Remove Yet another cleaner (YAC) and redirect

Yet another cleaner (YAC) , formerly known as iSafe Virus Removal Tool and also known as Search.Yac.MX, YAC Search virus, YACmx virus, YAC Cleaner, Yet Another Cleaner virus, Elex do Brasil Participações Ltda, YAC computer virus e.t.c may have a useful functionality, but that is always bundled tightly with a marketing agent payload. This entails adware installing into your PC along with a potentially useful application. This piece of adware classifies in various assessment scales within the range of a potential risk to an actual redirect virus.
The redirect includes, but is not limited to, setting your default browser search page to, which is remarkably similar to many other websites imposed upon users as search engines; the same page appearing as a new tab and instead some pages you would request, as well as without any relevant user’s query.
Apart from that, the adware is going to collect the data you would exchange through your web-browser, with any known software for web-surfing (IE, Firefox, Chrome etc.) vulnerable to its attacks. Furthermore, you need to remove Yet another cleaner (YAC) adware altogether, that is, covering both components and settings and registry entries related thereto.
A comprehensive approach to the removal of Yet another cleaner (YAC) is implemented in the free manual guide provided below.

yet another cleaner

Screenshot of YAC GUI (graphic user interface) redirect


Method 1: Using Safe Mode with Networking + antimalware to remove YAC \ infection:

Step 1 > Please restart your PC, but do not wait for regular session to start. Instead, once anything comes to your monitor, press
reputedly and frequently enough so that a screen like the one below would get loaded. This is the menu where you need to select the suggested operating mode. Arrows on you keyboard enable you to navigate through the menu and mark Safe Mode with Networking. Once this is done, activate it by pressing Enter on your keyboard.

How to switch to Safe mode?

Step 2 > Prior to initiating any procedures, the processes run by YAC must be killed for good. This will prevent in from meddling into the extermination routine. Get RKill browsing to the link below so that this requirement could be satisfied.

downloadDownload RKill
Run it to stop malware processes

Set desktop in “Save as” routine. Once it is downloaded, double-click on the it in order to automatically attempt to stop any processes associated with YAC and other Rogue programs. Please be patient while the program looks for various malware programs and ends them. When it has finished, the black window will automatically close and you can continue with the next Step.


If you get a message that RKill is an infection, do not be concerned. This message is just a fake warning given by YAC when it terminates programs that may potentially remove it. If you run into these infections warnings that close RKill, a trick is to leave the warning on the screen and then run RKill again. By not closing the warning, this typically will allow you to bypass the malware trying to protect itself so that RKill can terminate YAC. So, please try running RKill until the malware is no longer running. You will then be able to proceed with the rest of the guide. Do not reboot your computer after running RKill as the malware programs will start again. If you continue having problems running RKill, you can rename it to “Iexplorer.exe”,“chrome.exe” and then try to start.

rkill download

Step 3 > Open your browser and download TDSSKiller. Run the utility and click “Start Scan” to anti-rootkit scan.

downloadDownload TDSSKiller
Utility for removing malicious rootkits.

Adaptive Spyware Detection and Removal Tool

    • NOTE: There is a risk of the infection you are about to remove interfering with the above (Rkill, TDSS Killer) and probably any other installations into compromised machine. Under such circumstances, please download the content specified herein into removable memory at a PC void of the infection. Upon completing this step, attach the removable media (USB, external drive, CD/DVD) to affected machine so that you could install the solution despite the tricks.
    • OR follow these instructions:
      1. Click Start->Run
      2. Enter “” and press ‘Enter’.
      3. Press ‘Continue unprotected’
      4. Save the file on your desktop.
      5. Rename the .exe from xxx.exe to and run it.
      6. Now you have to remove YAC files that will be detected by a program.


Method 2: YAC Manual removal:

Important! Experienced users only!

Step 1> Locate, stop and delete the following processes and files:

    • <random>.exe

To find [random].exe malicious process Right click on “YAC” icon >Properties:

You can locate process file in “Target” field:

Step 2> Remove or change the following registry entries, using “Start>Run> print “regedit” command:

    • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “GuardSoftware” = “%AppData%\guard-<random>.exe”
      HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon “Shell”=”C:\\Users\\User\\AppData\\Roaming\\guard-<random>.exe”
  1. Yi Master
    • LodeHere
      • LodeHere
        • LodeHere
          • wieslaw
        • Snehashis
    • João Bosco Vitral
    • Caroyn Varner
    • kurva
  2. Gama Mama
  3. For Liberature
  4. Markus
  5. Ana
  6. Alex
  7. burnthem

Leave a Reply

Your email address will not be published. Required fields are marked *