Offers4U virus appear on Chrome and Firefox browsers

Offers4U virus is, in fact, a potentially unwanted program which has been actively misused for promoting third party websites and services. That's why it causes sponsored ads on your Google Chrome, Microsoft Edge, Mozilla Firefox, Safari and other web browsers.
According to PC experts, hundreds of PC users have already been affected by this adware. They all report about the same issues: annoying “ads by Offers4U” and similar notifications, redirects to suspicious websites, slow downs on their web browsers, cookies and so on. Technically, this application is not a virus. However, it's more than clear that it is not created for helping people save their money. Instead of being a reliable shopping helper, Offers4U virus tries to earn the money for its developers.
It does that by showing third party ads on people's computers. If it manages to convince them to click any of these ads, its developer receives a certain amount of money. Besides, this adware can show up on your Mac OS X or Windows computer without any permission asked because lots of free applications, for example, download managers, PDF creators, video streaming software and similar apps, have been involved in its distribution scheme. If you have already detected this PUP among your extensions, you should remove Offers4U with FortectIntego or similar uninstaller.
The most important fact related to this browser add-on is that it is capable of tracking your browsing on the web. Beware that Offers4U is usually spread in a bundle with cookies that may hijack each of your web browsers and then may start collecting information about your search terms, mostly visited websites, data that is entered there, PC's IP address, its location, etc. Sounds unfair, right?
If you, just like us, believe that such activity is dangerous, you should get rid of this adware from your computer. The easiest way to do that is to use automatic removal option. However, you can also select manual Offers4U removal from Mac OS X or Windows operating system. In this case, make sure you perform each of the steps that are given below in exact order.
As we have already mentioned, this program seeks to convince its users that it is a powerful shopping helper that can help them save their money by showing the latest discounts, price comparisons and similar deals. However, before you start believing that Offers4U ads seek to inform you about the best price offers and the greatest discounts, you must know that this program is considered an ad-supported application.
So, it displays its advertisements just for redirecting you to its affiliate websites that are seeking to increase their popularity. In most of the cases, these ads have nothing in common with the content that they promise.
Offers4U Distribution methods:
There are hundreds of PC users who have labelled this adware “virus” because of its unexpected appearance on their computers. In reality, this program can be installed manually or in a bundle with freeware and shareware where it is hidden in optional components. In fact, they are wrong because this program is not a virus, and it cannot pose any harm to the system or data that is kept on it.
Nevertheless, as you may have already understood, it may initiate lots of unwanted activities, such as Offers4U redirect, slowdowns, annoying pop-up ads and similar inconveniences.
How can you avoid its infiltration to your PC system? Of course, there are some things that you should remember: the main thing you must keep in mind is that Offers4U is spread in a bundle with freeware, which can be filled with various components. To get the ability to opt out of them, you should always select Custom or Advanced installation option and then uncheck different check marks that claim that you want to install this adware.
If you think that you have already been tricked into installing this commercial add-on on Chrome, Firefox or other web browser, you should wait no longer. You should use a guide below and fix your computer.
Fixing computer after Offers4U:
What should be done after noticing alerts that claim “brought to you by Offers4U”, “Offers4U coupons”, “ads by Offers4U” or “Offers4U ads”? The answer is very simple – their appearance on your web browser means that you have already downloaded this questionable program to your computer.
Also, the appearance of these ads can be a sign that this adware has already infiltrated your machine without your authorization. We think that you should get rid of it no matter which case is yours. For Offers4U removal we highly recommend using reputable anti-spyware software.
If you want to get rid of this adware manually, you should pay attention to one fact – this program has been traveling around in one pack with various components that may cause its reappearance in the future. That's why you must be very careful while trying to remove Offers4U from your PC system using manual removal option.
What do our users think about Offers4U
Dave: After installing a program that I need (download manager), I started seeing Offers4U ads. They appear when I use Google Chrome browser only. Could this be that I installed an infected download manager?
2spyware: Unfortunately, but it seems that you are right. While we cannot declare that this program is malicious, you can easily see that this program is capable of infiltrating a computer without users' authorization. Also, it may cause serious havoc on your web browser and the only way to avoid it is to remove Offers4U adware. Please, consider using FortectIntego or alternative anti-malware programs to prevent the second appearance of this app.
Michael: Offers4U virus has just infected my Mac, and I don't know how to fix it. What is the easiest way to remove this malware?
2spyware: Firstly, this program is not malware. It's just a potentially unwanted program, which is designed to show an ad-supported content on a web browser. However, you should perform Offers4U removal on Mac because it can track your browsing sessions and collect non-personally identifiable information. Our recommended anti-malware tools can always help you to fix your computer, no matter what OS is installed on them.
Uninstall from Windows
Uninstall from Windows 10/8:
- Type Control Panel into the Windows search box and open the result.
- Under Programs, select Uninstall a program.

Uninstall from Windows 7/XP:
- Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
- In Control Panel, select Programs > Uninstall a program.

Remove the unwanted program:
- In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
- If User Account Control appears, click Yes to confirm, then complete the removal.

Delete from macOS
Remove the unwanted application:
- From the menu bar, select Go > Applications.
- In the Applications folder, look for any suspicious entries, then drag them to Trash (or right-click and pick Move to Trash).

Delete leftover files and folders:
- Select Go > Go to Folder.
- Enter /Library/Application Support and remove any suspicious folders related to the unwanted program.
- Repeat the same check in the /Library/LaunchAgents and /Library/LaunchDaemons folders, deleting any suspicious entries.

- Finally, empty the Trash to permanently remove the leftovers.
Reset Internet Explorer
Remove dangerous add-ons:
- Open Internet Explorer, click on the Gear icon (IE menu) on the top-right corner of the browser
- Pick Manage Add-ons.
- You will see a Manage Add-ons window. Here, look for suspicious plugins. Click on these entries and select Disable.

Change your homepage if it was altered:
- Open IE and click on the Gear icon.
- Select Internet Options.
- In the General tab, delete the Home page address and replace it by your preferred one (for example, Google.com).
- Click Apply and then select OK.

Delete temporary files:
- Press on the Gear icon and select Internet Options.
- Under Browsing history, click Delete...
- Select relevant fields and press Delete.

Reset Internet Explorer:
- Click on Gear icon > Internet options and select Advanced tab.
- Select Reset.
- In the new window, check Delete personal settings and select Reset.

Remove from Microsoft Edge
Delete unwanted extensions from MS Edge:
- Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
- From the list, pick the extension and click on the Gear icon.
- Click Remove.

Clear cookies and other browser data:
- Click on the Menu (three horizontal dots at the top-right of the browser window) and select Settings > Privacy, search, and services..
- Under Clear browsing data, pick Choose what to clear.
- Select Cookies and other site data and Cached images and files. (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.

Restore new tab and homepage settings:
- Click the menu icon and choose Settings.
- Then find On startup section.
- Click Remove next to any suspicious startup page.
Reset MS Edge if the above steps did not work:
- Press on Ctrl + Shift + Esc to open Task Manager.
- Click on More details arrow at the bottom of the window.
- Select Details tab.
- Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.

Instructions for Chromium-based Edge
Delete extensions from MS Edge (Chromium):
- Open Edge and click select Settings > Extensions.
- Delete unwanted extensions by clicking Remove.

Clear cache and site data:
- Click on Menu and go to Settings.
- Select Privacy, search and services.
- Under Clear browsing data, pick Choose what to clear.
- Under Time range, pick All time.
- Select Clear now.

Reset Chromium-based MS Edge:
- Click on Menu and select Settings.
- On the left side, pick Reset settings.
- Select Restore settings to their default values.
- Confirm with Reset.
- This will disable extensions and reset startup pages but will not delete bookmarks, saved passwords, or browsing history.

Remove from Mozilla Firefox (FF)
Remove dangerous extensions:
- Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
- Select Add-ons.
- In here, select the unwanted extension and click Remove.

Reset the homepage:
- Click three horizontal lines at the top right corner to open the menu.
- Choose Settings.
- Under Home, set your preferred homepage and new tab settings.
Clear cookies and site data:
- Click Menu and pick Settings.
- Go to Privacy & Security section.
- Scroll down to locate Cookies and Site Data.
- Click on Clear Data...
- Select Cookies and Site Data and Temporary cached files and pages, then click Clear.

Reset Mozilla Firefox
If clearing the browser as explained above did not help, reset Mozilla Firefox:
- Open Mozilla Firefox browser and click the Menu.
- Go to Help and then choose Troubleshooting Information.

- Under Give Firefox a tune up section, click on Refresh Firefox...
- Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.

Remove from Google Chrome
Delete malicious extensions from Google Chrome:
- Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
- In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.

Clear cache and web data from Chrome:
- Click on Menu and pick Settings.
- Under Privacy and security, select Clear browsing data.
- Select Browsing history, Cookies and other site data, as well as Cached images and files.
- Click Clear data.

Change your homepage:
- Click menu and choose Settings.
- Look for a suspicious site in the On startup section.
- Click on Open a specific or set of pages and click on three dots to find the Remove option.
Reset Google Chrome:
If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:
- Click on Menu and select Settings.
- In the Settings, scroll down and click Advanced.
- Scroll down and locate Reset and clean up section.
- Now click Restore settings to their original defaults.
- Confirm with Reset settings.

Delete from Safari
Remove dangerous extensions:
- Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
- Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.

Clear history and website data:
- Click Safari in the menu and pick Clear History.
- Set Clear to all history and confirm with Clear History.

Reset Safari:
- Click Safari in the menu and select Preferences > Advanced.
- Enable Show Develop menu in menu bar.
- From the menu bar, click Develop and select Empty Caches.

Did this guide help?
10 comments
Kylie
This add on is awful. It is not found by malware, not in IE8 tool bar add ins or on a list of programs to uninstall. The uninstall software they link to doesnt work. Does anyone know how to get rid of this?
Joe
Kylie,
Follow the instructions above for removal from your browser and you will probably find the name of the program. Mine was called V-bates. I removed the extension from my browser and then found it under Program Uninstall. Annoying ads are now gone.
A. Agnelli
I worked this out for my Macs, but it might also lead you in the right direction:
I tried to get rid of the annoying "offers4u" pop-ups for days and followed all kinds of instructions, that I researched online. NOTHING worked (incl. AdwareMedic, Malwarebytes, ClamXav, Sophos, etc.). Neither on OS 10.9.x nor 10.6.8 (running both on different partitions). But it looks like, that I did find a SOLUTION, which I will describe with the following 6 steps:
1. Find out, on which websites the "offers4u" windows pop-up. In my case it was mostly on Amazon and on ebay, not immediately though, only after I was searching for some specific items. I tried to find out, to which domains or IPs the browser was connecting short before the "offers4u"-windows pop-up. As that happens so fast, it is nearly impossible to write down or memorize this info, so I recorded the screen with a screen recording program. I have uploaded the result here: http://vimeo.com/138000812 (PW = video). Going through the video you will see domains like cloudfront.net, mgicinsrc.org and mgicinsrc.info show up before the actual offers4u-windows pop up. So here are the next steps I did:
2. Using the selectivecookiedelete-Extension for Firefox, I deleted all cookies, that contained “cloudfront” and “mgicin”. If you dont have this extension, I suggest, you delete all cookies.
3. Most important: I copied the file “hosts” (located in ~/private/etc/hosts) to my desktop, opened with a regular text program and added the following lines:
127.0.0.1 i.mgicinjs.info
127.0.0.1 f.mgicinjs.info
127.0.0.1 i.mgicinjs.org
127.0.0.1 mgicinjs.net
127.0.0.1 mgicinjs.com
127.0.0.1 dew9ckzjyt2gn.cloudfront.net
===> If OTHER domains show up in your browser, of course you need to paste those into the hosts-file
A. Agnelli
===> If OTHER domains show up in your browser, of course you need to paste those into the hosts-file
A. Agnelli
(not sure, why my comment did not go through completely - here is the rest)
4. I deleted the original hosts-file and moved/copied the one created on the desktop to the etc-folder.
5. I ran “Repair Disk Permissions” with Disk Utility.
6. I restarted my iMac, ran Firefox and (until now) the offers4u annoyance did not reappear.
Theoretically this should also make offers4u disappear on all other browsers you are using (dont forget to delete the cookies there too).
Please respond to the above, if it worked for you too (or not). Best wishes, A.
Alma
Thank you, 2-spyware team, for a detailed guide and the chance to escape from Offers4U ads! I thought I will never manage to get through that advertising maze.
Jd.Bob
Hi. Is this adware still active? Jesus, I was infected with it probably a couple of years. Having such a tool installed is a miserable experience because its really tough to fight against those Offers4U ads. I will do my best not to get infected again.
Kristie
Hi. Ive been using this app for some time until I found out that its ads will not save my money or time. Dont trust Offers4U ads under any circumstances, especially those that promote other programs or remove tech support.
Mr.Pete
I always though that "Ads by Offers4U" are generated by the websites!I cant believe that I have endured those ads for so long. Fortunately, the guide above has helped me to get rid of this adware!
Chip
The worst distributions of Offers4U come as a part of other programs, silently working in the background of another process. I recommend you uninstall any software you may have installed recently that you dont have 100% trust in.