Yeadesktop.com

From the very outset, the moment when you visit Yeadesktop.com you can already tell that it is up to no good. Its main page is littered with region-specific advertisements that are legitimate for the most part, but you cannot trust this shady search engine to show you ads verified as safe. We have classified this search engine as a browser hijacker and suggest that you remove it because it will not improve your web browsing in any way. All it can do is show modified search results that can redirect you to all kinds of promoted websites. If you want to find out more about this hijacker, please read this short description.

Before we discuss the details of how Yeadesktop.com works, we want to go over its possible distribution methods first. As a browser hijacker, this search engine is bound to enter your PC using deceptive methods. You can get the application called 1.0.0.1 from its main website at http://down.yeadesktop{.}com/YeaDesk/yeadesktop2.exe. However, we do not recommend that you do because you might compromise your computer’s security. Nevertheless, that link is not the only channel used for distributing this browser hijackers and its accompanying application. We have received reports that the program 1.0.0.1 is bundled with malicious installers and other third-part applications and hosted on free software distributing websites. The installers are said to inject the application secretly and, in turn, it hijacks the browser.

We have found that Yeadesktop.com has two homepages: one at http://www.yeadesktop.com and the other is at http://yeadesktopbr.com. However, your anti-malware program or web browser might prevent you from visiting it. Nevertheless, in cases when you have no protection, interaction with this hijacker can lead to your computer and your personal privacy being jeopardized. Yeadesktop.com is compatible with web browsers such as Microsoft Internet Explorer, Google Chrome, and Mozilla Firefox. It is set to replace the homepage addresses of the said browsers. However, that is not all that it does. It also hijacks the target line of the browsers to prevent you from changing the homepage address via the options menu of a respective browser. It adds a WMI script that is set to hijack your browser and keep it hijacked.

Yeadesktop.com must have come from Russian developers as the ads on its main page promote Flash games with Russian names but the games are hosted on http://games.softgames.de. Yeadesktop.com is said to use Bing to present you with search results, but it redirects you to a shady search engine called S.popular123.com. Evidently, with all those redirections going on and confusion regarding what redirects to where we regard this search engine as a potential security threat since there is no telling what S.popular123.com might have in store for you.

In conclusion, Yeadesktop.com is one highly unreliable search engine that we have rightfully classified as a browser hijacker. Our analysis has revealed that this search engine can hijack your browser and its target line by injecting a program and injects script into your browser to override your settings. The malware developers want you to use this malicious search engine, and the reason is probably ads because this hijacker’s main page and search results presented by S.popular123.com are questionable. Therefore, to be on the safe side of things, we recommend that you remove this hijacker from your PC using our guide that will help you fix the target line. We also suggest scanning your PC with an anti-malware program to ensure that your PC is malware free.

Fix the Target line

1. Right-click the web browser’s shortcut.
2. Select Properties and open the Shortcut tab.
3. Erase http://www.yeadesktop.com/ from the Target line.
4. Erase --load-extension="C:\Users\user\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk" http://www.yeadesktop.com/ from the Target line if you use Chrome.
5. Click OK.

Remove malicious files manually

1. Simultaneously press Windows+E keys.
2. In the address box, Enter the following addresses and hit Enter.
   • %ALLUSERSPROFILE%\Start Menu\Programs
   • %APPDATA%\Microsoft\Windows\Start Menu\Programs
   • %USERPROFILE%\Microsoft\Windows\Start Menu\Programs
   • %ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs
   • %ALLUSERSPROFILE%\Application Data\Microsoft\Windows\Start Menu\Programs
   • %PROGRAMFILES(x86)%
   • %PROGRAMFILES%
3. Find a folder named YeaDesktop
4. Right-click it and click Remove.
5. Empty the Recycle Bin.