82,399,351 programs installed

Should I remove PlumoWeb?

What percent of users and experts removed it?
88% remove it12% keep it
Overall Sentiment
What do people think about it?
(click star to rate)
How common is it?
Global Rank #24,662
United States Rank #16,022
Reach 0.0081%
Lifespan of installation (until removal)
< 3.66 days
107.97 days >
Average installed length: 56.73 days


2015.02.27.030331 0.88%
2015.02.15.062522 0.88%
2015.02.11.062450 0.88%
2015.02.10.152448 0.88%
2015.02.08.222451 0.88%
2015.02.08.172451 0.88%
2015.02.07.112446 0.88%
2015.02.04.222419 0.88%
2015.02.04.122418 1.75%
2015.02.02.102414 1.75%
2015.01.31.182406 0.88%
2015.01.30.122402 0.88%
2015.01.29.112402 0.88%
2015.01.29.062401 0.88%
2015.01.29.012406 1.75%
2015.01.28.202408 1.75%
2015.01.28.142343 0.88%
2015.01.27.232340 0.88%
2015.01.26.172335 0.88%
2015.01.25.212332 1.75%
2015.01.24.202329 0.88%
2015.01.24.102328 0.88%
2015.01.24.052327 0.88%
2015.01.22.222332 0.88%
2015.01.22.072331 1.75%
2015.01.21.142343 0.88%
2015.01.16.192320 0.88%
2015.01.14.222311 0.88%
2015.01.14.062320 0.88%
2015.01.13.202321 0.88%
2015.01.13.002316 0.88%
2015.01.12.192314 2.63%
2015.01.11.232314 0.88%
2015.01.11.182307 1.75%
2015.01.10.222310 0.88%
2015.01.10.172308 0.88%
2015.01.10.122308 0.88%
2015.01.09.202248 0.88%
2015.01.08.142244 1.75%
2015.01.08.042244 0.88%
2015.01.07.132238 0.88%
2015.01.07.032237 0.88%
2015.01.04.192319 0.88%
2015.01.03.182313 0.88%
2015.01.03.132312 0.88%
2015.01.01.112307 0.88%
2015.01.01.012308 0.88%
2014.12.30.232305 0.88%
2014.12.30.082300 0.88%
2014.12.29.222302 0.88%
2014.12.29.172259 0.88%
99 versions


What is PlumoWeb?

PlumoWeb (Sambreel) is a web browser extension that injects display advertising in the user's browser. Ads are displayed in the form of banners and contextual text-links and are both injected in white space areas of the HTML page or over existing ads of the underlying web site. These ads are typically for PC optimization utilities, other bundled malware or other types of malvertising.


The most common release is 2015.01.12.192314, with over 98% of all installations currently using this version. Upon being installed, the software adds a Windows Service which is designed to run continuously in the background. Manually stopping the service has been seen to cause the program to stop functing properly. It adds a background controller service that is set to automatically run. Delaying the start of this service is possible through the service manager. It adds a Browser Helper Object (BHO) to Internet Explorer. The primary executable is named updatePlumoWeb.exe. A majority of users end up uninstalling this less than a week of it being installed. The setup package generally installs about 41 files and is usually about 9.31 MB (9,761,592 bytes).
  • Malware detected in the program
  • Integrates into the web browser
  • Installs a Windows Service
  • Typically distributed through a pay-per-install bundle
  • This program has a poor reputation
  • The experts agree, you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in PlumoWeb.
updatePlumoWeb.exe (2bb1b2194d53f7d09dc9078560c44100) has been flagged by the following 10 scanners:
Anti-Virus softwareVersionDetection
avast! 2014.9-141120 Win32:BrowseFox-CK [PUP]
AVG 2015.0.3285 Generic
AVware Adware.BrowseFox
Baidu-International Adware.MSIL.BrowseFox.bH
ESET-NOD32 8.10617 a variant of MSIL/BrowseFox.H
IKARUS anti.virus t3scan. PUA.SwiftBrowse
Malwarebytes v2014.11.20.02 PUP.Optional.PlumoWeb.A
McAfee 5600.6941 Artemis!2BB1B2194D53
McAfee-GW-Edition 7.6941 Artemis!PUP
VIPRE Antivirus 34226 Adware.BrowseFox
PlumoWebbho.dll (0e0a1632f311f90006b96c61a0835124) has been flagged by the following 43 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware Adware.SwiftBrowse.CQ
Agnitum Outpost Riskware.Agent!
AhnLab-V3 2015.07.25.00 PUP/Win32.BrowseFox
ALYac Adware.SwiftBrowse.CQ
Antiy-AVL GrayWare[AdWare:not-a-virus]/Win32.SwiftBrowse
Arcabit Adware.SwiftBrowse.CQ
avast! 8.0.1489.320 MSIL:BrowseFox-O [PUP]
AVG AdPlugin.CWR
Avira ADWARE/BrowseFox.apq
AVware Yontoo
Baidu-International Adware.Win32.BrowseFox.AE
Bitdefender 7.2 Adware.SwiftBrowse.CQ
Bkav FE W32.BrowseFoxAC.Adware
CAT-QuickHeal 14.00 PUA.Plumoweb.Gen
Clam AntiVirus Win.Adware.Swiftbrowse-1503
Comodo Security 22854 ApplicUnwnt
Cyren W32/S-f64f6ec1!Eldorado
Dr.Web Trojan.Yontoo.1734
Emsisoft Anti-Malware Adware.SwiftBrowse.CQ (B)
ESET-NOD32 11991 a variant of Win32/BrowseFox.AE potentially unwanted
Fortinet FortiGate Adware/BrowseFox
F-Prot W32/S-f64f6ec1!Eldorado
F-Secure 11.0.19100.45 Adware.SwiftBrowse.CQ
G Data 25 Adware.SwiftBrowse.CQ
IKARUS anti.virus T3. PUA.BrowseFox
Jiangmin 16.0.100 AdWare/MSIL.hie
K7 AntiVirus 9.207.16673 Trojan ( 004af36c1 )
K7GW 9.207.16673 Trojan ( 004af36c1 )
McAfee Artemis!0E0A1632F311
McAfee-GW-Edition v2015 Artemis!PUP
MicroWorld-eScan Adware.SwiftBrowse.CQ
NANO AntiVirus Trojan.Win32.Yontoo.dnkubo
nProtect 2015-07-23.01 Adware.SwiftBrowse.CQ
Panda Antivirus PUP/PlumoWeb
Qihoo-360 Win32/Virus.Adware.c0f
Rising Antivirus PE:Adware.BrowseFox!6.1D8B
Sophos 4.98.0 Generic PUA PD
Symantec 20141.2.0.56 PUA.Yontoo.C
Tencent Win32.Trojan.Suspicious.Fig
Trend Micro 9.740.0.1012 TROJ_GEN.R02LC0EBB15
Vba32 AntiVirus AdWare.MSIL.Agent
VIPRE Antivirus 42288 Yontoo
Zillya Backdoor.PePatch.Win32.63378
       View all 53 all detections
PlumoWeb has been found to be bundled with 3rd party software. If you have not purposefully installed this, you should be safe uninstalling it.
Find out how to remove PlumoWeb.

Program detailsProgram details

Displayed publisher: PlumoWeb
URL: plumoweb.net/support
Help link: mailto:[email protected]
Installation folder: C:\Program Files\PlumoWeb
Uninstaller: C:\Program Files\PlumoWeb\PlumoWebuninstall.exe
Estimated size: 9.31 MB

Program filesFiles installed by PlumoWeb

Program executable:updatePlumoWeb.exe (Malware detected)
Path:C:\Program Files\PlumoWeb\updatePlumoWeb.exe
Additional files:
  • (Malware detected) PlumoWebbho.dll - PlumoWeb
  • PlumoWebUn.exe
  • PlumoWebUninstall.exe
  • (Malware detected) updatePlumoWeb.exe

Program behaviorsBehaviors exhibited

Internet Explorer BHO
  • PlumoWebbho.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'PlumoWeb' with the class of {cb02c18f-54dc-4ec0-bae2-ab2f8e44f877}.
  • updatePlumoWeb.exe runs as a service named 'Update PlumoWeb' (Update PlumoWeb).

How do I remove PlumoWeb?

Quickly and completely remove PlumoWeb from your computer by downloading "Should I Remove It?", its 100% FREE and installs in seconds (click the button below).
Download "Should I Remove It?", it's FREE!Remove PlumoWeb from your computer.
Or, you can uninstall PlumoWeb from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program PlumoWeb, click it, and then do one of the following:
    • Windows Vista/7/8: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove PlumoWeb.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

How do I reset my web browser?

If your web browser homepage and search settings have been modfied by PlumoWeb you can restore them to their previous default settings.
Microsoft Internet Explorer
Mozilla Firefox
Google Chrome
Scan your PC for malware
If you do not have a good anti-virus program, please consider installing one. Below are some we highly recommend.

Win 8 46%
Win 7 2%
Windows Service? Yes
(Installs a service)
Uninstall it 88%
Keep it 12%

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 8 45.61%
Windows 7 44.74%
Windows Vista 6.14%
Windows XP 3.51%
Which OS releases does it run on?
Windows 8.1 35.96%
Windows 7 Home Premium 28.95%
Windows 7 Professional 11.40%
Windows Vista Home Premiu... 6.14%
Windows 7 Ultimate 4.39%
Microsoft Windows XP 3.51%

Distribution by countryGeography

70.89% of installs come from the United States
Which countries install it?
  United States 70.89%
  France 12.66%
  United Kingdom 5.70%
  Australia 3.80%
  Italy 1.90%
  Norway 1.27%
  Germany 1.27%
  Netherlands 0.63%
  Mexico 0.63%
  Spain 0.63%
  Brazil 0.63%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Hewlett-Packard 30.30%
Dell 22.22%
Acer 20.20%
Toshiba 12.12%
ASUS 8.08%
Lenovo 4.04%
Sahara 1.01%
Samsung 1.01%
Common models
HP 2000 Notebook PC 2.78%
HP 15 Notebook PC 2.78%
TOSHIBA Satellite C55-A 1.85%
Dell Inspiron 1525 1.85%
HP Pavilion dv6 Notebook ... 1.85%

About Yontoo Technology

Yontoo, a subsidiary/alias of ad-hijacker Sambreel, is a publisher of ad-supported web browser extensions designed to inject and display advertisements within the browser.
Publisher URL: www.yontoo.com


user comment
No one has commented yet. Help others learn more about this software, share your comments.