Yeabests.cc Removal Guide

We at 411-spyware.com want to inform you about a browser hijacker called Yeabests.cc. This hijacker has been around for quite some time now, but it was only recently that security analysts have picked it up since it was under the radar. We strongly recommend that you remove this hijacker because it can get your computer infected with malicious software that can wreak havoc on it. This hijacker is very intrusive because the modifications that can be made to your system on the Windows Registry level will set Yeabests.cc as your browser’s default homepage each time you restart your web browser. All things considered, this hijacker is up to no good and the purpose of performing the malicious actions is generating advertising revenue for its developers and their clients/partners. For more information, please read this whole description.

Our research has revealed that programmers based in China developed this browser hijacker, and, these same developers are thought to have also developed YeaPlayer, a potentially unwanted program that you can learn more about on our website. We have received unconfirmed information that this hijacker is being distributed using Trojans that inject it into your system. This is rather odd and indicates a possible shift from distributing browser hijackers via bundled software to Trojan-distributed hijackers. However, this remains to be seen. In any case, we have also received conclusive information that this browser hijacker is very popular in Brazil, but can also be encountered in Russia, Japan, Indonesia, and India. We do not see a deliberate effort to disseminate this infection in the said countries, but our initial assumption is that most infections occur in countries where there are more users in general.

When this mysterious Trojan drops Yeabests.cc into your browser, it becomes its main homepage/new tab page. Our research has shown that this hijacker is compatible with Internet Explorer, Firefox, and Chrome. Note that it modifies your browser’s settings without your knowledge or consent so you probably do not want it on your computer. However, if Yeabests.cc has been set as the default homepage, then it is impossible to delete it by simply going to the browser settings and entering a new homepage address. The Trojan it comes with adds a registry key at HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\ or HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ which reopens the homepage each time you boot up your computer.

Nevertheless, you can use Yeabests.cc as a search engine as it has a search bar, but the twist here is that it redirects all of the search queries to Google Custom Search. This means that this hijacker’s developers can modify the search results to include their promoted links and ads which are very dangerous indeed. This browser hijacker can get your computer infected with more malware which can be extremely malicious and wreak havoc on your computer. For example, your PC might become infected with ransomware which will encrypt, and thus, corrupt your personal files and demand that you pay a ransom for a decryption key that would fix everything. Nevertheless, in most cases browser hijackers, such as this one are prone to promoting potentially unwanted programs and adware which in most cases is relatively harmless. However, in any event, it poses a certain amount of danger to your computer’s security which must not be overlooked.

In conclusion, Yeabests.cc is a browser hijacker that poses as a legitimate search engine, hijacks your browser’s homepage and includes promotional links in its search results. We are of the opinion that those promotional links can come from bad sources and in the worst case scenario infect your PC with dangerous malware. For this reason, we urge you to act swiftly and remove Yeabests.cc using our instructions. Alternatively, in the event that manual removal fails, you may use our recommended program called SpyHunter. In any case, we recommend that you scan your PC for the Trojan that this hijacker is known to come with it.

Reset browser settings

Mozilla Firefox

1. Press Alt+H and click Troubleshooting Information.
2. Click Refresh Firefox.
3. In the box, click Refresh Firefox again and click Finish.

Google Chrome

1. Press Alt+F and open Settings.
2. Select Show advanced settings.
3. Click Reset settings and click Reset again.

Microsoft Internet Explorer

1. Press Alt+T and click Internet Options.
2. Select the Advanced tab and click the Reset button.
3. Tick the checkbox.
4. Click Reset.
5. Then, click Close.

Delete registry keys

1. Simultaneously press Windows+R and type regedit.
2. Click OK.
3. Find and delete one of the following keys.

• HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HomePageHelper (64-bit operating system)
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HomePageHelper (32-bit operating system)

Fix the Target line

1. Right-click on the browser shortcut.
2. Select Properties.
3. Select Shortcut tab.
4. Delete Yeabests.cc’s URL in the Target line and click OK.