84,488,480 programs installed

Should I remove ToggleMark?

What percent of users and experts removed it?
84% remove it16% keep it
Overall Sentiment
What do people think about it?
(click star to rate)
How common is it?
Global Rank #18,755
United States Rank #15,792
Reach 0.0123%
Lifespan of installation (until removal)
< 4.10 days
121.03 days >
Average installed length: 63.59 days


2015.04.07.232334 0.41%
2014.09.08.132646 1.23%
2014.09.07.132621 0.41%
2014.09.07.052620 0.41%
2014.09.06.172619 0.41%
2014.09.06.052616 0.41%
2014.09.06.012614 0.41%
2014.09.05.074213 0.82%
2014.09.04.215912 0.82%
2014.09.04.172614 0.82%
2014.09.04.132617 0.41%
2014.09.04.012605 0.41%
2014.09.03.132602 0.82%
2014.09.03.092606 0.41%
2014.09.03.012559 0.41%
2014.09.02.212557 0.41%
2014.09.02.075824 0.41%
2014.09.01.195827 1.65%
2014.09.01.115814 0.41%
2014.08.31.195819 0.82%
2014.08.31.115808 0.82%
2014.08.30.235803 0.82%
2014.08.30.195803 0.41%
2014.08.30.155802 0.41%
2014.08.29.235809 0.82%
2014.08.29.195759 0.82%
2014.08.29.065659 0.82%
2014.08.28.115746 1.23%
2014.08.28.024915 0.41%
2014.08.27.235745 0.41%
2014.08.27.202359 0.41%
2014.08.26.174701 0.41%
2014.08.26.112648 0.41%
2014.08.25.204926 0.41%
2014.08.25.163709 0.41%
2014.08.25.003706 0.41%
2014.08.24.203702 0.41%
2014.08.24.123703 0.41%
2014.08.23.203659 0.41%
2014.08.23.163658 0.41%
2014.08.22.152942 0.41%
2014.08.21.232937 0.41%
2014.08.21.200531 1.23%
2014.08.21.072931 0.41%
2014.08.21.032928 0.41%
2014.08.20.192924 0.41%
2014.08.19.232916 0.41%
2014.08.19.112911 0.82%
2014.08.19.072909 0.41%
2014.08.19.032908 0.82%
2014.08.18.192905 0.82%
166 versions


What is ToggleMark?  (from Yontoo Technology)

ToggleMark offers a free search and translation utility in exchange for agreement to install the software and receive advertising. ToggleMark was installed on this computer by a user of this computer either through this website or through an advertised offer while installing another product.


ToggleMark is a software program developed by Yontoo Technology. The most common release is 2014.09.01.195827, with over 33% of all installations currently using this version. Upon being installed, the software adds a Windows Service which is designed to run continuously in the background. Manually stopping the service has been seen to cause the program to stop functing properly. It adds a background controller service that is set to automatically run. Delaying the start of this service is possible through the service manager. It adds a Browser Helper Object (BHO) to Internet Explorer. The primary executable is named ToggleMark.FirstRun.exe. A majority of users end up uninstalling this less than a week of it being installed. The setup package generally installs about 12 files and is usually about 4.88 MB (5,115,573 bytes). Relative to the overall usage of users who have this installed on their PCs, most are running Windows 7 (SP1) and Windows 10. While about 53% of users of ToggleMark come from the United States, it is also popular in France and United Kingdom.
  • Malware detected in the program
  • Integrates into the web browser
  • Installs a Windows Service
  • Typically distributed through a pay-per-install bundle
  • This program has a poor reputation
  • Most users and experts agree, you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in ToggleMark.
ToggleMark.FirstRun.exe (a301f6dd93f581a67d0941ca79e71233) has been flagged by the following 8 scanners:
Anti-Virus softwareVersionDetection
Avira AntiVir APPL/BrowseFox.Gen
Baidu-International Adware.MSIL.BrowseFox.bG
ESET-NOD32 8.10144 a variant of MSIL/BrowseFox.G
Malwarebytes v2014.08.06.09 PUP.Optional.Sambreel.A
McAfee 5600.7046 Artemis!A301F6DD93F5
McAfee-GW-Edition 7.7046 Artemis!A301F6DD93F5
Qihoo-360 HEUR/Malware.QVM03.Gen
TrendMicro-HouseCall 7.2.218 Suspicious_GEN.F47V0703
ToggleMarkBHO.dll (54e84b9ad00f7a0010e2b84688be5c5d) has been flagged by the following 40 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware Trojan.Generic.12393525
Agnitum Outpost Trojan.BPlug!
AhnLab-V3 2015.03.23.01 Win-PUP/BrowseFox.Gen
ALYac Trojan.Generic.12393525
Antiy-AVL Trojan/Win32.TSGeneric
avast! 8.0.1489.320 Win32:BrowseFox-HL [PUP]
AVG BrowseFox.F
Avira ADWARE/BrowseFox.Gen2
AVware Yontoo (fs)
Baidu-International Adware.Win32.BrowseFox.bI
Bitdefender 7.2 Trojan.Generic.12393525
Bkav FE W32.HfsAdware.5B78
Clam AntiVirus Win.Adware.Browsefox-3
Comodo Security 21505 Application.Win32.BrowseFox.JM
Cyren W32/S-5aefa7b7!Eldorado
Dr.Web Trojan.Yontoo.1741
Emsisoft Anti-Malware Trojan.Generic.12393525 (B)
ESET-NOD32 11361 a variant of Win32/BrowseFox.O potentially unwanted
Fortinet FortiGate 5.0.999.0 Riskware/BrowseFox
F-Prot W32/S-5aefa7b7!Eldorado
F-Secure 11.0.19100.45 Trojan.Generic.12393525
G Data 25 Trojan.Generic.12393525
Jiangmin 16.0.100 AdWare/Kranet.ao
K7 AntiVirus 9.202.15342 Trojan ( 004a079f1 )
K7GW 9.202.15342 Trojan ( 004a079f1 )
Malwarebytes PUP.Optional.ToggleMark.A
McAfee BrowseFox-FRR
McAfee-GW-Edition v2014.2 BrowseFox-FRR
MicroWorld-eScan Trojan.Generic.12393525
NANO AntiVirus Trojan.Win32.BPlug.dedpsr
nProtect 2015-03-20.01 Trojan-Clicker/W32.LinkSwift.250144
Sophos 4.98.0 Generic PUA LN
SUPERAntiSpyware Adware.BrowseFox/Variant
Symantec 20141.2.0.56 Trojan.Gen.2
Tencent Trojan.Win32.Qudamah.Gen.10
Trend Micro 9.740.0.1012 TROJ_GEN.R047C0EKM14
TrendMicro-HouseCall 9.700.0.1001 TROJ_GEN.R047C0EKM14
Vba32 AntiVirus AdWare.Kranet
VIPRE Antivirus 38684 Yontoo (fs)
Zillya Backdoor.PePatch.Win32.41953
updateToggleMark.exe (2b8f33f1deb71201c501d81d25ddaf8e) has been flagged by the following 31 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware Adware.Generic.1008763
Agnitum Outpost PUA.Kranet!
AhnLab-V3 2014.11.04.00 PUP/Win32.Downloader
Antiy-AVL GrayWare[AdWare:not-a-virus,HEUR]/MSIL.Kranet
AVG ToggleMark.9B2
Avira ADWARE/BrowseFox.Gen7
AVware Yontoo (fs)
Baidu-International Adware.Win32.BrowseFox.bI
Bitdefender 7.2 Adware.Generic.1008763
CAT-QuickHeal 14.00 AdWare.MSIL.r3 (Not a Virus)
Comodo Security 19990 UnclassifiedMalware
Dr.Web Trojan.BPlug.250
Emsisoft Anti-Malware Adware.Generic.1008763 (B)
ESET-NOD32 10666 a variant of Win32/BrowseFox.H
Fortinet FortiGate 5.0.999.0 Adware/Kranet
F-Secure 11.0.19100.45 Adware.Generic.1008763
G Data 24 Adware.Generic.1008763
K7 AntiVirus 9.185.13888 Trojan ( 0049f7ad1 )
K7GW 9.185.13895 Trojan ( 0049f7ad1 )
Kaspersky not-a-virus:HEUR:AdWare.MSIL.Kranet.heur
Kingsoft AntiVirus 2013.4.9.267 Win32.Troj.Generic.a.(kcloud)
Malwarebytes PUP.Optional.ToggleMark.A
McAfee BrowseFox.c
McAfee-GW-Edition v2014.2 BrowseFox.c
MicroWorld-eScan Adware.Generic.1008763
nProtect 2014-11-03.01 Trojan-Clicker/W32.Agent.323360.F
Sophos 4.98.0 Generic PUA II
Symantec 20141.1.0.330 Trojan.Gen.2
Trend Micro 9.740.0.1012 TROJ_GEN.R0C1C0EJL14
TrendMicro-HouseCall 9.700.0.1001 TROJ_GEN.R0C1C0EJL14
VIPRE Antivirus 34494 Yontoo (fs)
       View all 79 all detections
ToggleMark has been found to be bundled with 3rd party software. If you have not purposefully installed this, you should be safe uninstalling it.

Program detailsProgram details

Displayed publisher: ToggleMark
URL: togglemark.net/support
Help link: mailto:[email protected]
Installation folder: C:\Program Files\ToggleMark
Uninstaller: C:\Program Files\ToggleMark\ToggleMarkuninstall.exe
Estimated size: 4.88 MB

Program filesFiles installed by ToggleMark

Program executable:ToggleMark.FirstRun.exe (Malware detected)
Path:C:\Program Files\ToggleMark\ToggleMark.FirstRun.exe
Additional files:
  • (Malware detected) ToggleMarkbho.dll - ToggleMark
  • 7za.exe (by Igor Pavlov) - 7-Zip (7-Zip Standalone Console)
  • ToggleMarkUn.exe
  • ToggleMarkUninstall.exe
  • (Malware detected) updateToggleMark.exe

Program behaviorsBehaviors exhibited

Internet Explorer BHO
  • ToggleMarkBHO.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'ToggleMark' with the class of {dc59a866-959c-4638-a191-c13177d0bd68}.
  • updateToggleMark.exe runs as a service named 'Update ToggleMark' (Update ToggleMark).

How do I remove ToggleMark?

You can uninstall ToggleMark from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program ToggleMark, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove ToggleMark.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

How do I reset my web browser?

If your web browser homepage and search settings have been modfied by ToggleMark you can restore them to their previous default settings.
Microsoft Internet Explorer
Mozilla Firefox
Google Chrome

Win 7 (SP1) 45%
Win XP 2%
Windows Service? Yes
(Installs a service)
Uninstall it 84%
Keep it 16%

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 7 50.21%
Windows 10 41.56%
Windows Vista 6.17%
Windows XP 2.06%
Which OS releases does it run on?
Windows 7 Home Premium 27.39%
Windows 8.1 26.97%
Windows 7 Professional 12.86%
Windows 8 9.54%
Windows 7 Ultimate 7.47%
Windows Vista Home Premiu... 5.81%

Distribution by countryGeography

53.47% of installs come from the United States
Which countries install it?
  United States 53.47%
  France 10.56%
  United Kingdom 8.25%
  Brazil 5.61%
  Italy 4.62%
  Canada 3.63%
  Mexico 2.64%
  Germany 1.98%
  Netherlands 1.65%
  India 1.65%
  Belgium 1.32%
  Poland 0.99%
  DK 0.66%
  Norway 0.66%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Hewlett-Packard 31.84%
Acer 18.99%
Dell 17.32%
Toshiba 10.61%
ASUS 10.06%
Lenovo 6.15%
Samsung 2.23%
Sony 1.12%
MSI 0.56%
Common models
HP 2000 Notebook PC 3.15%
ASUS All Series 3.15%
HP Pavilion dv7 Notebook ... 3.15%
HP Pavilion 15 Notebook P... 2.36%
HP 15 Notebook PC 2.36%
Dell Inspiron 3521 2.36%

About Yontoo Technology

Yontoo, a subsidiary/alias of ad-hijacker Sambreel, is a publisher of ad-supported web browser extensions designed to inject and display advertisements within the browser.
Publisher URL: www.yontoo.com


user comment
No one has commented yet. Help others learn more about this software, share your comments.