This article was designed to assist users in removing Ads by CheapMe from Chrome, Firefox, Internet Explorer and your computer completely.
If you are reading this you have probably noticed that Ads by CheapMe is present on your computer and are wondering what exactly it entails. This is a type of virus called Adware. Most experts are considering this to be a low-priority danger to your system but and it’s a big but if ignored completely it might lead to some real threats to your system integrity.
You will need to learn how to avoid falling into the traps that Ads by CheapMe has been known to present to the affected users. First and foremost avoid interacting with the pop-ups in any way. You have noticed the pop-ups already that’s for sure, you should also know that these Ads are completely and utterly fake and you are not going to accomplish anything good by clicking on them.
Not only that if you do click on such pop-ups either on purpose or by accident you are paving the way for more trouble to head your way. Adware viruses are notorious for they will try in numerous way to make you install additional software, read more malware. You should avoid this to the best of your abilities and do all you can to remove the threat as quickly as you can.
Who creates Adware?
Ads by CheapMe is the type of Virus that has many users left scratching their heads and wondering what the purpose for the creation of such malware was. A fair question indeed. Your files are not going to be encrypted. You are not going to be asked for ransom. Then how are Adware creators benefiting from your inconvenience and suffering? Simply put Ads by CheapMe has been created with the purpose of providing targeted marketing. In other words you and many other unsuspecting users for been used to create “traffic” for a certain website(s). It is not a white collar approach to advertising to say the least but in most cases it’s cheaper and a cost effective alternative to the more conventional ways.
1: Enter Safe Mode.
2: Remove Ads by CheapMe from Chrome, Firefox, Internet Explorer and Safari.
3: Remove the virus from browser shortcuts.
4: Uninstall the virus from your AddRemove Programs.
5: Permanently remove Ads by CheapMe from Task Manager’s processes.
6: Delete the virus from Regedit and Msconfig.
7: Optimize your PC after the removal is done.
Remove Ads by CheapMe
Now, before we move on with the removal process a bit of a disclaimer here. This type of virus is known to being altered by its creators with the simple purpose of longevity. If we are to elaborate a bit – Adware creators are keeping an eye out for removal guides just like ours and are often making changes so that there are different “versions” of the malware but with the same name. Our guide should be good for most versions of Ads by CheapMe but we can’t know for sure if it will be capable of removing every alteration of the virus.
Remember to carefully read through each and every step and if you don’t recognize the described process just move on to the next one.
Our first step here is a reboot in Safe Mode. If you already know how to do it, just skip this and proceed to Step 2. If you do not know how to do it, continue reading:
For Windows 98, XP, Millenium and 7 Users:
Restart your computer. To be sure you don’t miss the time when you need to press it, just spam F8 as soon as the PC starts booting. In the new menu, choose Safe Mode With Networking.
Proceed to Step 2.
For W. 8 and 8.1 Users:
Click the Start button ,then Control Panel —> System and Security —> Administrative Tools —> System Configuration.
Then check the Safe Boot option and click OK. Click Restart in the new pop-up.
Proceed to Step 2.
For Windows 10 Users:
- Open the Start menu.
- Click the power button icon in the right corner of the new Start menu to show the power options menu.
- Press and hold down the SHIFT key on the keyboard and click the Restart option while still holding down the SHIFT key.
Windows 10 will perform the reboot. Next do the following:
Click the Troubleshoot icon, then Advanced options —> Startup Settings. Click Restart.
After the reboot click on Enter Safe Mode With Networking (Fifth Option).
Continue with Step 2.
It is a safe bet that all browsers present on your hard drive are already infected by Ads by CheapMe. This means you will need to apply all steps for each browser individually and even if there’s a browser you don’t use you will have to clean up as well if you want to completely remove the threat from your PC.
Also try your best to remember if you installed any software via clicking on the pop-up messages. If you did you will have to delete it in a moment:
For Internet Explorer Users:
Open IE, then click —–> Manage Add-ons.
Find Ads by CheapMe . Remove it by pressing Disable.
If your Home Page is different from the usual, click —–> Internet Options>edit the URL box with your preferred search engine, and click Apply.
Go to STEP 3.
For Mozilla Firefox Users:
Open Firefox, click on (top right) ——-> Add-ons. Hit Extensions next.
Ads by CheapMe should be somewhere around here – Remove it.
Go to STEP 3.
For Google Chrome Users:
Start Chrome, click —–>More Tools —–> Extensions. There, find the virus and select (Remove).
Click again, and proceed to Settings —> Search, the fourth tab, select Manage Search Engines. Remove anything but the search engines you normally use.
Go to STEP 3.
For Safari Users:
Open Safari, and click Safari —–>Preferences —–> Extensions—–>Uninstall the malware.
Go to STEP 3.
Right click on the browser’s shortcut, then click Properties.
NOTE: We are showing Google Chrome, but the method is the same for all browsers.
Once you’ve reached Properties —–> Shortcut (on the band at the top), then in the Target type field, REMOVE EVERYTHING AFTER .exe.
Continue with STEP 4.
(Works for XP, 7, 8, 8.1)
Hold the Windows Key and R together. Write appwiz.cpl in the new field, then click OK.
You are now in the Control Panel. Search around for Ads by CheapMe and anything else suspicious-looking. Uninstall it/them. Also, be extremely careful. Viruses often spend one last ditch effort to trick you into installing more of their kind. If you see a screen like this when you click Uninstall, choose NO:
Hold the Windows Key and R again – but this time copy + paste the following and click OK:
A .txt file will open – don’t touch anything there. If you are hacked and someone has access to your PC, there will be a bunch of other IPs connected to you at the bottom. This is what a hosts file looks like:
If there are a bunch of strange IPs connecting to you below “Localhost” you may be hacked, and it’s best to ask us in the comments for directions.
Go to STEP 5.
Open the Task Manager by right clicking on the Taskbar and choosing Start Task Manager.
Once it opens, choose the Processes Tab. Look at all of the processes in front of you and try to determine which ones are a virus. Google them or ask us in the comments and we will provide the best assistance we can.
A BIG WARNING HERE! READ THIS BEFORE PROCEEDING!
You have reached the point of no return. The next few steps are crucial and extremely important. If you screw up big time this may lead to significant damage to your system so if you are not a 100% sure what to do next or simply do not want to risk such consequences, we strongly recommend you stop with the manual process and instead download a professional remover for Ads by CheapMe.
Either way you need to completely remove the virus from your device as it is known to collect credit card and other personal data.
Right click on each of the virus processes separately and select Open File Location. Also, End the process after you open the folder. Just to make sure we don’t delete any programs you mistakenly took for a virus, copy the folders somewhere, then delete the directories you were sent to.
Move on to STEP 6.
Take a look at the following things:
Type msconfig in the search field and hit enter: you will be transported to a new window.
Go in the Startup tab and Uncheck anything that has “Unknown” as Manufacturer.
Type Regedit in the windows search field and press Enter.
Once inside, press CTRL and F together and type the virus’s Name. Right click and delete any entries you find with a similar name. If you can’t find them this way, look in these directories, and delete the registries manually:
- HKEY_CURRENT_USER—-Software—–Random numbers
HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random
Remember to leave us a comment if you run into any trouble!
Did we help you? Please, consider helping us by spreading the word!
STEP 7 – Optimization
We’ve prepared a short and sweet optimization guide, specifically designed for users who just removed a virus. It is completely free, you do not need to download anything, and it’s not very time consuming. If you are interested – How To Remove Guide’s Optimization Tips.