Yeabests.cc

By CagedTech in Browser Hijackers

Threat Scorecard

Ranking: 10,006
Threat Level: 50 % (Medium)
Infected Computers: 14,207
First Seen: March 8, 2016
Last Seen: March 8, 2024
OS(es) Affected: Windows

The Yeabests.cc is associated with a browser hijacker that you may install as a plug-in under the name of TopYea. The Yeabests.cc site hosts a custom build of the Google search engine that is customized to provide advertisements from the Chinese Umeng.com content delivery platform. The browser hijacking application linked to Yeabests.cc resembles the performance of adware such as DonutQuotes and NiceAndFun, and may be used to drive Web traffic to advertisement content and generate pay-per-click revenue for its creators. You may have installed the Yeabests.cc browser hijacker by handling a freeware setup file with the 'Express' or 'Typical' option. You may wish to check your list of plug-ins for an app called TopYea. The Yeabests.cc browser hijacker may download marketing materials like leaflets and promotional images to show advertisements while your browser is closed. You may see notifications from Yeabests.cc in the bottom right corner of your screen. The Yeabests.cc browser hijacker may edit the configuration of your browser to reroute all of your search quarries to Yeabests.cc and provide related commercial content.

You may find useful links to Amazon, Facebook, Etsy and Zillow at Yeabests.cc, but you are not advised to click on them. Several online scanners like Websense ThreatSeeker and Sucuiri have found suspicious connections to blacklisted sites and phishing pages. Security experts note that the Yeabests.cc browser hijacker may reroute users to cloned online banking portals that are under the control of crooks. You should be careful not to input your log-in credentials at such sites because you risk losing money and becoming a victim of online fraud. The TopTea plug-in may use the logo of Google, but is not associated with Google Inc., and you will not benefit from the security feature that come with the Google Safe Browsing initiative. The Yeabests.cc browser hijacker may have installed its files in the hidden AppData folder, and you may need to use a reliable anti-spyware instrument to clean your PC.

SpyHunter Detects & Remove Yeabests.cc

File System Details

Yeabests.cc may create the following file(s):
# File Name MD5 Detections
1. Yeabests.cc.exe a718bf376567abd3e7de06f31b036405 306
2. hp.exe e432f99f93d63d8ec0f64708231ed3a6 129
3. msiql.exe bcabb5b8f8ef8a9e921c402702d5af95 96
4. msiql.exe 58b5145e78304dc6e3ccdd704310bd86 46
5. msiql.exe ad0149b80151b56d89f0ca4adcfe51c3 27
6. msiql.exe ef8ad770f8f8ad567d430d063ef8fcef 9
7. msiql.exe 66433731b66ae516e36d85162ddb3a3c 8
8. msiql.exe 3a22282278f7ba277b422bba695b037c 6
9. msiql.exe a1a3a4398ce422a28cee69eb952aeda8 5
10. msiql.exe b371ad26fbe4693357d3a42cc5efef2c 3
11. msiql.exe 23d1d316de4805ad0b9b7ed9a78ac916 2
12. msiql.exe 6a363dbf2b27dcccf47adf7fab1e0761 2
13. msiql.exe ca0db5449de59526aaafbedbdaf9c18f 2
14. msiql.exe b95349a8357c406ed78d04b64bc3c1c6 2
15. msiql.exe 30077d8ee62ebb530fa584ae8020358c 2
16. 07ed8a858def20e7ef9314003a47f705c2a85db79942a0a99d180a1f23fb8723.exe b9359fd1f6dbe5e44a676eb0183d5901 0
17. 3e8324c4cd0ec3d97ad586fdce219e1ae428308dc82cfc6ec8c62f6a23dd25eb.exe ecd49e732010da3831bd31004ab30e80 0
18. 40a4c50b67eb037755cbee5b14a230cc83f18195633ad718b7de308bee79d9e3.exe 20501f350fa37cecf2667503541bcf21 0
19. 54b4f0f6301d77937dc4f88503dc12201479507370cf0f72e82ce19ce5e8c334.exe 50adff8c6902cf7863178b038f57d5a1 0
20. 61d00690e21994c75a242b64c6b8db514cd7e3bfcd14a20d9dd53d722b3b18a5.exe 5c21f323dbb2a7d4309276ec58acb14b 0
21. 85fc5f7619cf79ff664b886e5acf4a1805adfed3ddcdeef8b7d3bc832cbce53a.exe ef7af5f3b0e6cb526287e554b01db2da 0
22. b066bc12f1f68ceb4268cf9564697433c2fc789fde367155c6f338b48e7afb6c.exe cf8d40cf6278a3c82b22418623526c6d 0
23. dc890b17776791d0c09ef9efa7d0ee4274cdd286b16aae97b62aa578531a1064.exe 88e11dbd05f7e2feadfa8722cc985b0e 0
24. e4bbf84c229ccdc4edc42d22fe3e48028be1b57ccfd1ed63e8ed09f09de4d454.exe 25980ac4f5cdd9895e05dd0a592b1724 0
25. e8cfe9c07245c2b81c7debeb430fd755b2b75218bbf4cbf733db9be8c29036a0.exe e43f1cb72f4fa55525bfe1d9e3395db9 0
26. ea6648a1f3f2e8e592efad7943b03497587ac5f618eff238a9f6d136af1ecbba.exe 2ce52da4d3c5ad5509050b1ec098b2d4 0
27. eada5644fe01c9b413a5023165dbd4860af3945425719ab90f10f3f2d2ee8182.exe 9b5ca5dd76a16ea25c51bb69e3b1bd1d 0
28. f17a116da903e645902faec6771af61d55578d6c341dcc3a393064f1f2bf6c4e.exe 62fa00bd0a18a6068f21c85b074f4a98 0
More files

Registry Details

Yeabests.cc may create the following registry entry or registry entries:
File name without path
Yeabeats Browser.lnk
yeabests[1].xml
Software\Microsoft\Internet Explorer\DOMStorage\yeabests.cc

Directories

Yeabests.cc may create the following directory or directories:

%LOCALAPPDATA%\kemgadeojglibflomicgnfeopkdfflnw

Cookies

The following cookies were found:

yeabests.cc

URLs

Yeabests.cc may call the following URLs:

yeabests.cc
yeabests.top

Trending

Most Viewed

Loading...