84,488,480 programs installed

Should I remove Yontoo?

What percent of users and experts removed it?
88% remove it12% keep it
Overall Sentiment
Bad
What do people think about it?
(click star to rate)
How common is it?
Global Rank #2,677
United States Rank #3,192
Reach 0.2271%
Lifespan of installation (until removal)
< 37.68 days
1111.65 days >
Average installed length: 584.08 days

Versions

VersionDistribution
1.10.03 100.00%

Yontoo 1.10.03

What is Yontoo?

Yontoo is a web browser toolbar and extension (BHO in Internet Explorer). It collects and stores information about your web browsing habits so they can suggest services or provide advertising. The program is typically bundled by 3rd party freeware applications as it is distributed through several monitization platforms.

From the EULA:
"The Software provides a suite of browser features that customize and enhance your interaction with various websites by rendering graphics, text, or other functional or interactive content in your browser. Such features include, without limitation, toolbars and applications for providing enhanced search results, browsing reference links, website ratings and reviews, social media, coupons, and comparison shopping for various products and services, including travel and insurance.

The Software may automatically, without additional notice, download upgrades, enable new features, and install fixes to the Software."

About  (from Yontoo Technology)

Yontoo is a browser add-on that horizontally crosses the internet rather than the standard vertical website archive. Yontoo LLC was founded by a small group of people that had worked together on previous projects and start-ups. We got tired of feeling like there was so much functionality possible for the Web that was n...  Read more
Overview
  • Malware detected in the program
  • Integrates into the web browser
  • Delivered through a thrid-party offer
  • This program has a poor reputation
  • The experts agree, you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in Yontoo.
YontooIEClient.dll (05586f1f292d99de1f5f2861c1ec16fa) has been flagged by the following 9 scanners:
Anti-Virus softwareVersionDetection
Comodo Security 16290 Application.Win32.Yontoo.a
Dr.Web 9.0.0.0142 Adware.Plugin.11
eSafe 7.0.17.0 Win32.Trojan
ESET-NOD32 7.8355 a variant of Win32/Adware.Yontoo.A
Fortinet FortiGate 5/22/2013 Adware/Yontoo
PC Tools 2013 SecurityRisk.Yontoo!rem
SUPERAntiSpyware 10510 Adware.Yontoo
Symantec 5/22/2013 rev. 4 Yontoo
VIPRE Antivirus 17948 Yontoo (v)
OptChrome.exe (1a090eded97f116b28ebf6a6c0fe2b64) has been flagged by the following 3 scanners:
Anti-Virus softwareSoftware versionDetection
Dr.Web Adware.Plugin.11
Malwarebytes 1.75.0.1 PUP.Optional.OptChrome.A
TrendMicro-HouseCall 9.700.0.1001 HV_ZYX_BK083BA0.TOMC
Yontoo has been found to be bundled with 3rd party software. If you have not purposefully installed this, you should be safe uninstalling it.

Program detailsProgram details

Displayed publisher: Yontoo LLC
URL: www.yontoo.com
Installation folder: C:\Program Files\Yontoo
Uninstaller: C:\Program Files2\TARMAI~1\{889DF~1\Setup.exe /remove /q0
Estimated size: 516.63 KB
Language: English (United States)

Program filesFiles installed by Yontoo 1.10.03

Program module:YontooIEClient.dll (Malware detected)
Name:Yontoo Runtime
Signed by:Yontoo LLC
Path:C:\Program Files\Yontoo\YontooIEClient.dll
MD5:05586f1f292d99de1f5f2861c1ec16fa
Yontoo Runtime for Yontoo is a web browser toolbar and extension. Yontoo collects and stores information about your web browsing habits so they can suggest services or provide advertising. The plugin commonly displays ads and deals from...
Additional files:
  • (Malware detected) YontooIEClient.dll - Yontoo Runtime
  • OptChrome.exe

Program behaviorsBehaviors exhibited

Internet Explorer BHO
  • YontooIEClient.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'Yontoo' with the class of {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} (Yontoo Layers).

How do I remove Yontoo?

You can uninstall Yontoo from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program Yontoo 1.10.03, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove Yontoo.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

How do I reset my web browser?

If your web browser homepage and search settings have been modfied by Yontoo 1.10.03 you can restore them to their previous default settings.
Microsoft Internet Explorer
Mozilla Firefox
Google Chrome

OS VERSIONS
Win 7 (SP1) 69%
Win 7 0%
 
USER ACTIONS
Uninstall it 88%
Keep it 12%
 
GLOBAL RANK
#2,677

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 7 75.88%
Windows 10 8.98%
Windows XP 8.35%
Windows Vista 6.77%
Windows Server 2003 0.02%
Which OS releases does it run on?
Windows 7 Home Premium 48.03%
Windows 7 Ultimate 14.60%
Microsoft Windows XP 8.38%
Windows 7 Professional 8.18%
Windows Vista Home Premiu... 5.17%
Windows 8 2.72%

Distribution by countryGeography

39.08% of installs come from the United States
Which countries install it?
  United States 39.08%
  Germany 7.90%
  United Kingdom 4.60%
  France 4.05%
  Italy 3.29%
  Canada 2.82%
  Brazil 2.45%
  Spain 2.26%
  Belgium 2.19%
  India 1.77%
  Portugal 1.71%
  Australia 1.46%
  Iran 1.43%
  Poland 1.41%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Hewlett-Packard 29.09%
Acer 20.51%
Dell 19.51%
ASUS 9.79%
Toshiba 7.05%
GIGABYTE 5.06%
Samsung 4.09%
Lenovo 1.85%
Intel 1.28%
American Megatrends 0.93%
Sahara 0.85%
Common models
HP Pavilion g6 Notebook P... 7.50%
HP Pavilion dv6 Notebook ... 7.05%
HP Pavilion dv7 Notebook ... 4.97%
HP Pavilion g7 Notebook P... 3.25%
Dell Inspiron N5110 2.71%
Dell Inspiron 1545 2.62%

About Yontoo Technology

Yontoo, a subsidiary/alias of ad-hijacker Sambreel, is a publisher of ad-supported web browser extensions designed to inject and display advertisements within the browser.
Publisher URL: www.yontoo.com

comments3 comments

user comment
expert comment
SJones (Expert)over a year ago
I discovered the "Yontoo" extension was causing major issues and was extremely surprised to find it in "programs and features" on my control panel! It wasn't the only surprise installation discovered either "delta toolbar" had appeared out of no where too. Neither extension were on there by my choice one was a download extension and the other was a security extension.
user comment
Just a software guyover a year ago
I was just going through the EULA and found this that should be made aware of: "Once you have installed Yontoo Layers, each time you load or refresh a page in one of the Yontoo supported browsers, a request will be made to a Yontoo owned server to determine whether or not you have enabled any Services for the domain you are currently browsing. Yontoo may collect and analyze your usage patterns such as which sites you visit, that are not personally identifiable. These non-personally identifiable data are used to improve Yontoo’s services, and may be shared with third parties."
user comment
Just a software guyover a year ago
Every single web page I go to in IE popups the yellow bar on top states "this website wants to run the following add-on "Yontoo Layers Client for Internet Explorer" from "Yontoo Technology, Inc, (unverified publisher)". Is this a virus or something? I ran a bunch of adware removers and Spybot S&D identified it as Adware/Yontoo.Pagerage and by Avira anti-virus as Adware/Yontoo.A.13. Also, I beleive it is related to Drop Down Deals as when it was installed it also created a folder called Drop Down Deals in Program files.