84,488,480 programs installed

Should I remove Okiitan?

What percent of users and experts removed it?
79% remove it21% keep it
Overall Sentiment
Bad
What do people think about it?
(click star to rate)
How common is it?
United States Rank #46,765
Reach 0.0009%
Lifespan of installation (until removal)
< 3.24 days
95.59 days >
Average installed length: 50.22 days

Versions

VersionDistribution
2014.08.16.152849 5.88%
2014.08.15.232853 5.88%
2014.08.06.223101 5.88%
2014.07.10.213417 5.88%
2014.07.09.185238 5.88%
2014.07.01.225410 5.88%
2014.06.26.202249 11.76%
2014.06.24.214734 5.88%
2014.06.19.004727 5.88%
2014.06.16.195433 11.76%
2014.06.07.001136 11.76%
2014.05.03.021147 5.88%
2014.03.13.214859 11.76%

Okiitan

What is Okiitan?

Okiitan is an adware browser extension that will display banner and text-context link ads aimed to promote the installation of additional questionable content including web browser toolbars, optimization utilities and other products. It will cause random web page text is turned into hyperlinks and may also lead to the installation of other unwanted adware programs to be installed without the user's knowledge.

Overview

The most used version is 2014.06.26.202249, with over 98% of all installations currently using this version. It adds a background controller service that is set to automatically run. Delaying the start of this service is possible through the service manager. It adds a Browser Helper Object (BHO) to Internet Explorer. The main program executable is OkiitanBHO.dll. Typically most users end up uninstalling this just after a few days. The software installer includes 7 files and is usually about 7.15 MB (7,494,088 bytes).
  • Possible malware installed by this program
  • Loads into the web browser
  • Installs a Windows Service
  • Typically distributed through a pay-per-install bundle
  • Generally known to have a low reputation
  • The wisdom of the crowd agrees, you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in Okiitan.
OkiitanBHO.dll (b5e1f3c6bb866bf0a2a0b87c260578c9) has been flagged by the following 24 scanners:
Anti-Virus softwareVersionDetection
Lavasoft Ad-Aware 981 Gen:Variant.Adware.BHO.Agent.4
Agnitum Outpost 7.1.1 PUA.Agent
Avira AntiVir 7.11.150.60 APPL/BrowseFox.Gen2
AVG 2015.0.3459 BrowseFox.F
Bitdefender 1.0.20.750 Gen:Variant.Adware.BHO.Agent.4
Comodo Security 18286 Application.Win32.Altbrowse.AK
Dr.Web 9.0.0.0150 Trojan.BPlug.28
Emsisoft Anti-Malware 8.14.05.30.07 Gen:Variant.Adware.BHO.Agent
ESET-NOD32 8.9814 a variant of Win32/BrowseFox.F
F-Secure 11.2014-30-05_6 Gen:Variant.Adware.BHO.Agent.4
G Data 14.5.24 Gen:Variant.Adware.BHO.Agent
Jiangmin KV140530 Adware/Agent.izz
Kaspersky 14.0.0.3788 not-a-virus:AdWare.Win32.Agent
Kingsoft AntiVirus 331020.49267 Win32.Troj.Agent.ah.(kcloud)
Malwarebytes v2014.05.30.07 PUP.Optional.Okiitan.A
McAfee 5600.7115 Artemis!B5E1F3C6BB86
McAfee-GW-Edition 7.7115 Artemis!B5E1F3C6BB86
MicroWorld-eScan 15.0.0.450 Gen:Variant.Adware.BHO.Agent.4
NANO AntiVirus 0.28.0.59911 Riskware.Win32.Agent.cuenda
Panda Antivirus 14.05.30.07 Trj/CI.A
Sophos 4.98 Generic PUA JL
SUPERAntiSpyware 10574 Adware.BrowseFox/Variant
VIPRE Antivirus 29314 Yontoo (fs)
Zillya 2.0.0.1791 Adware.Agent.Win32.9046
updateOkiitan.exe (aa3f17bc8d9b8948d73ef374c31ffbe1) has been flagged by the following 28 scanners:
Anti-Virus softwareSoftware versionDetection
Agnitum Outpost 5.5.1.3 PUA.Kranet!
AhnLab-V3 2014.11.13.00 PUP/Win32.OutBrowse
Antiy-AVL 1.0.0.1 GrayWare[AdWare:not-a-virus,HEUR]/MSIL.Kranet
avast! 8.0.1489.320 Win32:BrowseFox-DE [PUP]
AVG 15.0.0.4189 Generic.F75
Avira 7.11.184.246 ADWARE/BrowseFox.Gen7
AVware 1.5.0.21 Yontoo (fs)
Baidu-International 3.5.1.41473 Adware.Win32.BrowseFox.okii
CAT-QuickHeal 14.00 AdWare.MSIL.r3 (Not a Virus)
Comodo Security 20067 UnclassifiedMalware
Dr.Web 7.0.10.8210 Trojan.BPlug.250
ESET-NOD32 10714 a variant of Win32/BrowseFox.H
Fortinet FortiGate 5.0.999.0 Adware/Kranet
K7 AntiVirus 9.185.13993 Trojan ( 0049f7ad1 )
K7GW 9.185.13994 Trojan ( 020000001 )
Kaspersky 12.0.0.1225 not-a-virus:HEUR:AdWare.MSIL.Kranet.heur
Kingsoft AntiVirus 2013.4.9.267 Win32.Troj.Generic.a.(kcloud)
Malwarebytes 1.75.0.1 PUP.Optional.Okiitan.A
McAfee 6.0.5.614 BrowseFox.c
McAfee-GW-Edition v2014.2 BrowseFox.c
NANO AntiVirus 0.28.6.63362 Riskware.Win32.BrowseFox.degrjl
nProtect 2014-11-12.01 Trojan-Clicker/W32.Agent.323352.B
Panda Antivirus 4.6.4.1 Trj/Chgt.B
Qihoo-360 1.0.0.1015 Win32/Virus.Adware.e4c
Symantec 20141.1.0.330 Trojan.ADH.2
Trend Micro 9.740.0.1012 TROJ_GEN.R0C1C0EK814
TrendMicro-HouseCall 9.700.0.1001 TROJ_GEN.R0C1C0EK814
VIPRE Antivirus 34744 Yontoo (fs)
       View all 52 all detections
Okiitan has been found to be bundled with 3rd party software. If you have not purposefully installed this, you should be safe uninstalling it.

Program detailsProgram details

Displayed publisher: Okiitan
URL: okiitan.com/support
Help link: mailto:[email protected]
Installation folder: C:\Program Files\Okiitan
Uninstaller: C:\Program Files\Okiitan\Okiitanuninstall.exe
Estimated size: 7.15 MB

Program filesFiles installed by Okiitan

Program module:OkiitanBHO.dll (Malware detected)
Name:Okiitan
Path:C:\Program Files\Okiitan\OkiitanBHO.dll
MD5:b5e1f3c6bb866bf0a2a0b87c260578c9
Additional files:
  • (Malware detected) OkiitanBHO.dll - Okiitan
  • 7za.exe (by Igor Pavlov) - 7-Zip (7-Zip Standalone Console)
  • OkiitanUninstall.exe
  • (Malware detected) updateOkiitan.exe

Program behaviorsBehaviors exhibited

Internet Explorer BHO
  • OkiitanBHO.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'Okiitan 1.0.0.6' with the class of {446ce558-562c-47d4-81a9-13550cf6effd}.
Service
  • updateOkiitan.exe runs as a service named 'Update Okiitan' (Update Okiitan).

How do I remove Okiitan?

You can uninstall Okiitan from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program Okiitan, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove Okiitan.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

How do I reset my web browser?

If your web browser homepage and search settings have been modfied by Okiitan you can restore them to their previous default settings.
Microsoft Internet Explorer
Mozilla Firefox
Google Chrome

OS VERSIONS
Win 7 (SP1) 59%
Win XP 6%
 
HOW IT RUNS
Windows Service? Yes
(Installs a service)
 
USER ACTIONS
Uninstall it 79%
Keep it 21%

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 7 64.71%
Windows 10 23.53%
Windows Vista 5.88%
Windows XP 5.88%
Which OS releases does it run on?
Windows 7 Home Premium 41.18%
Windows 7 Ultimate 17.65%
Windows 8.1 11.76%
Windows 8 5.88%
Windows Vista Home Premiu... 5.88%
Windows 8 Single Language 5.88%

Distribution by countryGeography

69.57% of installs come from the United States
Which countries install it?
  United States 69.57%
  France 8.70%
  Canada 8.70%
  United Kingdom 4.35%
  DZ 4.35%
  PS 4.35%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Hewlett-Packard 25.00%
Dell 18.75%
ASUS 18.75%
Lenovo 18.75%
GIGABYTE 6.25%
Samsung 6.25%
Gateway 6.25%
Common models
Dell OptiPlex 960 6.67%
ASUSTeK U56E 6.67%
ASUSTeK K50IJ 6.67%
Samsung RV410/RV510/S3510... 6.67%
LENOVO 64608VU 6.67%
HP Pavilion m6 Notebook P... 6.67%

About Yontoo Technology

Yontoo, a subsidiary/alias of ad-hijacker Sambreel, is a publisher of ad-supported web browser extensions designed to inject and display advertisements within the browser.
Publisher URL: www.yontoo.com

commentsComments

user comment
No one has commented yet. Help others learn more about this software, share your comments.