Yoga Search Extension

What is Yoga Search Extension?

If Yoga Search Extension invades your operating system, it immediately wreaks havoc, all in the hopes of making you use a modified Google Chrome browser. If Google Chrome is the browser you use, you might think that something has hijacked it, but that is not the case. In reality, a shortcut to your Google Chrome browser is created, and the Target is modified to open the unreliable extension, which our Anti-Spyware-101.com research team classifies as a potentially unwanted program (PUP). The only purpose behind this add-on is to expose you to unreliable search results that are shown after redirecting to https://search.yahoo.com/search?p={searchTerms}&xpubz=8z108mno&r=yy62f009mvb12&trk=b1v30 without authorization. Although Yahoo Search is known as a legitimate search engine, the PUP can modify the results shown via it, and, unfortunately, these results could be very misleading and malicious. That is why you should delete Yoga Search Extension right away. Our research team has created a guide that will help you better understand this threat and its elimination, so keep reading.

How does Yoga Search Extension work?

Yoga Search Extension is a new extension, but it does not function in a unique way. According to our research, EZSearch used to be the PUP that was responsible for tricking Chrome users into interacting with unreliable search results. This extension is no longer used, and it was replaced. Despite this, the search engine has not, and that is why most victims think they need to delete EZ Search hijacker, instead of some suspicious extension. Speaking of it, the problem will not be solved if you remove Yoga Search Extension. Instead, you need to erase the files and the bad shortcut that is placed on the Desktop. Notably, the target of this shortcut points to C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --load-extension="C:\Users\user\AppData\Local\Google\Chrome\User Data\Extensions\ikmapcaeknfgfmjlibnhcbchfablckbpa" instead of the location of the chrome.exe alone. Notably, the ID of the extension “ikmapcaeknfgfmjlibnhcbchfablckbpa” belongs to EzSearch. The ID of the malicious Yoga Search Extension is “monofccdhloinbmmgindaeiejebknmdc.”

As you might have figured out already, Yoga Search Extension introduces you to the EZ Search hijacker. It can showcase sponsored links, and since there is no information about the PUP or its creator, you do not know if the links injected by it into Yahoo Search results can be trusted. There is a huge probability that they are not reliable. More and more unreliable parties are turning to advertisements and misleading promotions to spread scams and malware, which is why caution must be exercised. If you interact with the links promoted by the Ez Search hijacker, you could end up falling into a pitfall of security-related issues. If you wish to avoid that, it is best to stay away from this search tool. Ignoring the unreliable Chrome shortcut is not a solution either. You need to delete the potentially unwanted program instead.

How to delete Yoga Search Extension

A legitimate anti-malware tool can erase malicious infections automatically. This is very helpful if you are having issues with the manual removal of Yoga Search Extension. While the guide below is pretty concise and straightforward – despite the number of steps included – you might have trouble cleaning your operating system, especially if other threats are included. Are they? You can use a malware scanner to figure that out. What if you are struggling, and manual removal is out of question? In this case, nothing is better than a legitimate anti-malware tool. Our research team recommends employing it even if you successfully eliminate the PUP and other active threats all by yourself. Our malware experts are ready to help you out by answering your questions. If you have any, let’s start a conversation in the comments section.

Removal Instructions

1. Simultaneously tap Win+E to access Explorer.
2. Type %LOCALAPPDATA%\Google\Chrome\User Data\ or %USERPROFILE%\Local Settings\Application Data\Google\Chrome\User Data\ into the bar at the top.
3. Open the {profile  name} folder or the Default folder if profiles do not exist.
4. Open the folder named Extensions.
5. Delete the folder Ikmapcaeknfgfmjlibnhcbchfablckbpa or monofccdhloinbmmgindaeiejebknmdc.
6. Enter %Temp% into the bar at the top and then Delete the folder called WS.
7. Enter %PROGRAMFILES% or %PROGRAMFILES(x86)% (depending on the operating system) into the bar at the top.
8. Delete the folder named EZSearch.
9. Simultaneously tap Win+R to launch RUN.
10. Type regedit.exe and click OK to launch Registry Editor.
11. Navigate to these paths and Delete the key named WindowService:
    • HKLM\SYSTEM\ControlSet001\Services\
    • HKLM\SYSTEM\ControlSet002\Services\
    • HKLM\SYSTEM\CurrentControlSet\Services\
12. Navigate to these paths and Delete the key named EZSearch:
    • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
    • HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\
13. Delete the unwanted Google Chrome.lnk shortcut from the Desktop.
14. Empty Recycle Bin.

N.B. Not all components listed in this guide might be present within your operating system. Download Removal Tool100% FREE spyware scan and
tested removal of Yoga Search Extension*