Removal Guide

Remove Ads by CheapDealCoupon

Parasite may reinstall itself multiple times if you don't delete its core files. We recommend downloading SpyHunter to scan for malicious programs installed with it. This may save you hours and cut down your time to about 15 minutes. 

Download SpyHunter Anti-Malware

More information on SpyHunter, steps to uninstallEULAThreat Assessment Criteria, and Privacy Policy.

Were you infected by Ads by CheapDealCoupon? This is a guide dedicated to helping you remove for Ads by CheapDealCoupon from Chrome, Firefox, Internet Explorer, and Safari.

Remove Ads by CheapDealCoupon

Remove Ads by CheapDealCoupon

The first thing you probably don’t know about this virus – it’s an adware. Adware are typically regarded as the least dangerous and lowest in the malware food chain, but they can still pose a significant threat to you if you leave them long enough. And unfortunately leaving them long enough occurs much of the time, simply because, although being one of the less harmful things you can be infected by, Ads by CheapDealCoupon is, on the other hand, one of the most persistent and difficult to remove.

How Was I infected by Ads by CheapDealCoupon?

There are at least three known path adware can take in order to infect you:

  1. One, a carefully crafted system of spam emails that tries to make you believe you were contacted by some kind of mistake by a legitimate institution like the FBI, etc.  These are basically trying to make you click on the attachments out of confusion, so you can see what’s inside. Instead you download malware.
  2. Two, the so-called “shell” programs. These are completely fake programs either named as a popular file people are searching for – e.g. The Girl With The Dragon Tattoo, book 1 – or disguised as “downloaders” that are supposed to speed things up for said files. In reality, they are viruses, and can only work if you are not prepared this might happen to you. Hopefully, now you will be.
  3. Three, the biggest threat – freeware. Freely distributed software is, just as the name suggests, not paid, which means its creators have to make money some other way. In this instance, unfortunately, that way is to add things like Ads by CheapDealCoupon in their bundles.

Remove Ads by CheapDealCoupon


Ads by CheapDealCoupon may have different versions – almost as if whoever created it is paying attention to what we’re doing and periodically changing something. This means that the necessary instructions may also have to be different. Since there is absolutely no way to know what version of the virus you have, we tried fitting everything necessary in this guide. My point is that if something is not applicable for you – you don’t see any such extensions for example – just move on with the next step until you get rid of the pest.


Our first step here is a reboot in Safe Mode. If you already know how to do it, just skip this and proceed to Step 2. If you do not know how to do it, continue reading:

For Windows 98, XP, Millenium and 7 Users:

Restart your computer. To be sure you don’t miss the time when you need to press it, just spam F8 as soon as the PC starts booting. In the new menu, choose Safe Mode With Networking.


Proceed to Step 2.

For W. 8 and 8.1 Users:

Click the Start button Picture of the Start button, then Control Panel —> System and Security —> Administrative Tools —> System Configuration.Administrator permission required


Then check the Safe Boot option and click OK.  Click  Restart in the new pop-up.

system- config

Proceed to Step 2.


 Ads by CheapDealCoupon has infected ALL of your browsers. You need to follow the instructions for all browsers or there is a good chance the virus will just regenerate itself. But before you do that read the next few sentences – we will outline all of the possible ways that the virus could have tricked you into installing more of its kind. That’s what these things do. They try to forcefully make you to continue receiving advertisements. Here are the tricks:

  • Sudden redirects towards different websites whenever you press one of the advertisements. These websites are set to downloading a .exe file immediately. If you do not cancel it, it may install malware.
  • Fake banners prompting you to download supposedly missing plugins.
  • Fake updates for Java, Flash Player, and more. These are not limited to web pages. you can encounter them at any point when you are performing mundane tasks.

ie9-10_512x512  For Internet Explorer Users:

Open IE, then click  IE GEAR —–> Manage Add-ons.

pic 3

Find Ads by CheapDealCoupon . Disable it.

If your Home Page is different from the usual, click IE GEAR —–> Internet Options>edit the URL box with your preferred search engine, and click Apply.

firefox-512  For Mozilla Firefox Users:

Open Firefoxclick on mozilla menu (top right) ——-> Add-ons.

pic 5.

Hit Extensions next.

cheapdeal fire

Ads by CheapDealCoupon  should be somewhere around here –  Remove it.

chrome-logo-transparent-background For Google Chrome Users

 Start Chrome, click chrome menu icon —–>More Tools —–> Extensions.


pic 7

In  Extensions,  find the virus and  select  chrome-trash-icon.

cheap chrome

 Click chrome menu icon   again, and proceed to Settings —> Search, the fourth tab, select Manage Search Engines.  Remove anything but the search engines you normally use.

pic 9

safari For Safari Users:

Open Safari, and click Safari —–>Preferences —–> Extensions—–>Uninstall the malware.


Right click on the browser’s shortcut, then click Properties.

NOTE: Below, we are showing Google Chrome, but the method is the same for all browsers.


Once you’ve reached Properties —–> Shortcut (on the band at the top), then in the Target type field, you should REMOVE EVERYTHING AFTER .exe.


(Works for Windows XP, 7,  8,  8.1)

Hold windows-buttonand R together. Write appwiz.cpl  in the new field, then click OK.


You are now in the Control Panel. Search around for Ads by CheapDealCoupon and anything else suspicious-looking. Uninstall  it/them. Also, be extremely careful. Viruses often spend one last ditch effort to trick you into installing more of their kind. If you see a screen like this when you click Uninstallchoose NO:


Hold windows-buttonand R again – but this time copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A .txt file will open – don’t touch anything there. If you are hacked and someone has access to your PC, there will be a bunch of other IPs connected to you at the bottom. This is what hosts file looks like:

hosts_opt (1)

If there is anything connecting to you below “Localhost” you may be hacked, and it’s best to ask us in the comments for directions.


This is perhaps the most important and difficult step, so be extremely careful. Open the Task Manager by right clicking on the Taskbar and choosing Start Task Manager.


Once it opens, choose the Processes Tab. Look at all of the processes in front of you and try to determine which ones are a virus. Google them or ask us in the comments and we will provide the best assistance we can. If the virus returns later on, the reason is that you missed something here. However, we should warn you – doing this can be extremely risky, so the best course is to seek assistance from us.


Right click on each of the virus processes separately and select Open File Location. Also, End the process after you open the folder. Just to make sure we don’t delete any programs you mistakenly took for a virus, copy the folders somewhere, then delete the directories you were sent to.


Take a look at the following things:

Type msconfig in the search field and hit enter: you will be transported to a new window. 


Go in the Startup tab and Uncheck anything that has “unknown” as Manufacturer.

Type Regedit in the windows search field and press Enter.

Once inside, press CTRL and F together and type the virus’s Name. Right click and delete any entries you find with a similar name. Alternatively, if you can’t find any this way, look in these directories, and delete the registries manually:

  • HKEY_CURRENT_USER—-Software—–Random numbers
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random


Did we help you? Please, consider helping us by spreading the word!

STEP 6 – Optimization

We’ve prepared a short and sweet optimization guide, specifically designed for users who just removed a virus. It is completely free, you do not need to download anything, and it’s not very time consuming. If you are interested – How To Remove Guide’s Optimization Tips.


Leave a Comment