A new browser hijacking software associated with the domain Yeabests(.)cc has been spotted out in the wild. The software heavily modifies the settings of the web browser of affected PCs, and it may install other PUPs (potentially unwanted programs) like itself, collect user information and display advertisements. Since the Yeabests(.)cc browser hijacker may cause browser redirects, and link to third-party websites of dangerous character, users who have been affected are strongly advised to remove this indirectly dangerous software from their PCs.
|Short Description||The software may perform different activities which are not in the user’s best interest.|
|Symptoms||The user may witness different types of advertisements on his computer. PC slow-downs, freezes and even crash.|
|Distribution Method||Via PUPs, installed by bundling or by visiting a suspicious third-party site that is advertising it.|
|Detection Tool||Download Malware Removal Tool, to See If Your System Has Been Affected by Yeabests(.)cc Hijacker|
|User Experience||Join our forum to discuss Yeabests(.)cc Hijacker.|
Yeabests(.)cc Hijacker – Distribution
To spread out into the open, this hijacker may be advertised as a free extra in the setups of other programs as a helpful tool. From the screenshots of the search engine, it appears to assist in having the most widely used websites at a click of the user(see picture below), similar to bookmarks and it may be advertised In one of the installation steps:
Such free programs can be found on various software providing websites. Such websites use the abovementioned bundling which may include Yeabests(.)cc browser hijacker in one of the installation steps of the installer.
It is advisable not be fooled by this app because the software may not be as useful as you might think. It significantly slows down the user PC and may redirect to malicious websites.
Yeabests(.)cc Browser Hijacker – How Does It Work
Once installed on your computer, Yeabests(.)cc hijacker may add itself as a browser extension by modifying the following registry keys of the most widely used web browsers:
→ HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome
After doing so, the software may run active processes in Windows Task Manager that have escalated privileges, and it may request the following permissions from the browser of the user:
- Modify and manage browsing history.
- Track user clicks.
- Add or manage browser extensions.
- Manage browsing content.
- Manage browsing content.
- Collect other information.
Not only this, but when the search engine itself was analyzed, we have established that it does not use HTTPs encryption. Along with that, it uses several types of cookies that are its own and other cookies from third-party websites:
Besides the lack of protection while searching, the site also displays ad-supported search results and results provided by Google – all indicators that it is a hoax search engine:
- Collect personal information that the user enters.
- Obtain the browsing history, online clicks and other user information from the user that allows it to display its adds more effectively.
- Redirect the user to third-party websites that may either phish for financial or personal information, scam the user or infect the user’s PC with malware.
Remove Yeabests(.)cc Browser Hijacker
To get rid of this dangerous software from your computer, we strongly advise you to follow the step-by-step instructions below. They are methodologically designed to help you manually locate and remove this software from your web browser and your computer.
Since this browser hijacker may modify the registry entries on your computer, you may want to fix your registry entries. This can happen if you follow the instructions in the following article – Fix Windows Registry Errors Caused by Malware
For fastest and most effective removal solution, experts strongly advise using an anti-malware software. It will not only remove this and other malware and adware on your computer, but it will protect you against future intrusions as well.