Remove Deals App virus (Working Guide)




Remove Deals App virusDeals App is a browser extension, plugin or addon for Google Chrome and Mozilla Firefox, also called a Browser Helper Object for Internet Explorer and is most likely responsible for the Deals App Deals advertisements. The Deals App Deals and Advertisements are everywhere once you installed this Deals App adware into your browser. Deals App delivers Deals as Coupons for websites as Expedia, Amazon, Walmart, 1-800 Flowers and more. It does so by showing popups on the website you are visiting, or a ‘similar’ button. A large toolbar of some kind may also appear in your browser or a small ad appears showing you how many coupons there are available for that specific website with text ‘Deals App Deals’. This adware is spread through different locations. You may be downloading it from there official site because it saves money while shopping online, or you may have got it bundled with some fake update or free download you installed on your computer.

This adware is made for one thing, and one thing only. To investigate your browsing behavior using domains as superfish.com to make money. Once you use a coupon that Deals App delivers to you, Deals App producers make money or at least benefit from it.

It is advised to always read the Terms and Agreements before installing software on your computer. Do never click too fast through the installation process [Next] button of software as you will agree to software you might not want to install. If the installer offers a Advanced or Custom option button, click it to find out if there is any other malicious software offered and installed during the installation process.

Remove Deals App




Please note that all the software we offer to remove Deals App is free, our instruction is tested and works to remove this threat from your Internet Explorer, Google Chrome or Mozilla Firefox browser. We do not supply any shareware which detects the threat and asks a license in order to remove Deals App.

Follow all steps in correct order to completely and successfully remove Deals App. This is important: if you have any problem during this removal instruction in order to remove this threat, please stop and ask for assistance using the comments at the end of this instruction.

Step 1 – Uninstall Deals App from your computer

Step 2 – Remove Deals App from your favorite browser using AdwCleaner

Step 3 – Remove Deals App left overs using Junkware Removal Tool

Step 4 – Protect your computer using MalwareBytes Anti-Malware from future infections

This is a comprehensive removal instruction to remove Deals App from your computer. If for some reason the instruction does not deliver the desired results, you can reset your favorite browser Internet Explorer, Google Chrome or Mozilla Firefox to default settings. In first place this is not recommended, as restoring to default settings will remove all your personal settings from your browser. Please use if anything else fails.

Step 5 – Optional: Reset browser settings

computer_icon_32Uninstall Deals App from your computer

Windows XP or Windows 7

Goto Start – Control Panel – Programs – Uninstall a program

Remove Deals App

Select Deals App from Innovative Apps and select Uninstall then follow the uninstallation process

If you cant find it, search for any recent installed software you don’t know or trust and remove it.

Windows 8

Open Charms goto Search type Control Panel (or goto Apps – Windows System – Control Panel)

Remove Deals App

Goto ProgramsUninstall a program
Select Deals App from Innovative Apps and select Uninstall then follow the uninstallation process

If you cant find it, search for any recent installed software you don’t know or trust and remove it.

Remove Deals AppRemove Deals App using AdwCleaner

AdwCleaner will scan your computer for malicious Services, Folder, Files, Shortcuts, Registry items and Products. As AdwCleaner tries to delete these malicious content it will also clean the Internet Explorer, Google Chrome and Mozilla Firefox browser. We strongly recommend using AdwCleaner several times a month to keep your computer clean from adware, popups, browser hijackers or toolbars.

Download AdwCleaner (Official link and direct-download)

Select AdwCleaner.exe with right mouse click and Run as Administrator

Remove Deals App - AdwCleaner

If User Account Control asks you to allow AdwCleaner.exe to make changes to your computer, press Yes to continue.

Remove Deals App

Start scanning your computer for any malicious threats by selecting the Scan button, please wait.

Remove Deals App

AdwCleaner will now start scanning your computer. If AdwCleaner is done, it will display a list of malicious items detected, please uncheck the items you do not want to remove that might be detected as malicious.
If you have nothing to uncheck, continue to the removal process and select the Clean button.

Remove Deals App

AdwCleaner will display the following informational alerts and starts rebooting the computer.

All programs will be closed in order to proceed correctly to the removal of the infections. Please save any work in progress and the click [OK]

If you have been brought to use AdwCleaner, it’s probably because your PC contained potentially unwanted programs or adware.
Potentially unwanted programs are often proposed during the installation of software. They may be present form of toolbars that sometimes change the homepage of the browser and slow internet browsing.
To avoid the installation of these programs polluting the computer, it is essential to follow these tips:

– Always download a program from the official link, or a trusted site
– When installing a program, do not click too fast [Next] without paying attention to Terms of Use and third-party programs available.
– If third-party programs are available (toolbars, etc) uncheck them.
– Enable detection of PUP (Potentially Unwanted Program) in your Antivirus.

AdwCleaner must restart the computer to complete the removal process. The report will be opened on the next reboot.

After the reboot a logfile will open. The logfile in Windows XP and Windows 7 will open once the desktop is started. To open the logfile in Windows 8 you need to switch to the Desktop modus by selecting windows key + d on your keyboard.
If you want to check the AdwCleaner log, you can find the report log in your system drive, Adwcleaner folder (for example: C:\adwcleaner)

# AdwCleaner v3.013 – Report created 27/11/2013 at 10:14:05
# Updated 24/11/2013 by Xplode
# Operating System : Windows 8 Pro (64 bits)
# Username : FixYourBrowser.com
# Running from : C:\Users\FixYourBrowser.com\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****
***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\QuickSet
Folder Deleted : C:\ProgramData\YoutubeAdblocker
Folder Deleted : C:\ProgramData\SearchNewTab
Folder Deleted : C:\ProgramData\surf annd akeeeP
Folder Deleted : C:\Program Files (x86)\YoutubeAdblocker
Folder Deleted : C:\Program Files (x86)\Deals App
Folder Deleted : C:\Program Files (x86)\SearchNewTab
Folder Deleted : C:\Program Files (x86)\surf annd akeeeP
Folder Deleted : C:\Users\FixYourBrowser.com\AppData\Local\Deals App
Folder Deleted : C:\Users\FixYourBrowser.com\AppData\LocalLow\Deals App
Folder Deleted : C:\Users\FixYourBrowser.com\AppData\Roaming\Mozilla\Firefox\Profiles\87pv5a55.default\Extensions\[email protected]
File Deleted : C:\Users\FixYourBrowser.com\AppData\Roaming\Mozilla\Firefox\Profiles\87pv5a55.default\user.js
File Deleted : C:\Users\FixYourBrowser.com\AppData\Roaming\Mozilla\Firefox\Profiles\z5mcwxfd.default-1379072010919\user.js

***** [ Shortcuts ] *****
***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0021354.BHO
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0021354.BHO.1
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0021354.Sandbox
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0021354.Sandbox.1
Key Deleted : HKCU\Software\c80f5125072e6f8b93836132250cbb26
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110211131154}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220222132254}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550255135554}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660266136654}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440244134454}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110211131154}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110211131154}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110211131154}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0550d0fb-cc2e-4eb8-bff5-48815cb9affb}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{14c58d89-4782-4539-844b-8f1872cafba1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{816d29dd-ce57-463d-8215-a3b9e7c584f2}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{82e400b2-d1c0-4b86-917b-c9990c9f91ab}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d377eb6f-6587-4b81-a0d5-a9b190631379}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110211131154}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220222132254}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550255135554}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660266136654}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110211131154}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0550d0fb-cc2e-4eb8-bff5-48815cb9affb}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{14c58d89-4782-4539-844b-8f1872cafba1}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{816d29dd-ce57-463d-8215-a3b9e7c584f2}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{82e400b2-d1c0-4b86-917b-c9990c9f91ab}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d377eb6f-6587-4b81-a0d5-a9b190631379}
Value Deleted : HKLM\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist [1]
Key Deleted : HKCU\Software\Cr_Installer
Key Deleted : HKCU\Software\installedbrowserextensions
Key Deleted : HKCU\Software\powerpack
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\Deals App
Key Deleted : HKLM\Software\Deals App
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C670DCAE-E392-AA32-6F42-143C7FC4BDFD}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Deals App

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16537
-\\ Mozilla Firefox v25.0.1 (en-US)

[ File : C:\Users\FixYourBrowser.com\AppData\Roaming\Mozilla\Firefox\Profiles\87pv5a55.default\prefs.js ]

Line Deleted : user_pref(“extensions.crossrider.bic”, “14298d04aa19044128dbda7d20c8338c”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.InstallationThankYouPage”, true);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.InstallationTime”, 1385543205);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.InstallationUserSettings.searchUserConifrmation”, false);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.InstallationUserSettings.setHomepage”, false);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.InstallationUserSettings.setNewTab”, false);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.InstallationUserSettings.setSearch”, false);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.active”, true);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.addressbar”, “NA”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.addressbarenhanced”, “”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.asyncdb_dbWasSet”, true);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.asyncdb_dbWasSet_FF25_FIX”, true);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.asyncinternaldb_dbWasSet”, true);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.asyncinternaldb_dbWasSet_FF25_FIX”, true);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.backgroundver”, 39);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.certdomaininstaller”, “”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.changeprevious”, false);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie.InstallationTime.expiration”, “Fri Feb 01 2030 00:00:00 GMT+0100”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie.InstallationTime.value”, “1385543205”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie.InstallerParams.expiration”, “Fri Feb 01 2030 00:00:00 GMT+0100”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie._GPL_aoi.expiration”, “Fri Feb 01 2030 00:00:00 GMT+0100”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie._GPL_aoi.value”, “1385543205”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie._GPL_arbitrary_code.expiration”, “Wed Nov 27 2013 10:12:45 GMT+0100”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie._GPL_arbitrary_code.value”, “%22%28function%28%29%7B_GPL_PLUGIN.st%3D%7B%5C%2274052%26pid%3D1269%5C%22%3A%7Bs%3A%5B%5C%2274052%26pid%3D1695%5C%22%[…]
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie._GPL_blocklist.expiration”, “Wed Nov 27 2013 10:12:45 GMT+0100”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie._GPL_blocklist.value”, “%22bing.com%2Cfacebook.com%2Cnonexistantdomain.com%22”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie._GPL_country_code.expiration”, “Wed Dec 04 2013 10:07:44 GMT+0100”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie._GPL_country_code.value”, “%22NL%22”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie._GPL_crr.expiration”, “Fri Feb 01 2030 00:00:00 GMT+0100”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie._GPL_crr.value”, “1385543265”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie._GPL_currenttime.expiration”, “Fri Feb 01 2030 00:00:00 GMT+0100”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie._GPL_currenttime.value”, “%221383332192%22”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie._GPL_hotfix20111102645.expiration”, “Fri Feb 01 2030 00:00:00 GMT+0100”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie._GPL_hotfix20111102645.value”, “%221%22”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie._GPL_installer_params.expiration”, “Fri Feb 01 2030 00:00:00 GMT+0100”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie._GPL_installer_params.value”, “%7B%22source_id%22%3A%22283298%22%2C%22sub_id%22%3A%22default%22%2C%22uzid%22%3A%22283298%26amp%3Bamp%3Bamp%3Bamp%3[…]
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie._GPL_installtime.expiration”, “Fri Feb 01 2030 00:00:00 GMT+0100”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie._GPL_installtime.value”, “%221383332192%22”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie._GPL_parent_zoneid.expiration”, “Fri Feb 01 2030 00:00:00 GMT+0100”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie._GPL_parent_zoneid.value”, “%22283298%22”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie._GPL_pc_20120828.expiration”, “Fri Feb 01 2030 00:00:00 GMT+0100”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie._GPL_pc_20120828.value”, “1385543272831”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie._GPL_product_id.expiration”, “Fri Feb 01 2030 00:00:00 GMT+0100”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie._GPL_product_id.value”, “%221593%22”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie._GPL_sr_halt.expiration”, “Fri Feb 01 2030 00:00:00 GMT+0100”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie._GPL_sr_halt.value”, “1385543272”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie._GPL_zoneid.expiration”, “Fri Feb 01 2030 00:00:00 GMT+0100”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie._GPL_zoneid.value”, “%22440575%22”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie.dbtest.expiration”, “Fri Feb 01 2030 00:00:00 GMT+0100”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.cookie.dbtest.value”, “1385543264507”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.description”, “Deals App”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.domain”, “”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.enablesearch”, false);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.homepage”, “”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.iframe”, false);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.internaldb.InstallerIdentifiers.expiration”, “Fri Feb 01 2030 00:00:00 GMT+0100”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.internaldb.InstallerIdentifiers.value”, “%7B%22installer_bic%22%3A%22521CC548E60E42A892D164475A4D7A46IE%22%2C%22installer_verifier%22%3A%22790850ef677159[…]
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.internaldb.InstallerParamsCache.expiration”, “Fri Feb 01 2030 00:00:00 GMT+0100”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.internaldb.InstallerParamsCache.value”, “%7B%22source_id%22%3A%22283298%22%2C%22sub_id%22%3A%22default%22%2C%22uzid%22%3A%22283298%26amp%3Bamp%3Bamp%3Bam[…]
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.internaldb.Resources_appVer.expiration”, “Fri Feb 01 2030 00:00:00 GMT+0100”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.internaldb.Resources_appVer.value”, “58”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.internaldb.Resources_lastVersion.expiration”, “Fri Feb 01 2030 00:00:00 GMT+0100”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.internaldb.Resources_lastVersion.value”, “1”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.internaldb.Resources_meta.expiration”, “Fri Feb 01 2030 00:00:00 GMT+0100”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.internaldb.Resources_meta.value”, “%7B%7D”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.internaldb.Resources_nextCheck.expiration”, “Wed Nov 27 2013 16:07:39 GMT+0100”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.internaldb.Resources_nextCheck.value”, “true”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.internaldb.Resources_queue.expiration”, “Fri Feb 01 2030 00:00:00 GMT+0100”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.internaldb.Resources_queue.value”, “%7B%7D”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.internaldb.SoftwareDetected.expiration”, “Fri Feb 01 2030 00:00:00 GMT+0100”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.internaldb.SoftwareDetected.value”, “%7B%22AnySoftware%22%3Afalse%2C%22Wireshark%22%3Afalse%2C%22VirtualBox%22%3Afalse%2C%22VMWare%22%3Afalse%2C%22Inside[…]
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.lastDailyReport”, “1385543258145”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.lastUpdate”, “1385543257138”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.manifesturl”, “”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.name”, “Deals App”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.newtab”, “”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.opensearch”, “”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.pluginsurl”, “hxxps://w9u6a2p6.ssl.hwcdn.net/plugin/apps/21354/plugins/093/ff/plugins.json”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.pluginsversion”, 54);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.publisher”, “Innovative Apps”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.searchstatus”, 0);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.setnewtab”, false);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.thankyou”, “”);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.updateinterval”, 360);
Line Deleted : user_pref(“extensions.crossriderapp21354.21354.ver”, 58);
Line Deleted : user_pref(“extensions.crossriderapp21354.adsOldValue”, -1);
Line Deleted : user_pref(“extensions.crossriderapp21354.apps”, “21354”);
Line Deleted : user_pref(“extensions.crossriderapp21354.bic”, “14298d04aa19044128dbda7d20c8338c”);
Line Deleted : user_pref(“extensions.crossriderapp21354.cid”, 21354);
Line Deleted : user_pref(“extensions.crossriderapp21354.firstrun”, false);
Line Deleted : user_pref(“extensions.crossriderapp21354.hadappinstalled”, true);
Line Deleted : user_pref(“extensions.crossriderapp21354.installationdate”, 1385543257);
Line Deleted : user_pref(“extensions.crossriderapp21354.modetype”, “production”);
Line Deleted : user_pref(“extensions.crossriderapp21354.reportInstall”, true);
Line Deleted : user_pref(“extensions.crossriderapp21354.statsDailyCounter”, 1);
Line Deleted : user_pref(“extensions.enabledAddons”, “crossriderapp21354%40crossrider.com:0.93.58,%7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:25.0.1”);

[ File : C:\Users\FixYourBrowser.com\AppData\Roaming\Mozilla\Firefox\Profiles\z5mcwxfd.default-1379072010919\prefs.js ]
-\\ Google Chrome v31.0.1650.57

[ File : C:\Users\FixYourBrowser.com\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted : search_url
Deleted : suggest_url
Deleted : keyword

*************************

Remove Deals AppRemove Deals App left overs using Junkware Removal Tool

Junkware Removal Tool will not only remove this threat from your computer, but Junkware Removal Tool will scan and remove any threat from your computer that is malicious. Junkware Removal Tool is a great tool to completely clean your computer from any threat and highly recommended to use frequently to keep your computer clean and healthy. Best of all it’s free and updated regularly.

Download Junkware Removal Tool (Official link and direct-download)

Select JRT.exe with right mouse click and Run as Administrator

Remove Deals App

If User Account Control asks you to allow JRT.exe to make changes to your computer, press Yes to continue.

Remove Deals App

As described on thisisudax.org

Junkware Removal Tool is a security utility that searches for and removes common adware, toolbars, and potentially unwanted programs (PUPs) from your computer.  A common tactics among freeware publishers is to offer their products for free, but bundle them with PUPs in order to earn revenue.  This tool will help you remove these types of programs.

Please note: Close all your browsers, save any work and then press any key to continue.
Your desktop may blink or a new window may open during the scan and removal process of junkware removal tool.

Remove Deals App

When Junkware Removal Tool is done scanning and removing malicious items from your computer a logfile will open.

Optional: Reset browser settings

If for some reason the instruction as supplied does not work for you, or the problem remains. It might be advised to restore your settings from your favorite browser to default settings. Please know when you restore to default settings all your personal settings will be lost. If you do agree to continue to reset your Internet Explorer, Google Chrome or Mozilla Firefox browser to default settings see our instructions.

Reset Internet Explorer to default settings

  1. Open Internet Explorer
  2. goto “wrench” icon in top right corner
  3. Select Internet Options
  4. Goto tab Advanced
  5. Select Reset button
  6. Enable Delete personal Settings
  7. Click Reset button
  8. Restart Internet Explorer

Reset Google Chrome to default settings

  1. Open Google Chrome
  2. Goto the three stripes in the right top corner (menu)
  3. Select Settings
  4. Scroll down to the end of the page, search for + Show advanced settings
  5. Scroll down once again to the end of the page and click Reset browser settings button
  6. Click Reset once more

Reset Mozilla Firefox to default settings

  1. Open Mozilla Firefox
  2. Goto the orange Firefox button in the top left
  3. Select Help > Troubleshooting information
  4. Select Reset Firefox
  5. Confirm Reset Firefox
  6. Select Finish
  7. Mozilla Firefox will automatically restart

Leave a Reply