Home Malware Programs Adware Cheapster Ads

Cheapster Ads

Posted: November 20, 2014

Threat Metric

Threat Level: 2/10
Infected PCs: 27,641
First Seen: November 20, 2014
Last Seen: October 30, 2024
OS(es) Affected: Windows

Cheapster browser extension is published by Koyote-Lab, Inc as a tool to enhance your online shopping experience. Cheapster is ad-supported and is considered as adware because it piles many ads and pop-ups over the web browser surface. Cheapster is available as a stand-alone installer, and it is known to accompany freeware across the web. Cheapster may impair online activity of users, and as part of the web browser, it may track your history to place products that are more likely to be purchased by you. Ads by Cheapster may not be welcomed, and users might want to remove it from their system.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\Program Files\Cheapster\CheapsterUninst.exe File name: CheapsterUninst.exe
Size: 152.12 KB (152121 bytes)
MD5: bbd44e5c16879f6ea7edf6dd11b87d7f
Detection count: 564
File type: Executable File
Mime Type: unknown/exe
Path: C:\Program Files\Cheapster\CheapsterUninst.exe
Group: Malware file
Last Updated: October 30, 2024
%PROGRAMFILES%\Cheapster\msilnk.exe File name: msilnk.exe
Size: 288.76 KB (288768 bytes)
MD5: e3031a8e1053f3c9b539187eba62ffef
Detection count: 80
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Cheapster
Group: Malware file
Last Updated: March 31, 2016
%PROGRAMFILES(x86)%\Cheapster\msilnk64.exe File name: msilnk64.exe
Size: 359.42 KB (359424 bytes)
MD5: 81d25689105e1f415dfdd57016a8ffb3
Detection count: 28
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Cheapster
Group: Malware file
Last Updated: March 31, 2016

More files

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}Software\CheapsterSoftware\Microsoft\Windows\CurrentVersion\Run\CheapsterSoftware\Microsoft\Windows\CurrentVersion\Run\Cheapsterx64SOFTWARE\Wow6432Node\CheapsterHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Cheapster_ChromeCheapster_FF

Additional Information

The following directories were created:
%PROGRAMFILES%\Cheapster%PROGRAMFILES(x86)%\Cheapster
Loading...