Home Malware Programs Adware Cheapster Ads

Cheapster Ads

Posted: November 20, 2014

Threat Metric

Ranking: 14,842
Threat Level: 2/10
Infected PCs: 27,606
First Seen: November 20, 2014
Last Seen: August 14, 2023
OS(es) Affected: Windows

Cheapster browser extension is published by Koyote-Lab, Inc as a tool to enhance your online shopping experience. Cheapster is ad-supported and is considered as adware because it piles many ads and pop-ups over the web browser surface. Cheapster is available as a stand-alone installer, and it is known to accompany freeware across the web. Cheapster may impair online activity of users, and as part of the web browser, it may track your history to place products that are more likely to be purchased by you. Ads by Cheapster may not be welcomed, and users might want to remove it from their system.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES(x86)%\Cheapster\msilnk.exe File name: msilnk.exe
Size: 288.76 KB (288768 bytes)
MD5: 8b475670a043f061d7edad38aed124d1
Detection count: 10,518
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Cheapster\msilnk.exe
Group: Malware file
Last Updated: August 12, 2023
%PROGRAMFILES(x86)%\Cheapster\msilnk64.exe File name: msilnk64.exe
Size: 318.46 KB (318464 bytes)
MD5: b769459be61c813d433e9f01964c3539
Detection count: 6,178
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Cheapster\msilnk64.exe
Group: Malware file
Last Updated: August 12, 2023
C:\Program Files\Cheapster\msilnk.exe File name: msilnk.exe
Size: 288.76 KB (288768 bytes)
MD5: 6ae83a955e3aa8bb8305ca6498df54d1
Detection count: 4,705
File type: Executable File
Mime Type: unknown/exe
Path: C:\Program Files\Cheapster\msilnk.exe
Group: Malware file
Last Updated: January 5, 2022
C:\Program Files\Cheapster\CheapsterUninst.exe File name: CheapsterUninst.exe
Size: 152.12 KB (152121 bytes)
MD5: bbd44e5c16879f6ea7edf6dd11b87d7f
Detection count: 557
File type: Executable File
Mime Type: unknown/exe
Path: C:\Program Files\Cheapster\CheapsterUninst.exe
Group: Malware file
Last Updated: August 12, 2023
%PROGRAMFILES%\Cheapster\msilnk.exe File name: msilnk.exe
Size: 288.76 KB (288768 bytes)
MD5: e3031a8e1053f3c9b539187eba62ffef
Detection count: 80
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Cheapster
Group: Malware file
Last Updated: March 31, 2016
%PROGRAMFILES(x86)%\Cheapster\msilnk.exe File name: msilnk.exe
Size: 330.24 KB (330240 bytes)
MD5: c5d5020ecb30a9cbde41099121aee079
Detection count: 28
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Cheapster
Group: Malware file
Last Updated: March 31, 2016
%PROGRAMFILES(x86)%\Cheapster\msilnk64.exe File name: msilnk64.exe
Size: 359.42 KB (359424 bytes)
MD5: 81d25689105e1f415dfdd57016a8ffb3
Detection count: 28
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Cheapster
Group: Malware file
Last Updated: March 31, 2016

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}Software\CheapsterSoftware\Microsoft\Windows\CurrentVersion\Run\CheapsterSoftware\Microsoft\Windows\CurrentVersion\Run\Cheapsterx64SOFTWARE\Wow6432Node\CheapsterHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Cheapster_ChromeCheapster_FF

Additional Information

The following directories were created:
%PROGRAMFILES%\Cheapster%PROGRAMFILES(x86)%\Cheapster
Loading...