steps carefully, you will see something resembling this:

adware-example1

Remove Ads by BuyTheApp

First things first, a big disclaimer here: Adware have different types operating under the same name, meaning they will likely all differ in the way you need to remove them. The guide we are using should cover all of these “versions,” however by the time you see these sentences that may no longer be the case. Removing Ads by BuyTheApp shouldn’t be much of hassle either way, but if, for instance you don’t see the extensions in Safe Mode, revert back to the normal mode and proceed. 

Read everything in this guide to the letter, to make sure you don’t miss something. Remember – we are one comment away from helping you, so if you find yourself in urgent need, do not hesitate to contact us.

STEP 1:

Our first step here is a reboot in Safe Mode. If you already know how to do it, just skip this and proceed to Step 2. If you do not know how to do it, continue reading:

For Windows 98, XP, Millenium and 7 Users:

Restart your computer. To be sure you don’t miss the time when you need to press it, just spam F8 as soon as the PC starts booting. In the new menu, choose Safe Mode With Networking.

Safe-Mode1

Proceed to Step 2.

For W. 8 and 8.1 Users:

Click the Start button Picture of the Start button, then Control Panel —> System and Security —> Administrative Tools —> System Configuration.Administrator permission required

msconfig

Then check the Safe Boot option and click OK.  Click  Restart in the new pop-up.

system- config

Proceed to Step 2.

STEP 2:

 Ads by BuyTheApp has infected ALL of your browsers. Even if you do not use them, remove it from the other browsers too, since the virus has the ability to “regenerate” in all places at once if even one part remains. But before you do that, let us identify if you have fallen pray to the trickery used by most adware – they try to trick you into installing others of their kind, and if you remember installing anything try to recall its name. The tricks are:

  • Fake Updates for Java or Flash Player that prompt you to install them. They may be located on top of videos or around banner areas.
  • Redirects about 30% of the time when you click on the ads, mistakenly or not. You are sent to random websites containing malicious pieces. These sites are slated to begin downloading a .exe file in a matter of seconds.
  • Supposed updates for your anti-virus’s database. The shocking thing here is that malware are capable of imitating any anti-virus program. They scan your PC for it the moment they infect you, and Ads by BuyTheApp is no exception.

ie9-10_512x512  For Internet Explorer Users:

Open IE, then click  IE GEAR —–> Manage Add-ons.

pic 3

Find Ads by BuyTheApp . Disable it.

If your Home Page is different from the usual, click IE GEAR —–> Internet Options>edit the URL box with your preferred search engine, and click Apply.

firefox-512  For Mozilla Firefox Users:

Open Firefoxclick on mozilla menu (top right) ——-> Add-ons.

pic 5.

Hit Extensions next.

buytheapp fire

Ads by BuyTheApp  should be somewhere around here –  Remove it.


chrome-logo-transparent-background For Google Chrome Users
:

 Start Chrome, click chrome menu icon —–>More Tools —–> Extensions.

 

pic 7

In  Extensions,  find the virus and  select  chrome-trash-icon.

buytheapp chrome

 Click chrome menu icon   again, and proceed to Settings —> Search, the fourth tab, select Manage Search Engines.  Remove anything but the search engines you normally use.

pic 9


safari For Safari Users:

Open Safari, and click Safari —–>Preferences —–> Extensions—–>Uninstall the malware.

STEP 3:

Right click on the browser’s shortcut, then click Properties.

Alternatively, if you have your browser pinned down to the taskbar, you Right click it, then Right Click again on the Small Browser Icon —–> Properties

NOTE: Below, we are showing Google Chrome, but the method is the same for all browsers.

browser-hijacker-taskbar-properties

Once you’ve reached Properties —–> Shortcut (on the band at the top), then in the Target type field, you should REMOVE EVERYTHING AFTER .exe.

STEP 4:

(Works for Windows XP, 7,  8,  8.1)

Hold windows-buttonand R together. Write appwiz.cpl  in the new field, then click OK.

 appwiz

You are now in the Control Panel. Search around for Ads by BuyTheApp and anything else suspicious-looking. Uninstall  it/them. Also, be extremely careful. Viruses often spend one last ditch effort to trick you into installing more of their kind. If you see a screen like this when you click Uninstallchoose NO:

virus-removal1

STEP 4:

This is perhaps the most important and difficult step, so be extremely careful. Open the Task Manager by right clicking on the Taskbar and choosing Start Task Manager.

virus-taskbar123

Once it opens, choose the Processes Tab. Look at all of the processes in front of you and try to determine which ones are a virus. Google them or ask us in the comments and we will provide the best assistance we can. If the virus returns later on, the reason is that you missed something here. However, we should warn you – doing this can be extremely risky, so the best course is to seek assistance from us.

A BIG WARNING HERE!  Unfortunately, this type of virus can track and copy user names and passwords. It stores the information on a file somewhere and sends it to whoever created it later. How much later is unknown, but it’s definitely not a matter of minutes or hours. The only way information can be traced in this way is if you visit the websites. After you are done with removing Ads by BuyTheApp, change any passwords connected to your credits cards or other sensitive information.

malware-start-taskbar

Right click on each of the virus processes separately and select Open File Location. Also, End the process after you open the folder. Just to make sure we don’t delete any programs you mistakenly took for a virus, copy the folders somewhere, then delete the directories you were sent to.

STEP 5:

Take a look at the following things:

Type msconfig in the search field and hit enter: you will be transported to a new window. 

msconfig_opt

Go in the Startup tab and Uncheck anything that has “unknown” as Manufacturer.

Type Regedit in the windows search field and press Enter.

Once inside, press CTRL and F together and type the virus’s Name. Right click and delete any entries you find with a similar name. Alternatively, if you can’t find any this way, look in these directories, and delete the registries manually:

  • HKEY_CURRENT_USER—-Software—–Random numbers
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random
  •  HKEY_LOCAL_MACHINESOFTWAREGoogleChromeExtensions

regedit_opt

STEP 6 – Optimization

And that’s it. Well done for removing Ads by BuyTheApp. We’ve prepared a short and sweet optimization guide, specifically designed for users who just removed a virus. It is completely free, you do not need to download anything, and it’s not very time consuming. If you are interested, you can check it out here.

 

Was this guide helpful?