Short bio

This is a detection for the LSP hijacks¬†that are done by members of the Yontoo family of search hijackers. ¬†They can be recognized by “>” symbol they add to search results so you can go to the next page.

Common infection method

These browser and search hijackers are typically installed by bundlers.


Malwarebytes can clean these infections completely, but it is imperative to follow the instructions to the letter. Removing an LSP hijacker requires an extra reboot, necessary to restore the internet connection.

Example removal guides:

Associated threats