Removal Guide

Do you know what is? is a hijacker that is capable of modifying your default search provider on Mozilla Firefox and Google Chrome browsers. This hijacker travels bundled with the MySafeTabs extension that is provided by Imali at This add-on is also available from the Chrome web store at Based on the data provided on this page, it is evident that the extension is new because it does not have active users or reviews. The developer of this extension has not even provided screenshots yet. Nonetheless, a short description exists, and it suggests that the extension can provide access to security tools and other supposedly useful links. Additionally, it informs that a search tool associated with this extension can “override” your Chrome new tab and default search. If you have installed the extension without realizing the entrance of the hijacker, you have the first reason to remove

Some users might let in by accident. Others might welcome this search tool with excitement. Unfortunately, there is also a possibility that this hijacker will take over the browsers illegally. This is most likely to happen if you execute a software bundle without knowing that the MySafeTabs extension is attached to it. In any case, this search tool works in the same way every time. The top section of is dedicated to links providing access to supposedly beneficial search tools. Before you trust the third-party services promoted by this hijacker, you should do some research to figure out if they are trustworthy. Additionally, this hijacker provides links to Facebook, Gmail, Instagram, Amazon, AliExpress, and YouTube. Obviously, these links are legitimate, but that does not mean you should interact with them via this suspicious search provider. Although some of the links provided are suspicious, the most suspicious feature is the web Removal screenshot
Scroll down for full removal instructions

Although you might expect to see original search results, cannot provide you with them. Instead, it will redirect you to Yahoo Search, and that is more suspicious than you think. Programs capable of redirecting to third-party sites are very unpredictable because you do not know when they could be updated to redirect to malicious websites. Unfortunately, this is a risk that you need to consider. Even if that does not happen, you need to consider that redirecting to Yahoo could be used to record information about you (e.g., your browsing history) and, potentially, introduce you to modified results. This means that you might be tricked into interacting with unreliable websites and annoying ads. We also have to mention tracking cookies, small pieces of data that record and store information about your preferences and behavior. This allows third-party advertisers to target you with more attractive deals. Our research team warns that, in some cases, this data is used to trick users into interacting with misleading ads. changes the search engine on Firefox and Chrome browsers. It is also capable of modifying the New Tab tool on Chrome. The users of this browser usually think that MySafeTabs modifies their homepage settings as well; however, the truth is that this extension simply changes settings to ensure that New Tab opens instead of your regular homepage when you launch the browser. Luckily, you can fix this issue by eliminating the unwanted extension. We have designed a manual removal guide that will help you get your browsers back to normal. Of course, if you find that you need to delete along with other infections, it is best to use automated malware detection and removal software to have your PC cleaned from malware all at once.

Remove from browsers

Google Chrome

  1. Launch Explorer (simultaneously tap keys Win+E).
  2. Enter %UserProfile%\Local Settings\Application Data\Google\Chrome\User Data into the address bar.
  3. Open the folder called “Default” or a folder named after your Profile name.
  4. Open the Extensions folder and Delete the folder called “heemhkdkcabiglnabanapnfbjecmopnf.”

Mozilla Firefox

  1. Launch Explorer (simultaneously tap keys Win+E).
  2. Enter %Appdata%\Mozilla\Firefox\Profiles into the address bar.
  3. Open the folder with a random name (e.g., 46iwse76.default).
  4. Open the extensions folder and Delete the file called “”.

In non-techie terms:

Our research team recommends deleting because this search tool is not at all beneficial. Although it can provide links to seemingly beneficial sites, you need to research the unfamiliar ones carefully. Furthermore, it redirects your search queries to Yahoo Search, and that is very suspicious. In the worst case scenario, this ability to redirect you to third-party sites could be used to lead you straight into the arms of schemers. If you wish to prevent this from happening, you will eliminate the suspicious hijacker and the extension that travels bundled with it. The good news is that you can get rid of the hijacker by erasing the extension, and you can learn how to do that by following the guide above.