Severity scale:  
  (10/100)

Remove BargainBuddy (Improved Instructions)

removal by Ugnius Kiguolis - -   Also known as BargainBuddy ads | Type: Adware

What is BargainBuddy?

BargainBuddy is a browser hijacker that may monitor users’ activity on the Internet for getting more knowledge about their interests. In addition, it may cause undesirable pop-up advertisements that are usually filled with information about discounts, coupons and promotions. Unfortunately but there is no guarantee that these ads will help you to save the money because they are displayed for promoting affiliate parties. If you have started seeing BargainBuddy ads during your browsing on the web and you know that you have never downloaded it, you should beware that it may get into the system along with some free of charge software as well. This distribution method is called bundling. In this case, you should remove BargainBuddy adware from the system because, as we have already mentioned, it can hardly deliver what it promises.

As soon as BargainBuddy virus is installed on computer, IE browser helper object is installed on it as well. After doing so, this program starts its process at every Windows startup and begins showing its ads. It seems that it can also update itself via the Internet and contact with third parties for sharing information about people’s activity on the web. If you have been seeing its advertisements popping up during your browsing, you should avoid them because they may lead you to Bargain Buddy redirects that may be used for promoting shady and unreliable websites. So, stay mindful and do not click on the ads that show up on your screen while browsing. Bargain Buddy may also change your homepage or install unnecessary toolbars. If you have started seeing its notifications in the system tray bar and a pop-up message saying, „CashBack pays you to shop!“, you should ignore them. If you want to avoid these ads and keep your personally non-identifiable information away from tracking, we recommend installing a reliable anti-spyware like ReimageIntego.

BargainBuddy ads

How can Bargain Buddy hijack my computer?

As much as we know, you cannot download this application from any official website. That means Bargain Buddy browser hijack can be installed only in a bundled pack of programs as you download freeware from the Internet. Bundling is a way to spread adware, unwanted system tools or internet hijackers without the knowledge of the user. You should stay cautious and install free programs carefully, because usually such unwanted programs are concealed behind “default”, “regular” or “standard” options of installation. Choose „advanced“ or „custom“ options and be sure to untick everything that differ from the preferred program. In addition, read Terms and Agreements. Users commonly just tick „Yes, I agree“ and proceed to the next step. Stay aware and do not ignore this step. Yes, it is that simple to prevent your computer from infectious software.

How can I remove BargainBuddy virus?

If you have recognised that BargainBuddy has hijacked your Internet browser and you are not satisfied with its activity on it, you should remove this PUP. You can do it manually or by downloading anti-spyware like SpyHunter. If you wish to do it on your own, we have all the right information for you. Please follow the instructions below to eliminate BargainBuddy application.

You may remove virus damage with a help of ReimageIntego. SpyHunter 5Combo Cleaner and Malwarebytes are recommended to detect potentially unwanted programs and viruses with all their files and registry entries that are related to them.

Offer
do it now!
Download
Reimage Happiness
Guarantee
Download
Intego Happiness
Guarantee
Compatible with Microsoft Windows Supported versions Compatible with OS X Supported versions
What to do if failed?
If you failed to remove virus damage using Reimage Intego, submit a question to our support team and provide as much details as possible.
Reimage Intego has a free limited scanner. Reimage Intego offers more through scan when you purchase its full version. When free scanner detects issues, you can fix them using free manual repairs or you can decide to purchase the full version in order to fix them automatically.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Reimage, try running SpyHunter 5.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Intego, try running Combo Cleaner.

To remove BargainBuddy, follow these steps:

Delete BargainBuddy from Windows systems

To remove BargainBuddy from Windows 10/8  machines, please follow these steps:

  1. Enter Control Panel into Windows search box and hit Enter or click on the search result.
  2. Under Programs, select Uninstall a program.Uninstall from Windows 1
  3. From the list, find entries related to BargainBuddy (or any other recently installed suspicious program).
  4. Right-click on the application and select Uninstall.
  5. If User Account Control shows up, click Yes.
  6. Wait till uninstallation process is complete and click OK.Uninstall from Windows 2

If you are Windows 7/XP user, proceed with the following instructions:

  1. Click on Windows Start > Control Panel located on the right pane (if you are Windows XP user, click on Add/Remove Programs).
  2. In Control Panel, select Programs > Uninstall a program.Uninstall from Windows 7/XP
  3. Pick the unwanted application by clicking on it once.
  4. At the top, click Uninstall/Change.
  5. In the confirmation prompt, pick Yes.
  6. Click OK once the removal process is finished.

Get rid of BargainBuddy from Mac OS X system

If your macOS is displaying some infection symptoms, proceed with the following guide:

Remove BargainBuddy from Applications folder:

  1. From the menu bar, select Go > Applications.
  2. In the Applications folder, look for BargainBuddy-related entries.
  3. Click on the app and drag it to Trash (or right-click and pick Move to Trash)Uninstall from Mac 1

To fully remove BargainBuddy, you need to access Application Support, LaunchAgents, and LaunchDaemons folders and delete relevant files:

  1. Select Go > Go to Folder.
  2. Enter /Library/Application Support and click Go or press Enter.
  3. In the Application Support folder, look for any dubious entries related to BargainBuddy and then delete them.
  4. Now enter /Library/LaunchAgents and /Library/LaunchDaemons folders the same way and terminate all the BargainBuddy-related entries.Uninstall from Mac 2

Eliminate BargainBuddy from Internet Explorer (IE)

Remove dangerous add-ons:

  1. Open Internet Explorer, click on the Gear icon (IE menu) on the top-right corner of the browser
  2. Pick Manage Add-ons.
  3. You will see a Manage Add-ons window. Here, look for BargainBuddy and other suspicious plugins. Click on these entries and select Disable.Remove add-ons from Internet Explorer

Change your homepage if it was altered:

  1. Open IE and click on the Gear icon.
  2. Select Internet Options.
  3. In the General tab, delete the Home page address and replace it by your preferred one (for example, Google.com).
  4. Click Apply and then select OK.Reset IE homepage

Delete temporary files:

  1. Press on the Gear icon and select Internet Options.
  2. Under Browsing history, click Delete…
  3. Select relevant fields and press Delete.Clear temporary files from Internet Explorer

Reset Internet Explorer:

  1. Click on Gear icon > Internet options and select Advanced tab.
  2. Select Reset.
  3. In the new window, check Delete personal settings and select Reset again to complete BargainBuddy removal.Reset Internet Explorer

Remove BargainBuddy from Microsoft Edge

Delete unwanted extensions from MS Edge:

  1. Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
  2. From the list, pick the BargainBuddy-related extension and click on the Gear icon.
  3. Click on Uninstall at the bottom.Remove extensions from Edge

Clear cookies and other browser data:

  1. Click on the Menu (three horizontal dots at the top-right of the browser window) and select Privacy & security.
  2. Under Clear browsing data, pick Choose what to clear.
  3. Select everything (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.Clear Edge browsing data

Reset MS Edge if that above steps did not work:

  1. Press on Ctrl + Shift + Esc to open Task Manager.
  2. Click on More details arrow at the bottom of the window.
  3. Select Details tab.
  4. Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.Reset MS Edge

If this solution failed to help you, you need to use an advanced Edge reset method. Note that you need to backup your data before proceeding.

  1. Find the following folder on your computer: C:\\Users\\%username%\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe.
  2. Press Ctrl + A on your keyboard to select all folders.
  3. Right-click on them and pick DeleteAdvanced MS Edge reset 1
  4. Now right-click on the Start button and pick Windows PowerShell (Admin).
  5. When the new window opens, copy and paste the following command, and then press Enter:

    Get-AppXPackage -AllUsers -Name Microsoft.MicrosoftEdge | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml” -VerboseAdvanced MS Edge reset 2

Instructions for Chromium-based Edge

Delete extensions from MS Edge (Chromium):

  1. Open Edge and click select Settings > Extensions.
  2. Delete unwanted extensions by clicking Remove.Remove extensions from Chromium Edge

Clear cache and site data:

  1. Click on Menu and go to Settings.
  2. Select Privacy and services.
  3. Under Clear browsing data, pick Choose what to clear.
  4. Under Time range, pick All time.
  5. Select Clear now.Clear browser data from Chroum Edge

Reset Chromium-based MS Edge:

  1. Click on Menu and select Settings.
  2. On the left side, pick Reset settings.
  3. Select Restore settings to their default values.
  4. Confirm with Reset.Reset Chromium Edge

Erase BargainBuddy from Mozilla Firefox (FF)

Remove dangerous extensions:

  1. Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
  2. Select Add-ons.
  3. In here, select plugins that are related to BargainBuddy and click Remove.Remove extensions from Firefox

Clear cookies and site data:

  1. Click Menu and pick Options.
  2. Go to Privacy & Security section.
  3. Scroll down to locate Cookies and Site Data.
  4. Click on Clear Data…
  5. Select Cookies and Site Data, as well as Cached Web Content and press Clear.Clear cookies and site data from Firefox

In case BargainBuddy did not get removed after following the instructions above, reset Mozilla Firefox:

  1. Open Mozilla Firefox browser and click the Menu.
  2. Go to Help and then choose Troubleshooting Information.Reset Firefox 1
  3. Under Give Firefox a tune up section, click on Refresh Firefox…
  4. Once the pop-up shows up, confirm the action by pressing on Refresh Firefox – this should complete BargainBuddy removal.Reset Firefox 2

Uninstall BargainBuddy from Google Chrome

Delete malicious extensions from Google Chrome:

  1. Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
  2. In the newly opened window, you will see all the installed extensions. Uninstall all the suspicious plugins that might be related to BargainBuddy by clicking Remove.Remove extensions from Chrome

Clear cache and web data from Chrome:

  1. Click on Menu and pick Settings.
  2. Under Privacy and security, select Clear browsing data.
  3. Select Browsing history, Cookies and other site data, as well as Cached images and files.
  4. Click Clear data.Clear cache and web data from Chrome

If the above-methods did not help you, reset Google Chrome to eliminate all the BargainBuddy-components:

  1. Click on Menu and select Settings.
  2. In the Settings, scroll down and click Advanced.
  3. Scroll down and locate Reset and clean up section.
  4. Now click Restore settings to their original defaults.
  5. Confirm with Reset settings to complete BargainBuddy removal.Reset Chrome 2

Delete BargainBuddy from Safari

Remove unwanted extensions from Safari:

  1. Click Safari > Preferences…
  2. In the new window, pick Extensions.
  3. Select the unwanted extension related to BargainBuddy and select Uninstall.Remove extensions from Safari

Clear cookies and other website data from Safari:

  1. Click Safari > Clear History…
  2. From the drop-down menu under Clear, pick all history.
  3. Confirm with Clear History.Clear cookies and website data from Safari

Reset Safari if the above-mentioned steps did not help you:

  1. Click Safari > Preferences…
  2. Go to Advanced tab.
  3. Tick the Show Develop menu in menu bar.
  4. From the menu bar, click Develop, and then select Empty Caches.Reset Safari

Choose a proper web browser and improve your safety with a VPN tool

Online spying has got momentum in recent years and people are getting more and more interested in how to protect their privacy online. One of the basic means to add a layer of security – choose the most private and secure web browser. Although web browsers can't grant full privacy protection and security, some of them are much better at sandboxing, HTTPS upgrading, active content blocking, tracking blocking, phishing protection, and similar privacy-oriented features. However, if you want true anonymity, we suggest you employ a powerful Private Internet Access VPN – it can encrypt all the traffic that comes and goes out of your computer, preventing tracking completely.

 

Lost your files? Use data recovery software

While some files located on any computer are replaceable or useless, others can be extremely valuable. Family photos, work documents, school projects – these are types of files that we don't want to lose. Unfortunately, there are many ways how unexpected data loss can occur: power cuts, Blue Screen of Death errors, hardware failures, crypto-malware attack, or even accidental deletion.

To ensure that all the files remain intact, you should prepare regular data backups. You can choose cloud-based or physical copies you could restore from later in case of a disaster. If your backups were lost as well or you never bothered to prepare any, Data Recovery Pro can be your only hope to retrieve your invaluable files.

About the author
Ugnius Kiguolis
Ugnius Kiguolis - The mastermind

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Ugnius Kiguolis
About the company Esolutions

Removal guides in other languages

  1. Guest says:
    September 28th, 2004 at 7:09 pm

    This program (Bargain Buddy) and related files may be created in:

    %SYSTEMROOT%Program FilesBullsEye Network

    This directory should be removed. There may be an instance in the Add-Remove Programs list for Bargains. It will be removed if all related registry entries are removed. I had a file associated to Bargains.exe that attempted to access the internet called EXDL.EXE which was stored in:

    %SYSTEMROOT%windowssystem32

    If this exists it should be removed as well.

    This application managed to install itself without any awareness merely by visiting a rogue web page (using up to date AV and Firewall software). I recommend regular OS security updates and be sceptical when allowing application internet access through a firewall.

  2. Guest says:
    September 28th, 2004 at 11:09 pm

    I managed to get the Adware/Spyware app called "CashBack by BargainBuddy" from opening a rogue web page.

    Via an IE Browser Helper Object exploit, CashBack (EXDL.EXE) is able to install without detection. The app installs from the browser's cache to location:
    %SYSTEMROOT%system32

    My Anti-Virus software detected the activity as a Trojan, labelling it "Bloodhound.Exploit.6".

    CashBack also installs the associated low risk Spyware app called BargainBuddy (or BullsEye) at:
    Program FilesBullsEye Network

    and sets up its process "BARGAINS.EXE" to run at startup. CashBack (EXDL.EXE) then attempts to access the internet, and if allowed, can cause serious harm.

    After some research, I found CashBack is considered a very high risk threat and allows remotely exploitable vulnerabilities to a system, causes a number of system errors by deleting and overwriting system files and forces automatic reboots of a computer without user intervention.

    Both of these apps originated from eXact Advertising. Any software communicating across the Internet without user knowledge or consent is guilty of information theft.

    Running a system restore (on Windows ME or XP to before the infection may revert the changes to the registry along with a manual clean up of the remaining files/directories to fully remove.
    (this is what I did but I never allowed EXDL.EXE network access)

    Where is Microsoft in all this????? Apparently the Microsoft Security Bulletin "MS04-013" resolved this exploit in update "837009".
    http://www.microsoft.com/technet/security/bulletin/MS04-013.mspx

    BUT… the security update appeared to allow this exploit as I had this update previously installed prior to the attack.

    Note: I did not have Windows XP SP2 installed. Perhaps there is YET ANOTHER FIX there??

  3. Guest says:
    October 6th, 2004 at 2:10 pm

    When BargainBuddy was on my computer, I also noticed a new file named error.log in my Windows directory. I opened it and it has the message: [2004-10-05:22:10:58]:1001:query cannot be accessed —
    [2004-10-05:22:10:58]: U
    [2004-10-05:22:30:59]:1001:query cannot be accessed —
    [2004-10-05:22:30:59]:8 U
    [2004-10-05:23:15:24]:1001:query cannot be accessed —
    [2004-10-05:23:15:24]: U

    On another website, someone was asking for help because ad.dat, ub.dat, along with error.log had suddenly appeared on their computer. Even though it's not listed as a file to delete here, I think it was created with BargainBuddy and should be deleted.

  4. Guest says:
    October 14th, 2004 at 8:10 pm

    I have major problems in removing this garbage from my system running win2k pro with sp3. I have done several manual removals and cannot get the garbage completely off the system. I have already tried several spyware/adwareremoval progs and they do not completely get removed. Are there some hidden files that I am missing not listed

  5. Guest says:
    October 19th, 2004 at 10:10 am

    Not only did I get this BargainBuddy crap, but also got NaviSearch, CashBack, BroadJump and Bullseye Network. They are all crap and get rid of everyone asap before they turn your computer into an expensive paperweight.

  6. Guest says:
    October 27th, 2004 at 7:10 pm

    If anyone is having trouble with getting bargainbuddy or anything else thats in the bundle of adware/spyware please uninstall something called Broadjump Client or something like that this IS apart of the bundle even if you didn't get it when you got bargainbuddy. Even though theres no run registry key broadjump is still recreating bargains registry key in your registry (regedit in run) Now, to uninstall this after you've fallin the instructions. Go to add/remove programs REMOVE broadjump THEN go to http://www.webroot.com and get the product called Spy Sweeper it says trial when you start it but that just means you can't get brand new updates. after you have done that i scanned then i IMMEDIATELY shutdown my pc (start shutdown ok so the settings can save) then i brought it back up and it was fine

    Registry Instructions:
    Go to Hkey Local Machine then software and find bargains after you have rebooted pc and if its gone then you have successfully removed it and it will not popup in add and remove programs anymore
    if you plan on messing ariund in the registry i would like you to hit file then export then hit the all bubble and name it something like backup JUST in case you delete the wrong thing you can restore your computer without screwing it up permanently

    Please give me feed back if this worked cause it worked for me and i had broadjump for months i didn't know it was a virus and din't know how it got there i actually thought it was for my new broadband

    broadband-broadjump…got mixed up thought maybe company of cd or w/e ya know well try it out i guarantee they will be gone

  7. Guest says:
    November 4th, 2004 at 12:11 pm

    Yes, I caught this thing too… So annoying!!! So advice – as soon as you see its traces in your PC, get rid of it.

  8. Guest says:
    November 19th, 2004 at 1:11 pm

    here is one new related file:
    cdt bb8016.exe

  9. minus says:
    April 29th, 2012 at 9:33 am

    Ad-Aware was excellent but now its just a huge rcuesroe hog, and the companionship is very greedy! When it was free, Ad-Aware could remove lots of things and youd only need to pay after like a 30 day period otherwise it was fine, but now theyre just greedy.

Your opinion regarding BargainBuddy