Yeabests.cc
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Popularity Rank: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Popularity Rank: | 20,467 |
| Threat Level: | 50 % (Medium) |
| Infected Computers: | 14,326 |
| First Seen: | March 8, 2016 |
| Last Seen: | December 6, 2025 |
| OS(es) Affected: | Windows |
The Yeabests.cc is associated with a browser hijacker that you may install as a plug-in under the name of TopYea. The Yeabests.cc site hosts a custom build of the Google search engine that is customized to provide advertisements from the Chinese Umeng.com content delivery platform. The browser hijacking application linked to Yeabests.cc resembles the performance of adware such as DonutQuotes and NiceAndFun, and may be used to drive Web traffic to advertisement content and generate pay-per-click revenue for its creators. You may have installed the Yeabests.cc browser hijacker by handling a freeware setup file with the 'Express' or 'Typical' option. You may wish to check your list of plug-ins for an app called TopYea. The Yeabests.cc browser hijacker may download marketing materials like leaflets and promotional images to show advertisements while your browser is closed. You may see notifications from Yeabests.cc in the bottom right corner of your screen. The Yeabests.cc browser hijacker may edit the configuration of your browser to reroute all of your search quarries to Yeabests.cc and provide related commercial content.
You may find useful links to Amazon, Facebook, Etsy and Zillow at Yeabests.cc, but you are not advised to click on them. Several online scanners like Websense ThreatSeeker and Sucuiri have found suspicious connections to blacklisted sites and phishing pages. Security experts note that the Yeabests.cc browser hijacker may reroute users to cloned online banking portals that are under the control of crooks. You should be careful not to input your log-in credentials at such sites because you risk losing money and becoming a victim of online fraud. The TopTea plug-in may use the logo of Google, but is not associated with Google Inc., and you will not benefit from the security feature that come with the Google Safe Browsing initiative. The Yeabests.cc browser hijacker may have installed its files in the hidden AppData folder, and you may need to use a reliable anti-spyware instrument to clean your PC.
Table of Contents
SpyHunter Detects & Remove Yeabests.cc
File System Details
| # | File Name | MD5 |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|---|
| 1. | Yeabests.cc.exe | a718bf376567abd3e7de06f31b036405 | 373 |
| 2. | hp.exe | e432f99f93d63d8ec0f64708231ed3a6 | 133 |
| 3. | cessrs.exe | 34df353ba85b9671576987fe13e86c62 | 3 |
| 4. | LightGate.exe | 60bae0f18533a233432d8da5319dd693 | 3 |
| 5. | msiql.exe | 30077d8ee62ebb530fa584ae8020358c | 2 |
| 6. | homepage.exe | 13e831c1f47620dda818e98d1abac799 | 1 |
| 7. | 07ed8a858def20e7ef9314003a47f705c2a85db79942a0a99d180a1f23fb8723.exe | b9359fd1f6dbe5e44a676eb0183d5901 | 0 |
| 8. | 3e8324c4cd0ec3d97ad586fdce219e1ae428308dc82cfc6ec8c62f6a23dd25eb.exe | ecd49e732010da3831bd31004ab30e80 | 0 |
| 9. | 40a4c50b67eb037755cbee5b14a230cc83f18195633ad718b7de308bee79d9e3.exe | 20501f350fa37cecf2667503541bcf21 | 0 |
| 10. | 54b4f0f6301d77937dc4f88503dc12201479507370cf0f72e82ce19ce5e8c334.exe | 50adff8c6902cf7863178b038f57d5a1 | 0 |
| 11. | 61d00690e21994c75a242b64c6b8db514cd7e3bfcd14a20d9dd53d722b3b18a5.exe | 5c21f323dbb2a7d4309276ec58acb14b | 0 |
| 12. | 85fc5f7619cf79ff664b886e5acf4a1805adfed3ddcdeef8b7d3bc832cbce53a.exe | ef7af5f3b0e6cb526287e554b01db2da | 0 |
| 13. | b066bc12f1f68ceb4268cf9564697433c2fc789fde367155c6f338b48e7afb6c.exe | cf8d40cf6278a3c82b22418623526c6d | 0 |
| 14. | dc890b17776791d0c09ef9efa7d0ee4274cdd286b16aae97b62aa578531a1064.exe | 88e11dbd05f7e2feadfa8722cc985b0e | 0 |
| 15. | e4bbf84c229ccdc4edc42d22fe3e48028be1b57ccfd1ed63e8ed09f09de4d454.exe | 25980ac4f5cdd9895e05dd0a592b1724 | 0 |
| 16. | e8cfe9c07245c2b81c7debeb430fd755b2b75218bbf4cbf733db9be8c29036a0.exe | e43f1cb72f4fa55525bfe1d9e3395db9 | 0 |
| 17. | ea6648a1f3f2e8e592efad7943b03497587ac5f618eff238a9f6d136af1ecbba.exe | 2ce52da4d3c5ad5509050b1ec098b2d4 | 0 |
| 18. | eada5644fe01c9b413a5023165dbd4860af3945425719ab90f10f3f2d2ee8182.exe | 9b5ca5dd76a16ea25c51bb69e3b1bd1d | 0 |
| 19. | f17a116da903e645902faec6771af61d55578d6c341dcc3a393064f1f2bf6c4e.exe | 62fa00bd0a18a6068f21c85b074f4a98 | 0 |
Registry Details
Directories
Yeabests.cc may create the following directory or directories:
| %LOCALAPPDATA%\kemgadeojglibflomicgnfeopkdfflnw |
URLs
Yeabests.cc may call the following URLs:
| yeabests.cc |
