Cafeup.net ads: what it is and how to remove it
Cafeup.net is the unwanted adware-type program that gets installed on the computer without asking for permission. From the second this PUP infects the system, the machine starts acting strange and causes frequent redirects to certain sites to reroute the traffic to affiliated pages.
Facts checked October 6, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
A scan of the PC is a quick way to confirm that nothing installed is behind the cafeup.net redirects.
Do it yourself · free Remove Cafeup.net ads yourself 3 steps, about 9 minutes, no software needed.
Start the steps
Cafeup.net ads: summary
| Distribution | Insecure freeware installations, deceptive sites, and visiting shady pages can lead to quick cyber threat infiltration. Also, other PUPs can easily load adware and rogue programs on the PC behind your back |
|---|---|
| Name | Cafeup.net |
| Type | Adware/ redirect virus |
| Main symptoms | The site appears out of nowhere and once visited shows additional pop-ups to encourage the person agreeing to notifications and other content, redirects to advertising pages gets triggered easily from clicks on the page and other content |
| Possible danger | Ad-tracking[1] involved in such campaigns can lead to privacy issues and exposing to suspicious pages leads to serious malware infiltrations |
| Detection names | No Microsoft detection name is known |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 8 more facts
| Damage | Not recorded in the old report |
|---|---|
| Symptoms | Redirects to an unknown domain |
| Evidence | 4 write-ups by security sites; details still limited |
| Domains | cafeup.net |
| Ads shown as | Redirects through ad pages |
| Browsers | Chrome, Edge and Firefox |
| First seen | 7 November 2019 |
| Facts checked | 6 October 2026 |
Is Cafeup.net ads dangerous?
From our report of Nov 2019 · not reviewed since
Pay attention to freeware installations to avoid cyber infections
These redirects, push notifications, and ads causing threats appear on the system out of the carelessness of the user.
Deals, flashy ads, distractions, clickbait, and deceptive material quickly lure the person into skipping through steps or installing shady programs from the internet directly.
You need to choose reliable sources and go for Advanced or Custom installation options during such processes. PUPs don't require any permissions, so when you agree to get everything pre-packed in the bundle, you install adware, alongside other threats and think that the application you intended to get was the only download at the time.
It also hides behind corrupted links, deceptive sites or torrent services. Not to mention, fake updates, and spam emails can deliver shady applications. Be careful enough to prevent those threats from infiltrating. Caution helps you to see all the included apps and deny the installation.
From our report of Nov 2019 · not reviewed since
More from our earlier report on Cafeup.net
- You should get a proper anti-malware tool for Cafeup.net removal, so all the related programs and applications get eliminated once and for all
- To ensure that there were no system changes that can affect the further performance of your computer made, check the PC with
How Cafeup.net ads got into your browser
From our report of Nov 2019 · not reviewed since
Cafeup.net is the unwanted adware-type program that gets installed on the computer without asking for permission.
From the second this PUP infects the system, the machine starts acting strange and causes frequent redirects to certain sites to reroute the traffic to affiliated pages. This is the browser-based intruder that significantly diminishes the usage of Google Chrome, Mozilla Firefox, Internet Explorer.
The website itself shows information about health, fashion, beauty, and culture, but all this is the image Cafeup.net adware trying to create. On the website, there should be about, contact us and privacy sections, but all of these parts redirect directly to the main page without displaying any useful information. Also, the site focuses on tricking the person into allowing additional notifications coming from this or any other commercial site.
As a result, Cafeup.net virus shows pop-ups on the browser that suggest agreeing to notifications, and, once you interact with that content, site settings and automatic preferences get altered. As a result, push notifications start coming directly to the screen, even when the browser is closed, and can lead the victim to frustration.
Cafeup.net is a sneaky virus, so the first time you can notice the infection is when your online browsing activities get interrupted with ads and redirects to the page you don't know or any related advertising service. Banners, pop-ups, box messages, and other in-browser material shows promotional content and tries to lure you into visiting the affiliated page.
However, when push notifications get triggered, and additional content of the Cafeup.net ads shows up, it becomes difficult to avoid clicking on the suspicious pop-ups. The content can be related to the same things as this website itself or different themes, written in a foreign language, and lead to questionable domains.
Cafeup.net is categorized as a potentially unwanted program, so it can perform different tasks and cause more problems in the background than you can notice, for example:
These alterations can cause additional issues because Cafeup.net runs in the background, and you cannot remove it that easily without help from professional anti-malware tools. All those installed tools and changes to the system preferences affect the PUP termination since you need to delete all associated files to end the constant redirects.
Cafeup.net shows notifications, installs extensions, add-ons, so you cannot access the commonly visited pages and other content since the screen is filled with advertisements. This is why you should also go through the settings of the browser to ensure that the PUP is terminated:
As for proper Cafeup.net removal, you need to get an anti-malware program that is designed to detect and delete these intruders completely from the machine. These sneaky intruders can hide and affect the machine even though you terminate the initial site and block it.
You need to remove Cafeup.net and all the related programs, applications to make the device virus-free again. This is achieved by scanning the machine fully and eliminating all potential threats, dangerous files. However, you may also need to repair the damage made by the PUP behind your back. Run on the system because it might indicate and repair system files damaged or corrupted by this shady adware.
Visiting these pages constantly and keeping those shady extensions on the browser can lead to issues with your privacy because every click and page visit generates revenue for the publisher and gets access to details about your online browsing preferences. Keep the machine safe and remove Cafeup.net ads by cleaning the PC fully.
- install program or applications, in-browser content
- change browser settings
- alter the appearance of web browsing tools
- change startup settings
- edited Windows registry keys
- Go to the menu of your browser and locate to Advanced Settings.
- Navigate to Privacy and security, then Site settings.
- Manage the domains that can show Notifications for you and choose which ones to Allow/Block.
Check your browser and PC
- Address:
cafeup.net
How to remove Cafeup.net ads
How to stop the Cafeup.net redirects
Work in this order and test a few links after each step, so you know which one was the cause.
Step 1: Check the browser's extensions
A browser that keeps landing on
cafeup.netby itself usually has an add-on doing it. Open the extension list (chrome://extensions, edge://extensions, or Extensions and themes in the Firefox menu) and remove anything you do not remember installing.Coupon, PDF, new tab, search and video downloader add-ons are the usual suspects. Do this in every browser on the Windows 11 or Windows 10 PC.
Chrome on Windows 11: More > Extensions > Manage extensions. Full procedure with screenshots: Remove a browser extension
Step 2: Reset the browser if the redirects continue
When
cafeup.netkeeps opening after the extensions are cleaned, reset the browser to its defaults. Chrome: Settings > Reset settings > Restore settings to their original defaults; Edge: Settings > Reset settings; Firefox: Help > More troubleshooting information > Refresh Firefox.A reset keeps bookmarks and saved passwords but clears site permissions, the start page and the search engine.
If every browser still redirects afterwards, the cause is a program in Windows 11 or Windows 10: check Settings > Apps > Installed apps for anything you did not install.
Chrome on Windows 11: Settings > Reset settings. Full procedure with screenshots: Reset a browser and fix a hijacked search engine
Step 3: Scan the PC if you downloaded anything from the ads
Most people who only saw the notifications can skip this step. If a notification or the page it opened made you download or run a file, delete the file and run a full scan, then a Microsoft Defender Offline scan.
In Windows 11 and Windows 10 open Windows Security > Virus & threat protection > Scan options, select Microsoft Defender Antivirus (offline scan) and click Scan now. The PC restarts and the scan takes about 15 minutes, so save your work first.
Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
Instructions for each browser and system
The detailed steps for every browser and system this guide covers. Open the one you use.
Uninstall from Windows
Get rid of the shady adware relying on this guide:
Uninstall from Windows 10/8:
- Type Control Panel into the Windows search box and open the result.
- Under Programs, select Uninstall a program.
Uninstall from Windows 7/XP:
- Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
- In Control Panel, select Programs > Uninstall a program.
Remove the unwanted program:
- In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
- If User Account Control appears, click Yes to confirm, then complete the removal.
Remove from Google Chrome
Make sure to remove Cafeup.net ads by eliminating the initial PUP
Delete malicious extensions from Google Chrome:
- Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
- In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.
Clear cache and web data from Chrome:
- Click on Menu and pick Settings.
- Under Privacy and security, select Clear browsing data.
- Select Browsing history, Cookies and other site data, as well as Cached images and files.
- Click Clear data.
Change your homepage:
- Click menu and choose Settings.
- Look for a suspicious site in the On startup section.
- Click on Open a specific or set of pages and click on three dots to find the Remove option.
Reset Google Chrome:
If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:
- Click on Menu and select Settings.
- In the Settings, scroll down and click Advanced.
- Scroll down and locate Reset and clean up section.
- Now click Restore settings to their original defaults.
- Confirm with Reset settings.
Remove from Microsoft Edge
Delete unwanted extensions from MS Edge:
- Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
- From the list, pick the extension and click on the Gear icon.
- Click Remove.
Clear cookies and other browser data:
- Click on the Menu (three horizontal dots at the top-right of the browser window) and select Settings > Privacy, search, and services..
- Under Clear browsing data, pick Choose what to clear.
- Select Cookies and other site data and Cached images and files. (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.
Restore new tab and homepage settings:
- Click the menu icon and choose Settings.
- Then find On startup section.
- Click Remove next to any suspicious startup page.
Reset MS Edge if the above steps did not work:
- Press on Ctrl + Shift + Esc to open Task Manager.
- Click on More details arrow at the bottom of the window.
- Select Details tab.
- Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.
Delete extensions from MS Edge (Chromium):
- Open Edge and click select Settings > Extensions.
- Delete unwanted extensions by clicking Remove.
Clear cache and site data:
- Click on Menu and go to Settings.
- Select Privacy, search and services.
- Under Clear browsing data, pick Choose what to clear.
- Under Time range, pick All time.
- Select Clear now.
Reset Chromium-based MS Edge:
- Click on Menu and select Settings.
- On the left side, pick Reset settings.
- Select Restore settings to their default values.
- Confirm with Reset.
- This will disable extensions and reset startup pages but will not delete bookmarks, saved passwords, or browsing history.
Remove from Mozilla Firefox (FF)
Remove dangerous extensions:
- Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
- Select Add-ons.
- In here, select the unwanted extension and click Remove.
Reset the homepage:
- Click three horizontal lines at the top right corner to open the menu.
- Choose Settings.
- Under Home, set your preferred homepage and new tab settings.
Clear cookies and site data:
- Click Menu and pick Settings.
- Go to Privacy & Security section.
- Scroll down to locate Cookies and Site Data.
- Click on Clear Data...
- Select Cookies and Site Data and Temporary cached files and pages, then click Clear.
Reset Mozilla Firefox
If clearing the browser as explained above did not help, reset Mozilla Firefox:
- Open Mozilla Firefox browser and click the Menu.
- Go to Help and then choose Troubleshooting Information.
- Under Give Firefox a tune up section, click on Refresh Firefox...
- Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.
Delete from Safari
Remove dangerous extensions:
- Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
- Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.
Clear history and website data:
- Click Safari in the menu and pick Clear History.
- Set Clear to all history and confirm with Clear History.
Reset Safari:
- Click Safari in the menu and select Preferences > Advanced.
- Enable Show Develop menu in menu bar.
- From the menu bar, click Develop and select Empty Caches.
Delete from macOS
Remove the unwanted application:
- From the menu bar, select Go > Applications.
- In the Applications folder, look for any suspicious entries, then drag them to Trash (or right-click and pick Move to Trash).
Delete leftover files and folders:
- Select Go > Go to Folder.
- Enter /Library/Application Support and remove any suspicious folders related to the unwanted program.
- Repeat the same check in the /Library/LaunchAgents and /Library/LaunchDaemons folders, deleting any suspicious entries.
- Finally, empty the Trash to permanently remove the leftovers.
Reset Internet Explorer
Deleting Cafeup.net and other related content can improve the performance of your PC significantly
Remove dangerous add-ons:
- Open Internet Explorer, click on the Gear icon (IE menu) on the top-right corner of the browser
- Pick Manage Add-ons.
- You will see a Manage Add-ons window. Here, look for suspicious plugins. Click on these entries and select Disable.
Change your homepage if it was altered:
- Open IE and click on the Gear icon.
- Select Internet Options.
- In the General tab, delete the Home page address and replace it by your preferred one (for example, Google.com).
- Click Apply and then select OK.
Delete temporary files:
- Press on the Gear icon and select Internet Options.
- Under Browsing history, click Delete...
- Select relevant fields and press Delete.
Reset Internet Explorer:
- Click on Gear icon > Internet options and select Advanced tab.
- Select Reset.
- In the new window, check Delete personal settings and select Reset.
Choose a proper web browser and improve your safety with a VPN tool
Online spying has got momentum in recent years and people are getting more and more interested in how to protect their privacy online.
One of the basic means to add a layer of security - choose the most private and secure web browser. Although web browsers can't grant full privacy protection and security, some of them are much better at sandboxing, HTTPS upgrading, active content blocking, tracking blocking, phishing protection, and similar privacy-oriented features.
However, if you want true anonymity, we suggest you employ a powerful VPN - it can encrypt all the traffic that comes and goes out of your computer, preventing tracking completely.
Lost your files? Use data recovery software
While some files located on any computer are replaceable or useless, others can be extremely valuable.
Family photos, work documents, school projects - these are types of files that we don't want to lose. Unfortunately, there are many ways how unexpected data loss can occur:
- power cuts
- Blue Screen of Death errors
- hardware failures
- crypto-malware attack
- even accidental deletion
To ensure that all the files remain intact, you should prepare regular data backups. You can choose cloud-based or physical copies you could restore from later in case of a disaster. If your backups were lost as well or you never bothered to prepare any, can be your only hope to retrieve your invaluable files.
From our report of Nov 2019 · not reviewed since
Get rid of the PUP and other apps responsible for those Cafeup.net ads and redirects
Cafeup.net virus is not the correct term for this potentially unwanted program, but when you keep the adware running for a while all those changes affect the device significantly, and the machine runs as it would be infected by a virus. You can avoid this system interruption if you react to the threat as soon as possible.
You should remove Cafeup.net from the screen as soon as it appears as a redirect, or you visit the page on purpose. Then the best practice would be to eliminate the application and clean the possible traces. However, there are no specific files that can be easily located and removed.
Experts recommend the automatic Cafeup.net removal for this reason. When you rely on the anti-malware program and run a full system check, you can delete various types of files, applications and clean the system from threats. Then the only thing that is left to do - resetting the browsers.
Questions about Cafeup.net ads
cafeup.net opens when I click links. What causes it?
When every click leads to cafeup.net first, an extension or a script on the page is rewriting the links. If it happens only on one site, that site uses aggressive ads; close it and use another source. If it happens everywhere, open the browser in a private window, where extensions are normally off, and try again.
No redirect in the private window means one of your extensions is responsible: remove the ones you do not know. A redirect in the private window too means the cause is outside the extensions, such as a notification permission, a changed search setting or a program installed on the PC. The removal steps in this guide cover each of those.
Should I worry about redirects to cafeup.net?
Worry less about cafeup.net itself and more about what keeps sending you there. A single redirect from a free streaming or download site is normal and harmless once the tab is closed.
Repeated redirects on sites that used to work fine mean something in the browser or in Windows changed, often an extension or program installed alongside other software. It may also collect the pages you visit. Remove the cause with the steps in this guide, and do not act on anything the redirected pages ask:
- no Allow clicks
- no downloads
- no calls
If you already did one of those, the matching section of this guide explains what to do next.
What is Cafeup.net?
Cafeup.net is an ad redirect domain, a kind of adware. It earns money by showing redirects through ad pages, and each view, click or redirect pays whoever runs it. It is not something people usually choose; it arrives through a free download, a fake button or a misleading prompt.
Cafeup.net does not encrypt files or take control of Windows, but its ads are sold to anyone, including scam operators, so they can lead to fake virus warnings and unwanted downloads. The steps in this guide remove it from Windows and from each browser.
Why does cafeup.net keep showing up?
There are two possible reasons. If it appears as desktop notifications, a browser on this PC was given permission to receive them from cafeup.net, usually through a misleading prompt. That permission stays until you remove it in the browser's site settings.
If it appears as tabs or redirects, an ad on a site you visit is opening it, or an extension or program on the PC is. Test a private window: if cafeup.net never appears there, an extension is the likely cause. The plan above covers each case.
Which browsers does Cafeup.net affect?
In the cases we checked, Cafeup.net showed up in Chrome, Edge and Firefox. That does not rule out others on your PC, since adware installers often target every browser they find, and permissions and extensions sync across computers signed in to the same browser account.
Open each browser you have, go to its extensions page and its notification settings, and remove anything you do not recognise. Profiles count separately: Chrome and Edge can each hold several, and each one needs checking on its own.
Are the pop-ups I see really from Cafeup.net?
Compare them with the details in the table above. Cafeup.net produces redirects through ad pages, and the clearest sign of it is redirects to cafeup.net. Other adware looks similar, so check the name of the sending site at the bottom of a notification, the address in the tab that opened, or the newest entries on the extensions page.
If those match, this guide fits. If you see a different name, the same kind of steps apply, but remove the item you actually find rather than guessing.
Can an adware pop-up infect my PC just by appearing?
No. A pop-up, a notification or a new tab is only a web page or a message. It cannot run programs on Windows by itself, provided the browser and Windows are up to date. Infection needs a step from you:
- running a downloaded file
- installing an extension
- giving a stranger remote access
That is why scam pages work so hard to make you click. Close such pages with the tab's X or by closing the browser, not with buttons inside the page, which may start a download.
I let a "support technician" from an ad connect to my PC. What should I do?
Act quickly but calmly. Disconnect the PC from the internet first, so the connection ends. Uninstall the remote access tool they asked you to install and check Installed apps for anything else added during the call.
Run a Microsoft Defender full scan and offline scan. From another device, change your e-mail and banking passwords and sign out of all sessions.
If you paid by card, bank transfer or gift card, contact your bank or the card issuer immediately, and report the scam to the police. Do not answer if they call back.
Why is my browser so slow since the ads started?
Each page now does extra work. An adware extension reads the page, decides where to put ads, loads them from ad servers and reports your visit, and that happens on every tab. Ad-supported programs add their own background activity.
Removing the extension or program usually makes the browser fast again at once. If it stays slow, open the browser's own task manager with Shift+Esc in Chrome or Edge and look for extensions using a lot of memory or processor time.
Will Fortect remove Cafeup.net?
Fortect scans Windows for malware and unwanted programs and repairs the system files and settings they change, and its free scan shows what it finds on your PC before you decide anything.
For Cafeup.net, follow the plan above as well: the browser steps take back permissions and settings that no scanner treats as a threat, and uninstalling the program that brought it removes the source.
Run Microsoft Defender's full scan and, if anything was found, its offline scan as a second opinion. If the symptoms are gone after the plan and both scans are clean, there is nothing more to do.
Sources
- Wikipedia: Ad tracking (read October 6, 2026)
- Securitec: What is data tracking? (read October 6, 2026)
- Google Chrome Help: Use notifications to get alerts (no longer online) (read October 6, 2026)
- FTC: How to recognize, remove and avoid malware (read October 6, 2026)
- Microsoft Learn: Microsoft Defender Offline (read October 6, 2026)