Click on screenshot to zoom
Danger level 7
Type: Browser Hijackers
Common infection symptoms:
  • Hijacks homepage
  • Changes default search engine is a new search website that is indeed the identical clone of,, and dozens of other browser hijackers that belong to the so-called ELEX family. It is important for you to be aware of the potential risks you may take by keeping any of these hijackers on your system. This infection can affect all your most popular browsers, including Google Chrome, Mozilla Firefox, and Internet Explorer. Since it can change your homepage settings with or without your knowledge, you will be exposed to this search engine page every time you start up your browsers. The problem is that you may not even realize that this is a new search engine because it looks totally plain and authentic. However, our research and tests indicate that this hijacker can display modified search results that could contain unreliable content and cause you potential security-related threats. We recommend that you remove as soon as possible.

Although at first sight this search page looks all fine and legitimate, there is no official or promotional webpage where it is available for download in an application format. This is quite suspicious in fact and makes you wonder how it is possible that you have it on board then. Well, the answer is quite worrisome because we have found this browser hijacker spreading in free software bundles. As you may know, there are a lot of file-sharing websites and even legitimate free software developers who promote bundled versions of free programs. Unfortunately, cyber crooks misuse these packages to spread all kinds of malicious programs, including browser hijackers, Trojans, backdoors, fake alerts, adware programs as well as potentially unwanted applications. What most users do not realize is that they should cancel the installation of such a bundle when they are not sure about the real contents.

It is possible that the installer program does not reveal any information about what it is installing in addition to the main free program. But usually, you can actually find such information if you choose the advanced or custom option. It such option is not offered, it is likely that you will see the browser setting changes notification in one of the installation wizard windows along with the list of other programs it is installing. All you need to do is untick the assigned checkboxes. However, sometimes only the license agreement discloses such information, which is greatly ignored by most users. If you possibly downloaded and installed such a package, you should run a malware scanner right after you delete from your system.

You can easily infect your machine with such a malicious bundle when you click on corrupt third-party advertisements. This can happen when you are viewing suspicious websites hosting several third-party contents, when you try to download free files from the wrong websites, and when your computer is infected. You should always use official pages whenever you want to install updates or free software. It also pays to refrain from clicking on random third-party ads, which might drop infections or take you to other malicious pages. In any case, we suggest that you delete because it is quite likely that it brought other malware infections along, too.

This browser hijacker looks exactly like its predecessors and works the same way, too. It offers you four options in the top-left corner on a black, fake toolbar: Web, Images, Videos, and News. These are obviously main categories to choose from to help filter your results more effectively. It is possible that this hijacker is also capable of displaying a third-party ad below the search field like we have seen in previous cases but right now we cannot say that it does. We do not recommend that you use this search website for searching the web because you could be exposed to questionable content. This hijacker may promote potentially unreliable third-parties through advertisements and links it includes with the search results. Even though you will find yourself on a Yahoo search results page every time you run a search, this does not mean that you can trust the content there. These ELEX hijackers use reputable search engines like Yahoo to mislead you into believing that you can trust the ads and links. However, if you click on one that comes from schemers, you could land on a malicious page or drop other infections. This is why we advise you to remove as soon as you can.

If you are ready to act, you can use our instructions below that will help you with manual removal. It is possible though that you do not feel like going through these steps yourself. You still have an option. You can download and install a professional anti-malware program, such as SpyHunter, or any other that you consider reliable. Be aware that the web is filled with rogue security programs that are totally or partially useless; yet, they can put your system security at risk more than they can eliminate the real threat factors. We also believe that by regularly updating your drivers and programs, you can avoid certain types of malicious cyber attacks.

How to remove from your browsers

Google Chrome

  1. Press Win+E to launch your File Explorer.
  2. Locate the “C:\Users\[User name]\AppData\Local\Google\Chrome\User Data\Default” folder.
  3. Delete these files: Preferences, Secure Preferences, and Web Data

Mozilla Firefox

  1. Press Win+E to launch your File Explorer.
  2. Locate the “C:\Users\[User name]\AppData\Roaming\Mozilla\Firefox\Profiles\[Mozilla User ID]” folder.
  3. Open the prefs.js file in Notepad.
  4. Overwrite the user_pref("browser.startup.homepage", ""); string with a homepage URL address you like.
  5. Save the changes and close the file.

Internet Explorer

  1. Press Win+R and enter regedit. Click OK.
  2. Locate the HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page registry key.
  3. Modify the value data of “” with a homepage URL address you like.
  4. Exit your editor.
Download Spyware Removal Tool to Remove*
  • Quick & tested solution for removal.
  • 100% Free Scan for Windows

Post comment — WE NEED YOUR OPINION!

Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.