84,488,480 programs installed

Should I remove Cantataweb?

What percent of users and experts removed it?
85% remove it15% keep it
Overall Sentiment
What do people think about it?
(click star to rate)
How common is it?
Global Rank #38,211
Reach 0.0028%
Lifespan of installation (until removal)
< 5.07 days
149.65 days >
Average installed length: 78.63 days


2015.01.09.052242 1.82%
2015.01.05.002316 1.82%
2014.12.31.052254 1.82%
2014.12.27.152249 1.82%
2014.12.27.102249 1.82%
2014.12.23.162236 1.82%
2014.12.23.002143 1.82%
2014.12.21.132143 1.82%
2014.12.20.172141 1.82%
2014.12.19.212122 3.64%
2014.12.19.162122 1.82%
2014.12.17.082129 1.82%
2014.12.15.062124 1.82%
2014.12.14.052120 1.82%
2014.12.07.032106 1.82%
2014.11.30.192344 1.82%
2014.11.29.042157 1.82%
2014.11.26.212218 1.82%
2014.11.21.212202 1.82%
2014.11.20.002152 1.82%
2014.11.18.122217 1.82%
2014.11.10.162137 1.82%
2014.11.10.012135 1.82%
2014.11.06.222121 1.82%
2014.11.02.083029 1.82%
2014.11.01.223027 1.82%
2014.10.25.202643 1.82%
2014.10.23.082635 3.64%
2014.10.22.132402 1.82%
2014.10.21.075815 1.82%
2014.10.20.045903 1.82%
2014.10.18.025839 1.82%
2014.10.10.155124 1.82%
2014.10.09.193906 1.82%
2014.10.09.153615 1.82%
2014.10.09.113332 1.82%
2014.10.08.111707 1.82%
2014.10.08.001142 3.64%
2014.10.06.064212 3.64%
2014.09.30.091232 3.64%
2014.09.27.163329 1.82%
2014.09.22.214019 1.82%
2014.09.21.121914 1.82%
2014.09.21.041913 3.64%
2014.09.17.163314 1.82%
2014.08.15.193703 5.45%
2014.07.09.185238 1.82%


What is Cantataweb?

Cantataweb is a potentially unwanted adware program that injects ads into the user's browser. This includes inserting into web pages or displaying ads over parts of existing web page advertisements, banners, coupons or text links that would not otherwise appear. It will communicate with the Yontoo's servers to check for new offers and the placement of offers as well as monitoring and recording the domain name of each page the user views, the advertisements that appear on these pages and the ads the user clicks on.

About  (from Yontoo Technology)

Experience the wonders of the internet with Cantataweb!


The most used version is 2014.08.15.193703, with over 98% of all installations currently using this version. It adds a background controller service that is set to automatically run. Delaying the start of this service is possible through the service manager. It adds a Browser Helper Object (BHO) to Internet Explorer. The main program executable is Cantatawebbho.dll. Typically most users end up uninstalling this just after a few days. The software installer includes 19 files and is usually about 8.17 MB (8,571,717 bytes).
  • Possible malware installed by this program
  • Loads into the web browser
  • Installs a Windows Service
  • Typically distributed through a pay-per-install bundle
  • Injects advertisements unassociated with the underlying web page
  • Generally known to have a low reputation
  • The experts agree, you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in Cantataweb.
CantatawebBHO.dll (5f708d7c2c215c29ae730a7aa2f43ab2) has been flagged by the following 42 scanners:
Anti-Virus softwareVersionDetection
Lavasoft Ad-Aware 537 Adware.BrowseFox.AG
Agnitum Outpost 7.1.1 Riskware.Agent
AhnLab-V3 2015.08.09 PUP/Win32.BrowseFox
ALYac Adware.BrowseFox.AG
Antiy-AVL Trojan/Win32.TSGeneric
Arcabit Adware.BrowseFox.AG
avast! 2014.9-150817 Win32:BrowseFox-FR [PUP]
AVG 2016.0.3015 AdPlugin
Avira ADWARE/BrowseFox.aoq
AVware Yontoo (fs)
Baidu-International Adware.Win32.BrowseFox.AE
Bitdefender Adware.BrowseFox.AG
Bkav FE W32.BrowseFoxAC.Adware
CAT-QuickHeal PUA.Cantataweb1.Gen
Comodo Security 22965 ApplicUnwnt
Cyren W32/S-f64f6ec1!Eldorado
Dr.Web Trojan.Yontoo.1734
Emsisoft Anti-Malware Adware.BrowseFox.AG
ESET-NOD32 9.12065 a variant of Win32/BrowseFox.AE potentially unwanted
Fortinet FortiGate 8/17/2015 Riskware/BrowseFox
F-Prot v6. W32/S-f64f6ec1
F-Secure 11.2015-17-08_2 Adware.BrowseFox.AG
G Data 15.8.25 Adware.BrowseFox.AG
IKARUS anti.virus t3scan. PUA.BrowseFox
Jiangmin KV150817 AdWare/SwiftBrowse.dxt
K7 AntiVirus 13.207.16831 Trojan
K7GW 13.207.16831 Trojan ( 004b5b821 )
Malwarebytes v2015.08.17.11 PUP.Optional.CantataWeb.C
McAfee 5600.6671 Artemis!5F708D7C2C21
McAfee-GW-Edition 7.6671 Artemis!PUP
MicroWorld-eScan Adware.BrowseFox.AG
NANO AntiVirus Trojan.Win32.Yontoo.dnkubo
nProtect Adware.BrowseFox.AG
Panda Antivirus PUP/Cantataweb
Qihoo-360 Win32/Virus.Adware.faf
Rising Antivirus PE:Adware.BrowseFox!6.1D8B
Sophos 4.98 Generic PUA LM (PUA)
Symantec 8/17/2015 rev. 2 PUA.Yontoo.C
Trend Micro 10.465.17 TROJ_GEN.R047C0EBB15
Vba32 AntiVirus AdWare.MSIL.Agent
VIPRE Antivirus 42736 Yontoo (fs)
Zillya Adware.BrowseFox.Win32.18608
updateCantataweb.exe (88a83fdb112c8649241881662fa670b5) has been flagged by the following 36 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware Adware.BrowseFox.AG
AhnLab-V3 2015.06.11.02 Win-PUP/BrowseFox.Gen
ALYac Adware.BrowseFox.AG
Arcabit Adware.BrowseFox.AG
avast! 8.0.1489.320 Win32:BrowseFox-FR [PUP]
AVG Generic.61B
Avira ADWARE/BrowseFox.aoq
AVware Yontoo (fs)
Baidu-International Adware.MSIL.BrowseFox.H
Bitdefender 7.2 Adware.BrowseFox.AG
Bkav FE W32.HfsAdware.A6B1
CAT-QuickHeal 14.00 PUA.Cantataweb1.Gen
Comodo Security 22413 ApplicUnwnt
Cyren W32/S-26365c9e!Eldorado
Dr.Web Trojan.Yontoo.1734
Emsisoft Anti-Malware Adware.BrowseFox.AG (B)
ESET-NOD32 11768 a variant of MSIL/BrowseFox.H potentially unwanted
Fortinet FortiGate 5.0.999.0 Adware/BrowseFox
F-Prot W32/S-26365c9e!Eldorado
F-Secure 11.0.19100.45 Adware.BrowseFox.AG
G Data 25 Adware.BrowseFox.AG
K7 AntiVirus 9.204.16207 Adware ( 700000121 )
K7GW 9.204.16208 Adware ( 700000121 )
McAfee BrowseFox-FTQ
McAfee-GW-Edition v2015 BrowseFox-FTQ
MicroWorld-eScan Adware.BrowseFox.AG
NANO AntiVirus Riskware.Win32.BPlug.djpkri
nProtect 2015-06-11.01 Adware.BrowseFox.AG
Panda Antivirus Trj/CI.A
Qihoo-360 HEUR/QVM03.0.Malware.Gen
Sophos 4.98.0 Generic PUA GG
Symantec 20141.2.0.56 Yontoo.C
Tencent Trojan.Win32.Qudamah.Gen.18
Trend Micro 9.740.0.1012 TROJ_GEN.R047C0EAP15
TrendMicro-HouseCall 9.700.0.1001 TROJ_GEN.R047C0EAP15
VIPRE Antivirus 41026 Yontoo (fs)
       View all 78 all detections
Cantataweb has been found to be bundled with 3rd party software. If you have not purposefully installed this, you should be safe uninstalling it.

Program detailsProgram details

Displayed publisher: Cantataweb
URL: cantataweb.net/support
Help link: mailto:[email protected]
Installation folder: C:\Program Files\Cantataweb
Uninstaller: C:\Program Files\Cantataweb\Cantatawebuninstall.exe
Estimated size: 8.17 MB

Program filesFiles installed by Cantataweb

Program module:Cantatawebbho.dll
Path:C:\Program Files\Cantataweb\Cantatawebbho.dll
Additional files:
  • (Malware detected) Cantatawebbho.dll - Cantataweb
  • 7za.exe (by Igor Pavlov) - 7-Zip (7-Zip Standalone Console)
  • CantatawebUn.exe
  • CantatawebUninstall.exe
  • (Malware detected) updateCantataweb.exe

Program behaviorsBehaviors exhibited

Internet Explorer BHO
  • CantatawebBHO.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'Cantataweb' with the class of {aab803bd-f01b-423a-a89a-60af476e9f12}.
  • updateCantataweb.exe runs as a service named 'Update Cantataweb' (Update Cantataweb).

How do I remove Cantataweb?

You can uninstall Cantataweb from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program Cantataweb, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove Cantataweb.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

How do I reset my web browser?

If your web browser homepage and search settings have been modfied by Cantataweb you can restore them to their previous default settings.
Microsoft Internet Explorer
Mozilla Firefox
Google Chrome

Win 7 (SP1) 67%
Win Vista (SP2) 2%
Windows Service? Yes
(Installs a service)
Uninstall it 85%
Keep it 15%

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 7 78.18%
Windows 10 16.36%
Windows XP 3.64%
Windows Vista 1.82%
Which OS releases does it run on?
Windows 7 Ultimate 35.85%
Windows 7 Professional 20.75%
Windows 7 Home Premium 11.32%
Windows 8.1 Pro 7.55%
Microsoft Windows XP 3.77%
Windows 7 Enterprise 3.77%

Distribution by countryGeography

21.67% of installs come from the United States
Which countries install it?
  United States 21.67%
  Brazil 13.33%
  Saudi Arabia 8.33%
  Pakistan 5.00%
  Iran 3.33%
  Thailand 3.33%
  Sweden 3.33%
  MA 3.33%
  Egypt 3.33%
  Indonesia 3.33%
  Italy 3.33%
  Canada 1.67%
  SD 1.67%
  UA 1.67%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Acer 25.00%
Hewlett-Packard 25.00%
Dell 19.23%
ASUS 9.62%
Toshiba 5.77%
Lenovo 5.77%
American Megatrends 3.85%
Samsung 1.92%
Common models
TOSHIBA Satellite L745 2.08%
TOSHIBA Satellite C845 2.08%
PositivoEIH61CE 2.08%
LG Electronics A410-K.BE4... 2.08%
K8UNF K8Upgrade-NF3 2.08%
HP ProBook 4530s 2.08%

About Yontoo Technology

Yontoo, a subsidiary/alias of ad-hijacker Sambreel, is a publisher of ad-supported web browser extensions designed to inject and display advertisements within the browser.
Publisher URL: www.yontoo.com


user comment
No one has commented yet. Help others learn more about this software, share your comments.