FidemsLive is a potentially unwanted program (PUP) that presents itself as a legitimate media player or streaming tool but operates as advertising-supported software with intrusive behavior. Once installed, this application generates aggressive advertising campaigns, redirects browser traffic, and tracks user browsing activity without meaningful consent. While not classified as traditional malware like ransomware or trojans, FidemsLive undermines system performance and user privacy through persistent ad injections and data collection practices that most users would find objectionable if they understood what was happening behind the scenes.
The program typically arrives bundled with freeware downloads or disguised as a software update, installing itself alongside the application users actually wanted. Once active, FidemsLive modifies browser settings, installs helper components across multiple system locations, and establishes persistence mechanisms that make it difficult to remove through normal uninstallation procedures. Users notice symptoms like unexpected pop-up advertisements, redirected search results, new browser toolbars they didn't install, and overall sluggish browsing performance.
Threat Profile
| Attribute | Details |
|---|---|
| Threat Type | Potentially Unwanted Program (PUP), Adware |
| Alternative Names | Fidems Live, FidemsLive Player, Ads by FidemsLive |
| Affected Platforms | Windows 7/8/8.1/10/11 (32-bit and 64-bit) |
| Distribution Method | Software bundling, fake updates, deceptive download pages |
| Primary Behavior | Ad injection, browser hijacking, tracking cookie installation, homepage modification |
| Persistence Mechanisms | Browser extensions, scheduled tasks, registry Run keys, Windows services (variants) |
| Data Collection | Browsing history, search queries, clicked links, IP address, device identifiers |
| Network Activity | Connections to advertising networks, affiliate tracking domains, analytics servers |
| Typical File Locations | %PROGRAMFILES%\FidemsLive\, %LOCALAPPDATA%\FidemsLive\, browser extension folders |
| Common Symptoms | Excessive pop-ups, browser slowdown, redirected searches, unexpected toolbars |
| Removal Difficulty | Moderate (requires browser cleanup and registry editing for complete removal) |
| Associated Risks | Privacy invasion, exposure to malicious ads, system slowdown, potential secondary infections |
How It Spreads
FidemsLive almost never arrives through direct, intentional installation. The developers behind this PUP rely on deceptive distribution tactics that exploit user inattention during software installations. The most common vector involves software bundling, where FidemsLive is packaged inside the installer for legitimate freeware applications. When users rush through installation wizards using the "Next" button without reading disclosure statements, they inadvertently agree to install FidemsLive alongside the program they actually wanted. These bundled installers frequently use pre-checked boxes or confusing language that makes the additional software seem like a required component.
Another significant distribution method involves fake update notifications. Users encounter web pages claiming their media player, Flash Player, or Java installation is outdated and needs immediate updating. Clicking the "Update Now" button downloads an installer that contains FidemsLive rather than any legitimate update. These fake update pages are designed to look convincing, sometimes mimicking the appearance of genuine software vendor sites or using urgent warning messages to pressure users into quick action without verification.
Common distribution channels for FidemsLive include:
- Freeware download sites that repackage popular applications with bundled adware in their custom installers
- Fake software update pages masquerading as Flash Player, Java, or media codec update prompts
- Malicious advertising (malvertising) on legitimate websites, where clicking an ad triggers a download
- Torrent and file-sharing networks where installers are modified to include unwanted additional software
- Compromised or low-quality browser extensions that install helper components including FidemsLive
- Email attachments disguised as invoices or documents that execute installers when opened
- Drive-by downloads from compromised websites that exploit browser vulnerabilities (less common but possible)
What It Does On Your Machine
Once installed, FidemsLive establishes multiple presence points across your system to ensure it survives basic removal attempts and continues generating advertising revenue for its operators. The installation process typically creates a program folder containing several executable files, configuration data, and advertising content libraries. These components work together to inject advertisements into your browsing experience regardless of which browser you use—Chrome, Firefox, Edge, or others all become targets for the adware's modifications.
The most visible symptom users notice is the sudden appearance of advertisements in places where ads shouldn't exist. FidemsLive injects banner ads into web pages you visit, generates pop-up windows with sponsored content, displays in-text ads where random words become hyperlinks, and creates overlay advertisements that cover legitimate page content. These ads aren't coming from the websites you're visiting—they're being inserted locally by the FidemsLive components running on your machine. The advertisements typically promote questionable products, additional PUPs, online gambling sites, adult content, or other offers designed to generate affiliate commissions when clicked.
Beyond visible advertising, FidemsLive engages in extensive data collection. The software monitors your browsing activity, recording which websites you visit, what search terms you enter, which links you click, and how long you spend on various pages. This data gets transmitted to remote servers where it's used to build an advertising profile about your interests and habits. While the developers claim this is "anonymous" data collection, the tracking cookies and device fingerprinting methods they employ can often be linked back to individual users. This collected data may also be sold to third-party advertising networks or data brokers, further compromising your privacy.
FidemsLive also modifies browser configurations to maintain control and resist removal. Common modifications include changing your default homepage to a sponsored search page, altering your default search engine to one that injects additional ads into search results, installing browser extensions without permission, and modifying browser shortcut targets to load specific pages on startup. Some variants create scheduled tasks that periodically check whether the adware components are still active and reinstall them if they've been removed—a persistence tactic that frustrates users attempting manual cleanup.
Manual Removal — Step by Step
Disconnect and Document Symptoms
Before making any changes, disconnect your computer from the internet by unplugging the ethernet cable or disabling Wi-Fi. This prevents FidemsLive from communicating with its command servers or downloading additional components during removal. Take screenshots of any suspicious pop-ups or browser behavior you're experiencing—these can be helpful if you need professional assistance later. Write down any programs you recently installed before the symptoms began, as you may need to remove those as well.
Boot Into Safe Mode with Networking
Restart your computer and boot into Safe Mode to prevent FidemsLive components from loading automatically. On Windows 10/11, hold Shift while clicking Restart, then navigate to Troubleshoot > Advanced Options > Startup Settings > Restart, and press F5 for Safe Mode with Networking. On Windows 7/8, restart and press F8 repeatedly during boot to access the Advanced Boot Options menu. Safe Mode loads only essential system processes, making it harder for adware to interfere with removal efforts.
Uninstall FidemsLive Through Control Panel
Open Control Panel and navigate to Programs and Features (or Add/Remove Programs on older systems). Scroll through the installed programs list looking for "FidemsLive," "Fidems Live," "FidemsLive Player," or any recently installed programs you don't recognize, especially those installed around the time your problems began. Select the suspicious entry and click Uninstall. Be cautious during the uninstallation process—some PUPs display misleading prompts trying to convince you to keep the software. Proceed with complete removal regardless of what the uninstaller claims.
Remove FidemsLive Browser Extensions
Open each web browser you use and remove any extensions or add-ons related to FidemsLive. In Chrome, go to Menu > More Tools > Extensions, then remove anything suspicious. In Firefox, click Menu > Add-ons and Themes > Extensions. In Edge, go to Menu > Extensions. Look for any extensions you didn't intentionally install, especially those with generic names, no descriptions, or recent installation dates. Remove anything associated with FidemsLive plus any other questionable extensions while you're there.
Reset Browser Settings
FidemsLive frequently modifies browser homepages, search engines, and startup pages. In Chrome, go to Settings > Reset Settings > Restore settings to their original defaults. In Firefox, type about:support in the address bar and click "Refresh Firefox." In Edge, go to Settings > Reset Settings > Restore settings to their default values. This step removes unwanted modifications while preserving your bookmarks and saved passwords. After resetting, manually verify that your homepage and default search engine are set to your preferred choices.
Delete Leftover Files and Folders
Open File Explorer and navigate to C:\Program Files\ and C:\Program Files (x86)\ to check for any remaining FidemsLive folders. Delete any you find. Then press Windows+R, type %appdata% and press Enter. Look for FidemsLive folders and delete them. Repeat this process with %localappdata% and %programdata%. Check your Desktop and Downloads folders for any suspicious installers or executables you may have recently downloaded. Empty your Recycle Bin when finished to permanently remove these files.
Clean Registry Entries
Press Windows+R, type regedit, and press Enter to open Registry Editor (accept the UAC prompt). Navigate to HKEY_LOCAL_MACHINE\Software\ and HKEY_CURRENT_USER\Software\ and look for any FidemsLive keys—right-click and delete them. Then check HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run for any FidemsLive startup entries and delete those as well. Search the entire registry for "FidemsLive" using Edit > Find, and delete any additional references you discover. Be careful to only delete keys specifically related to FidemsLive—modifying the wrong registry entries can cause system instability.
Check Scheduled Tasks
Press Windows+R, type taskschd.msc, and press Enter to open Task Scheduler. Click on Task Scheduler Library and review the list of scheduled tasks. Look for anything related to FidemsLive or any tasks with suspicious names you don't recognize, particularly those set to run at user login or at regular intervals. Right-click suspicious tasks and select Delete. Pay special attention to tasks located in folders trying to mimic legitimate Microsoft tasks—adware often hides there to avoid detection.
Scan with Reputable Anti-Malware Software
Download and install a reputable anti-malware program such as Malwarebytes (free version is sufficient). Run a full system scan to catch any remnants of FidemsLive or related PUPs you may have missed during manual removal. These tools maintain updated databases of adware signatures and can detect variants and associated threats more reliably than manual methods alone. Allow the scanner to quarantine or remove anything it finds, then run a second scan to confirm your system is clean.
Restart Normally and Verify Removal
Restart your computer normally (not in Safe Mode) and reconnect to the internet. Open your web browsers and verify that the aggressive advertising has stopped, your homepage is correct, and search results aren't being redirected. Visit several different websites to confirm that injected ads are no longer appearing. Monitor system performance over the next few days—if pop-ups return or you notice other suspicious behavior, additional components may still be present and professional removal may be necessary.
Prevention
- Always choose Custom or Advanced installation options when installing free software. Never use Express or Recommended installation paths, which pre-select bundled software. Read each screen carefully and uncheck any boxes for additional programs, toolbars, or offers you don't want. If an installer makes this difficult or confusing, cancel the installation entirely and find the software from a more reputable source.
- Download software only from official vendor websites rather than third-party download portals. Sites like Download.com, Softonic, and similar aggregators often repackage installers with bundled adware. When you need software, go directly to the developer's website. For open-source applications, use trusted sources like GitHub or SourceForge, and verify file checksums when provided.
- Keep your system and software updated through legitimate update mechanisms. Enable automatic updates for Windows and your applications when possible. When you see update notifications, verify they're genuine by opening the application directly rather than clicking the notification. No legitimate software vendor will require you to download a separate update installer from a random website.
- Install and maintain reputable security software with real-time protection enabled. Windows Defender (built into Windows 10/11) provides adequate baseline protection when kept updated. Consider supplementing it with Malwarebytes or another anti-malware program. These tools can block PUP installations before they occur, catching threats your manual vigilance might miss.
- Use an ad blocker and exercise caution with browser extensions. Ad blockers like uBlock Origin prevent exposure to malicious advertisements that might trigger unwanted downloads. Only install browser extensions from official stores (Chrome Web Store, Firefox Add-ons), and review the permissions each extension requests. If a simple utility requests access to "read and change all your data on all websites," it's probably asking for too much.
- Be skeptical of urgent warnings and too-good offers you encounter while browsing. Legitimate companies don't detect problems with your computer through web pages. Pop-ups claiming your system is infected, your Flash Player is outdated, or you've won a prize are almost always attempts to trick you into installing unwanted software. Close these warnings and never call phone numbers displayed in browser pop-ups.
- Maintain regular backups of important data to external drives or cloud services not continuously connected to your computer. While FidemsLive isn't destructive like ransomware, having backups provides insurance if you need to perform a clean Windows reinstall to fully eliminate a persistent infection. A proper backup strategy means you're never forced to tolerate adware simply because removal seems too risky.
- Create a standard user account for daily activities and reserve your administrator account for software installation and system changes. When malware attempts to install itself, it often needs administrator privileges to establish deep persistence. Running as a standard user means you'll see permission prompts for suspicious installations rather than having them proceed automatically. This simple change blocks many PUP infections before they start.
When Computer Repair Roswell removes FidemsLive or any other malware from your system, we stand behind our work with a 90-day reinfection warranty. If the same threat returns within three months through no fault of your own, we'll clean it again at no additional charge. We don't just delete files—we identify how the infection arrived, close those security gaps, and ensure your system is properly hardened against reinfection. This warranty reflects our confidence in thorough, professional remediation that addresses root causes rather than just symptoms.
Bring It In
Manual removal can handle straightforward FidemsLive infections, but some variants establish deeper persistence or arrive bundled with additional threats that complicate cleanup. If you've followed the removal steps above and still experience pop-ups, redirects, or suspicious behavior, professional intervention will save you time and frustration. At Computer Repair Roswell, we see dozens of adware cases every month and have developed systematic approaches that reliably eliminate these infections while preserving your data and settings. We use professional-grade tools and techniques beyond what's available to home users, and we verify complete removal through multiple testing methods.
Located right here in Roswell at 1382 Hembree Road (Suite 100), we offer same-day service for malware removal in most cases. Bring your infected computer to our shop—no appointment necessary during business hours—and we'll provide a free diagnostic to identify exactly what you're dealing with and quote a flat rate for complete remediation. We'll explain what happened, how to prevent it in the future, and get your system back to normal operation typically within 24 hours. Call us at (770) 637-1435 if you have questions or want to discuss your specific situation. We're here to help Roswell residents and business owners get back to productive, secure computing without the ongoing annoyance and privacy risks that come with adware infections like FidemsLive.