Severity scale:  

Remove BargainBuddy (Improved Instructions)

removal by Ugnius Kiguolis - -   Also known as BargainBuddy ads | Type: Adware

What is BargainBuddy?

BargainBuddy is a browser hijacker that may monitor users’ activity on the Internet for getting more knowledge about their interests. In addition, it may cause undesirable pop-up advertisements that are usually filled with information about discounts, coupons and promotions. Unfortunately but there is no guarantee that these ads will help you to save the money because they are displayed for promoting affiliate parties. If you have started seeing BargainBuddy ads during your browsing on the web and you know that you have never downloaded it, you should beware that it may get into the system along with some free of charge software as well. This distribution method is called bundling. In this case, you should remove BargainBuddy adware from the system because, as we have already mentioned, it can hardly deliver what it promises.

As soon as BargainBuddy virus is installed on computer, IE browser helper object is installed on it as well. After doing so, this program starts its process at every Windows startup and begins showing its ads. It seems that it can also update itself via the Internet and contact with third parties for sharing information about people’s activity on the web. If you have been seeing its advertisements popping up during your browsing, you should avoid them because they may lead you to Bargain Buddy redirects that may be used for promoting shady and unreliable websites. So, stay mindful and do not click on the ads that show up on your screen while browsing. Bargain Buddy may also change your homepage or install unnecessary toolbars. If you have started seeing its notifications in the system tray bar and a pop-up message saying, „CashBack pays you to shop!“, you should ignore them. If you want to avoid these ads and keep your personally non-identifiable information away from tracking, we recommend installing a reliable anti-spyware like Reimage Reimage Cleaner Intego.

BargainBuddy ads

How can Bargain Buddy hijack my computer?

As much as we know, you cannot download this application from any official website. That means Bargain Buddy browser hijack can be installed only in a bundled pack of programs as you download freeware from the Internet. Bundling is a way to spread adware, unwanted system tools or internet hijackers without the knowledge of the user. You should stay cautious and install free programs carefully, because usually such unwanted programs are concealed behind “default”, “regular” or “standard” options of installation. Choose „advanced“ or „custom“ options and be sure to untick everything that differ from the preferred program. In addition, read Terms and Agreements. Users commonly just tick „Yes, I agree“ and proceed to the next step. Stay aware and do not ignore this step. Yes, it is that simple to prevent your computer from infectious software.

How can I remove BargainBuddy virus?

If you have recognised that BargainBuddy has hijacked your Internet browser and you are not satisfied with its activity on it, you should remove this PUP. You can do it manually or by downloading anti-spyware like SpyHunter. If you wish to do it on your own, we have all the right information for you. Please follow the instructions below to eliminate BargainBuddy application.

You may remove virus damage with a help of Reimage Reimage Cleaner Intego. SpyHunter 5Combo Cleaner and Malwarebytes are recommended to detect potentially unwanted programs and viruses with all their files and registry entries that are related to them.

do it now!
Reimage Happiness
Intego Happiness
Compatible with Microsoft Windows Supported versions Compatible with OS X Supported versions
What to do if failed?
If you failed to remove virus damage using Reimage Intego, submit a question to our support team and provide as much details as possible.
Reimage Intego has a free limited scanner. Reimage Intego offers more through scan when you purchase its full version. When free scanner detects issues, you can fix them using free manual repairs or you can decide to purchase the full version in order to fix them automatically.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Reimage, try running SpyHunter 5.
Alternative Software
Different software has a different purpose. If you didn’t succeed in fixing corrupted files with Intego, try running Combo Cleaner.

To remove BargainBuddy, follow these steps:

Delete BargainBuddy from Windows systems

  1. Click Start Control Panel Programs and Features (if you are Windows XP user, click on Add/Remove Programs). Click 'Start -> Control Panel -> Programs and Features' (if you are 'Windows XP' user, click on 'Add/Remove Programs').
  2. If you are Windows 10 / Windows 8 user, then right-click in the lower left corner of the screen. Once Quick Access Menu shows up, select Control Panel and Uninstall a Program. If you are 'Windows 10 / Windows 8' user, then right-click in the lower left corner of the screen. Once 'Quick Access Menu' shows up, select 'Control Panel' and 'Uninstall a Program'.
  3. Uninstall BargainBuddy and related programs
    Here, look for BargainBuddy or any other recently installed suspicious programs.
  4. Uninstall them and click OK to save these changes. Right click on each of suspicious entries and select 'Uninstall'

Get rid of BargainBuddy from Mac OS X system

  1. If you are using OS X, click Go button at the top left of the screen and select Applications. Cick 'Go' and select 'Applications'
  2. Wait until you see Applications folder and look for BargainBuddy or any other suspicious programs on it. Now right click on every of such entries and select Move to Trash. Click on every malicious entry and select 'Move to Trash'

Eliminate BargainBuddy from Internet Explorer (IE)

  1. Remove dangerous add-ons
    Open Internet Explorer, click on the Gear icon (IE menu) on the top right corner of the browser and choose Manage Add-ons. Click on menu icon and select 'Manage add-ons'
  2. You will see a Manage Add-ons window. Here, look for BargainBuddy and other suspicious plugins. Disable these entries by clicking Disable: Right click on each of malicious entries and select 'Disable'
  3. Change your homepage if it was altered by virus:
    Click on the gear icon (menu) on the top right corner of the browser and select Internet Options. Stay in General tab.
  4. Here, remove malicious URL and enter preferable domain name. Click Apply to save changes. Delete malicious URL, enter your desired domain name and click 'Apply' to save changes
  5. Reset Internet Explorer
    Click on the gear icon (menu) again and select Internet options. Go to Advanced tab.
  6. Here, select Reset.
  7. When in the new window, check Delete personal settings and select Reset again to complete BargainBuddy removal. Go to 'Advanced' tab and click on 'Reset' button. Now select 'Delete personal settings' and click on 'Reset' button again

Remove BargainBuddy from Microsoft Edge

Reset Microsoft Edge settings (Method 1):

  1. Launch Microsoft Edge app and click More (three dots at the top right corner of the screen).
  2. Click Settings to open more options.
  3. Once Settings window shows up, click Choose what to clear button under Clear browsing data option. Go to Settings and select 'Choose what to clear'
  4. Here, select all what you want to remove and click Clear. Select 'Clear' button
  5. Now you should right-click on the Start button (Windows logo). Here, select Task Manager. Open the start menu and select 'Task Manager'
  6. When in Processes tab, search for Microsoft Edge.
  7. Right-click on it and choose Go to details option. If can’t see Go to details option, click More details and repeat previous steps. Right-click 'Microsoft Edge' and select 'Go to details' Select 'More details' if 'Go to details' option fails to show up
  8. When Details tab shows up, find every entry with Microsoft Edge name in it. Right click on each of them and select End Task to end these entries. Find Microsoft Edge entries and select 'End Task'

Resetting Microsoft Edge browser (Method 2):

If Method 1 failed to help you, you need to use an advanced Edge reset method.

  1. Note: you need to backup your data before using this method.
  2. Find this folder on your computer: C:\Users\%username%\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe.
  3. Select every entry which is saved on it and right click with your mouse. Then Delete option. Go to Microsoft Edge folder on your computer, right-click every entry and click 'Delete'
  4. Click the Start button (Windows logo) and type in window power in Search my stuff line.
  5. Right-click the Windows PowerShell entry and choose Run as administrator. Find Windows PowerShell, right-click it and select 'Run as administrator'
  6. Once Administrator: Windows PowerShell window shows up, paste this command line after PS C:\WINDOWS\system32> and press Enter:
    Get-AppXPackage -AllUsers -Name Microsoft.MicrosoftEdge | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register $($_.InstallLocation)\AppXManifest.xml -Verbose}
    Copy and paste a required command and press 'Enter'

Once these steps are finished, BargainBuddy should be removed from your Microsoft Edge browser.

Erase BargainBuddy from Mozilla Firefox (FF)

  1. Remove dangerous extensions
    Open Mozilla Firefox, click on the menu icon (top right corner) and select Add-ons Extensions. Click on menu icon and select 'Add-ons'
  2. Here, select BargainBuddy and other questionable plugins. Click Remove to delete these entries. Select 'Extensions' and look for malicious entries. Click 'Remove' to get rid of each of them
  3. Reset Mozilla Firefox
    Click on the Firefox menu on the top left and click on the question mark. Here, choose Troubleshooting Information. Click on menu icon and then on '?'. Select 'Troubleshooting Information'
  4. Now you will see Reset Firefox to its default state message with Reset Firefox button. Click this button for several times and complete BargainBuddy removal. Click on 'Reset Firefox' button for a couple of times

Uninstall BargainBuddy from Google Chrome

  1. Delete malicious plugins
    Open Google Chrome, click on the menu icon (top right corner) and select Tools Extensions. Click on menu icon. Select 'Tools' and 'Extensions'
  2. Here, select BargainBuddy and other malicious plugins and select trash icon to delete these entries. Look for malicious entries and delete each of them by clicking on the Trash bin icon
  3. Click on menu icon again and choose Settings Manage Search engines under the Search section. When in 'Settings', select 'Manage search engines...'
  4. When in Search Engines..., remove malicious search sites. You should leave only Google or your preferred domain name. Click 'X' to remove malicious URLs
  5. Reset Google Chrome
    Click on menu icon on the top right of your Google Chrome and select Settings.
  6. Scroll down to the end of the page and click on Reset browser settings. When in 'Settings', scroll down to 'Reset browser settings' button and click on it
  7. Click Reset to confirm this action and complete BargainBuddy removal. Click on 'Reset' button to complete your removal

Delete BargainBuddy from Safari

  1. Remove dangerous extensions
    Open Safari web browser and click on Safari in menu at the top left of the screen. Once you do this, select Preferences. Click on 'Safari' and select 'Preferences'
  2. Here, select Extensions and look for BargainBuddy or other suspicious entries. Click on the Uninstall button to get rid each of them. Go to 'Extensions' and uninstall malicious add-ons
  3. Reset Safari
    Open Safari browser and click on Safari in menu section at the top left of the screen. Here, select Reset Safari.... Click on 'Safari' and select 'Reset Safari...'
  4. Now you will see a detailed dialog window filled with reset options. All of those options are usually checked, but you can specify which of them you want to reset. Click the Reset button to complete BargainBuddy removal process. Select all options and click on 'Reset' button

Do not let government spy on you

The government has many issues in regards to tracking users' data and spying on citizens, so you should take this into consideration and learn more about shady information gathering practices. Avoid any unwanted government tracking or spying by going totally anonymous on the internet. 

You can choose a different location when you go online and access any material you want without particular content restrictions. You can easily enjoy internet connection without any risks of being hacked by using Private Internet Access VPN.

Control the information that can be accessed by government any other unwanted party and surf online without being spied on. Even if you are not involved in illegal activities or trust your selection of services, platforms, be suspicious for your own security and take precautionary measures by using the VPN service.

Backup files for the later use, in case of the malware attack

Computer users can suffer various losses due to cyber infections or their own faulty doings. Software issues created by malware or direct data loss due to encryption can lead to problems with your device or permanent damage. When you have proper up-to-date backups, you can easily recover after such an incident and get back to work.

It is crucial to create updates to your backups after any changes on the device, so you can get back to the point you were working on when malware changes anything or issues with the device causes data or performance corruption. Rely on such behavior and make file backup your daily or weekly habit.

When you have the previous version of every important document or project you can avoid frustration and breakdowns. It comes in handy when malware occurs out of nowhere. Use Data Recovery Pro for the system restoring purpose.

About the author

Ugnius Kiguolis
Ugnius Kiguolis - The mastermind

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Ugnius Kiguolis
About the company Esolutions

Removal guides in other languages

  1. Guest says:
    September 28th, 2004 at 7:09 pm

    This program (Bargain Buddy) and related files may be created in:

    %SYSTEMROOT%Program FilesBullsEye Network

    This directory should be removed. There may be an instance in the Add-Remove Programs list for Bargains. It will be removed if all related registry entries are removed. I had a file associated to Bargains.exe that attempted to access the internet called EXDL.EXE which was stored in:


    If this exists it should be removed as well.

    This application managed to install itself without any awareness merely by visiting a rogue web page (using up to date AV and Firewall software). I recommend regular OS security updates and be sceptical when allowing application internet access through a firewall.

  2. Guest says:
    September 28th, 2004 at 11:09 pm

    I managed to get the Adware/Spyware app called "CashBack by BargainBuddy" from opening a rogue web page.

    Via an IE Browser Helper Object exploit, CashBack (EXDL.EXE) is able to install without detection. The app installs from the browser's cache to location:

    My Anti-Virus software detected the activity as a Trojan, labelling it "Bloodhound.Exploit.6".

    CashBack also installs the associated low risk Spyware app called BargainBuddy (or BullsEye) at:
    Program FilesBullsEye Network

    and sets up its process "BARGAINS.EXE" to run at startup. CashBack (EXDL.EXE) then attempts to access the internet, and if allowed, can cause serious harm.

    After some research, I found CashBack is considered a very high risk threat and allows remotely exploitable vulnerabilities to a system, causes a number of system errors by deleting and overwriting system files and forces automatic reboots of a computer without user intervention.

    Both of these apps originated from eXact Advertising. Any software communicating across the Internet without user knowledge or consent is guilty of information theft.

    Running a system restore (on Windows ME or XP to before the infection may revert the changes to the registry along with a manual clean up of the remaining files/directories to fully remove.
    (this is what I did but I never allowed EXDL.EXE network access)

    Where is Microsoft in all this????? Apparently the Microsoft Security Bulletin "MS04-013" resolved this exploit in update "837009".

    BUT… the security update appeared to allow this exploit as I had this update previously installed prior to the attack.

    Note: I did not have Windows XP SP2 installed. Perhaps there is YET ANOTHER FIX there??

  3. Guest says:
    October 6th, 2004 at 2:10 pm

    When BargainBuddy was on my computer, I also noticed a new file named error.log in my Windows directory. I opened it and it has the message: [2004-10-05:22:10:58]:1001:query cannot be accessed —
    [2004-10-05:22:10:58]: U
    [2004-10-05:22:30:59]:1001:query cannot be accessed —
    [2004-10-05:22:30:59]:8 U
    [2004-10-05:23:15:24]:1001:query cannot be accessed —
    [2004-10-05:23:15:24]: U

    On another website, someone was asking for help because ad.dat, ub.dat, along with error.log had suddenly appeared on their computer. Even though it's not listed as a file to delete here, I think it was created with BargainBuddy and should be deleted.

  4. Guest says:
    October 14th, 2004 at 8:10 pm

    I have major problems in removing this garbage from my system running win2k pro with sp3. I have done several manual removals and cannot get the garbage completely off the system. I have already tried several spyware/adwareremoval progs and they do not completely get removed. Are there some hidden files that I am missing not listed

  5. Guest says:
    October 19th, 2004 at 10:10 am

    Not only did I get this BargainBuddy crap, but also got NaviSearch, CashBack, BroadJump and Bullseye Network. They are all crap and get rid of everyone asap before they turn your computer into an expensive paperweight.

  6. Guest says:
    October 27th, 2004 at 7:10 pm

    If anyone is having trouble with getting bargainbuddy or anything else thats in the bundle of adware/spyware please uninstall something called Broadjump Client or something like that this IS apart of the bundle even if you didn't get it when you got bargainbuddy. Even though theres no run registry key broadjump is still recreating bargains registry key in your registry (regedit in run) Now, to uninstall this after you've fallin the instructions. Go to add/remove programs REMOVE broadjump THEN go to and get the product called Spy Sweeper it says trial when you start it but that just means you can't get brand new updates. after you have done that i scanned then i IMMEDIATELY shutdown my pc (start shutdown ok so the settings can save) then i brought it back up and it was fine

    Registry Instructions:
    Go to Hkey Local Machine then software and find bargains after you have rebooted pc and if its gone then you have successfully removed it and it will not popup in add and remove programs anymore
    if you plan on messing ariund in the registry i would like you to hit file then export then hit the all bubble and name it something like backup JUST in case you delete the wrong thing you can restore your computer without screwing it up permanently

    Please give me feed back if this worked cause it worked for me and i had broadjump for months i didn't know it was a virus and din't know how it got there i actually thought it was for my new broadband

    broadband-broadjump…got mixed up thought maybe company of cd or w/e ya know well try it out i guarantee they will be gone

  7. Guest says:
    November 4th, 2004 at 12:11 pm

    Yes, I caught this thing too… So annoying!!! So advice – as soon as you see its traces in your PC, get rid of it.

  8. Guest says:
    November 19th, 2004 at 1:11 pm

    here is one new related file:
    cdt bb8016.exe

  9. minus says:
    April 29th, 2012 at 9:33 am

    Ad-Aware was excellent but now its just a huge rcuesroe hog, and the companionship is very greedy! When it was free, Ad-Aware could remove lots of things and youd only need to pay after like a 30 day period otherwise it was fine, but now theyre just greedy.

Your opinion regarding BargainBuddy