Completely Remove BrowserMe (Chrome_Font.exe) Virus

BrowserMe.exe virus (also known as Chrome_Font.exe or Fleercivet / Trojan.Andromeda) is a Trojan which hijacks Google Chrome browser and starts displaying unwanted advertisements. The virus hides in the background and slows down the computer by opening various links even when the browser is not launched. The malicious advertisements are displayed on the websites you visit as well as popups and random websites might open themselves. This virus also spies on user activity when browsing and might steal your personal data.

The virus tries to remain unnoticed and does not notify about its presence. However, if you see that your Google Chrome started displaying unwanted advertisements while the computer became significantly slower there are signs you might be infected. Also, the virus usually leaves many chrome.exe processes runing even if you close the browser and do not see any Chrome windows open.

We recommend removing this virus as soon as possible. This will help you avoid visiting malicious sites advertised by the Trojan as well as protect your personal data. Use our automatic tool for quick removal or follow the manual removal instructions if you are experienced in editing Windows system files and settings. We recommend protecting your computer with an antivirus software in order to prevent such threats in the future.

Recommended Method: Download BrowserMe Virus Removal Tool

Version:   All Updated:   2 days ago Compatible OS:   All
This is the most suitable program for automatically removing the threat and repairing your PC.
Works with: Windows 10, Windows 8, Windows 7, Windows Vista, Windows XP. Read instructions here
File name Size
mb3-setup.exe 56.5 MB

Click here to download alternative tool

What is BrowserMe.exe / Chrome_Font.exe virus?

This virus is more aggressive than traditional potentially unwanted programs (PUP) bundled with other downloads. While it also infects your browser when installed, it usually does more harm by also spying on your activity and using computer resources heavily.

Most of the displayed advertisements are legitimate and the virus simply employs your machine to collect the revenue from ad clicks and visits. However, some of the websites might be dangerous and lead to further infections. This is why you should not browse the internet if your Google Chrome is infected. Do not login to any websites where you need to enter your password and use alternative browser if you need to access the internet.

BrowserMe can often be identified by using this simple method: open your Windows Task Manager and you should see many chrome.exe processes running even if you do not see any Chrome window open. The computer will also feel slower as the virus uses quite a lot of computing power and internet bandwidth. Finally, you will see a lot more ads on the websites you visit, including banners, popups and in-text links.

Here are several advertisement networks from which the virus displays the ads. The networks are legitimate but the virus uses illegal methods to fake clicks and collect revenue by utilizing your hijacked browser.

The Trojan is distributed using several methods. Sometimes it is hidden in downloads, torrents and attachments. However, it also uses a method where it firstly compromises various websites, replaces their content with “���” symbols and then displays a warning “The “HoeflerText” font wasn’t found”. When a user downloads the “HoeflerText” he gets a virus instead and it hijacks the browser immediately.

We encourage to remove this virus as soon as possible. Otherwise it might steal your personal data as well as result in many further infections. Follow our manual removal instructions or simply use the automatic removal tool listed above if you do not feel confident in editing important Windows files and settings by yourself.

Here are several screenshots of the virus in action. The advertisements you see may vary:


 Manual Removal Instructions:

NB: Make sure you follow the manual removal guide carefully. Even if you remove the virus there are chances that it will come back later if your computer is not protected. This is why we recommend using the automatic removal and protection tool listed at the beginning of this page.

Step 1:

Start by restoring the old system settings using System Restore. This is the best way to remove most of the effects from the virus activity and will greatly reduce the work required in next steps.

Press and hold Windows () key and click R key.

Enter the following in the field:


Click OK.

Click Next.

Check Show more restore points.

If you see any restore points, restore the system. Make sure you select a point that has been created before the infection happened. At the same time, a very old restore point might revert to very old settings so be careful while choosing!

It will restore your system settings only and will not affect your files.

Even after you restore the system you will need to perform the next steps in order to completely remove the virus.

Step 2:

Check your hosts file for any suspicious IPs that could be inserted by the virus.

Press and hold Windows () key and click R key.

Enter the following in the field:

notepad %windir%/system32/Drivers/etc/hosts

Click OK.

If you see any suspicious IP addresses in the opened file that are not marked by a “#” in front of them, simply delete the entries and save the file.

Step 3:

Clean up your registry entries.

Press and hold Windows () key and click R key.

Enter the following in the field:


Click OK.

Search for any virus entries by pressing keyboard buttons CTRL + F and entering the virus name, for example:


Click Find Next.

Delete any registry entries associated with the virus.

Use the folder tree on the left and navigate to the following locations and remove registry entries if any of them are left:

  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “[random].exe”
  • HKEY_CLASSES_ROOT\CLSID\[ BrowserMe] HKEY_CURRENT_USER\Software\AppDataLow\Software\ BrowserMe
  • HKEY_CURRENT_USER\Software\ BrowserMe character
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ BrowserMe
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\BrowserHelperObjects\[random numbers]

Step 4:

Remove files created by the virus. Simply go to the following file locations and delete them one by one:

  • C:\Program Files\Common Files\System\BrowserMe .exe
  • C:\Program Files (x86)\BrowserMe\
  • C:\ProgramData\TEMP\BrowserMe
  • C:\Users\Default\AppData\Local\Temp\BrowserMe.exe
  • C:\Users\your user account\AppData\Roaming\BrowserMe
  • C:\Windows\System32\drivers\BrowserMe.sys

Step 5:

Clean up Windows temporary files as the Trojan may operate from this folder.

Removing all temporary files is completely safe for your computer.

Hold Windows () key and click R key.

Enter the following in the field:


Click OK.

Simply select all files and folders displayed in the temporary files directory and delete them permanently by simultaneously pressing CTRL + A and then SHIFT + DELETE.

Step 6:

Clean up your DNS.

Press and hold Windows () key and click R key.

Enter the following in the field:


Click OK.

It will open your current network adapters list.

Right-click on the one you currently use (unused usually have a red X near them while the active one is usually green).

Choose Properties.

Click on Internet Protocol Version 4 (ICP/IP) (make sure the checkbox is checked near it).

Click Properties.

First, select Obtain DNS server automatically.

Then click Advanced… and go to DNS tab in the newly opened window.

Remove everything from the DNS server addresses, in order of use.

Step 7:

Clean up your Google Chrome browser.

 Google Chrome:

Launch the browser and select More Tools, then click Extensions.

Check for any suspicious extensions.

Click Remove From Chrome for each unwanted or suspicious extension (the trashcan icon on the right).

Go to Settings.

Scroll to the very bottom of the settings page and click Show advanced settings…

Scroll to the very bottom again and click Reset settings.

Click Reset.

The virus should now be removed from your system. However, we still strongly recommend scanning the machine with the tool provided above since there might be other infections. You also need to secure your computer in order to avoid potential future infections.

Leave a Reply

Your email address will not be published. Required fields are marked *

Begin typing your search above and press return to search. Press Esc to cancel.