Your computer is infected with malicious software? Do you have pop-ups on your PC?
If so, search this blog for removal instructions or browse computer threats by category.

Monday, September 17, 2012

Remove Yontoo Adware (Uninstall Guide)

Tell your friends:
Yontoo is adware that installs a web browser extension to display advertisements and special offers while surfing the Web. It works just fine with the major web browsers (Internet Explorer, Mozilla Firefox, Google Chrome). Usually, this adware must be installed manually but it may also come bundled with other software, even with CNET’s own installer. You probably remember all these devastating reports about CNET adding adware to software available through the website, even free and open source applications. Read more about this issue here.

A few words about the company, it was founded by a small group of people that had worked together on previous projects. Their mission is to enhance, extend and personalize everyone’s experience across all websites. Sounds great, but why so many ads?

One more thing, you can easily find other write-ups about Yontoo and Yontoo Runtime Layers with slightly different classification, for example Symantec detects Yontoo as a potentially unwanted application. And we have to say it’s rather confusing because folks who have been working on this software since 2006 have valid Symantec and McAfee certificates, not just identity verification but also malware scan. Seriously, that doesn’t make sense. Symantec states that it’s a potentially unwanted app, you know, something that you don’t want to install and at the same time they flag their site as completely safe even thought it hosts Yontoo installers. ESET, Spybot, Dr.Web classify Yontoo as adware. ESET blocks and any web requests from their website as well. TrendMicro says it’s a Trojan… well they probably went too far with such assertions. It’s hardly a Trojan horse but that doesn’t mean you should keep it. It’s up to you whether you want to keep or remove it from your machine. Maybe you find this software useful.

Probably the most widely spread web browser extension which is tied to Yontoo is called Pagerage. This browser extension allows you to modify your Facebook profile which is cool but also displays advertisements that appear to be from Facebook even thought they are usually delivered from entirely different ad networks. However, Yontoo.Pagerage is not the only web browser extension tied to Yontoo adware. Recently, we stumbled upon a FLV Player application bundled with Yontoo dependable software: Banner Gadgets, FreeTwitTube, ezLooker, Buzzdock and Wajam. In this particular case, Yontoo had proper EULA and privacy policy. But we know for sure that certain extensions get installed without proper display of an EULA and privacy policy. No doubt about that.

In the image below, you can clearly see how Yontoo adware and associated applications changed Google search page. There are two blocks of sponsored ads instead of one and there’s also this Wajam social search app on the right side of the screen. It messes things up rather badly.

All in all, Yontoo isn’t a very widespread infection. And it’s definitely not the most dangerous infection. But that doesn't mean it is not used much. To remove Yontoo and associated applications from your computer, please follow the removal instructions below. If you have any questions about this adware or potentially unwanted application or would like to share information that isn’t covered in this page, please leave a comment. Good luck and be safe online!

Added: Yontoo 1.10.03 is the current version of this software, however, there are still enough websites that serve Yontoo 1.10.02 or even older version. Removal instructions remain the same for both versions.


Yontoo removal instructions:

1. First of all, download recommended anti-malware software and run a full system scan. It will detect and remove this infection from your computer. You may then follow the manual removal instructions below to remove the leftover traces of this browser hijacker. Hopefully you won't have to do that.

2. Go to the Start Menu. Select Control PanelAdd/Remove Programs.
If you are using Windows Vista or Windows 7, select Control PanelUninstall a Program.

3. Search for Yontoo (1.10.03 or 1.10.02) in the list. Select the program and click Remove button. By the way, it's a good idea to remove any other application that could be tied to Yontoo adware.

If you are using Windows Vista/7, click Uninstall up near the top of that window.

4. Select the second option to completely remove Yontoo from your computer and click Next.

5. Click Yes to confirm uninstall and remove Yontoo Adware from your computer.

Remove Yontoo browser add-ons Internet Explorer:

1. Open Internet Explorer. Go to ToolsManage Add-ons.

2. Remove all Yontoo LLC components: Yontoo Api and Yontoo. Close the window.

Remove Yontoo browser extention in Mozilla Firefox:

1. Open Mozilla Firefox. Go to ToolsAdd-ons.

2. Select Extensions. Remove Yontoo Runtime extension. Close the window.

That's it!

Remove Yontoo browser extension in Google Chrome:

1. Click on Customize and control Google Chrome icon. Go to ToolsExtensions.

2. Select Yontoo and click on the small recycle bin icon to remove the toolbar.

Associated Yontoo adware files and registry values:

  • C:\Program Files\Yontoo\YontooIEClient.dll
Registry values:
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\YontooIEClient.Layers
  • HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc
Tell your friends:


Anonymous said...

Thanks a lot! Very useful guide, nice work really

Anonymous said...

Thank you, thank you! The Yontoo banner ads were driving me crazy.

Anonymous said...

THANK YOU! you've made my day. Brilliant description for us who are not experts. You are a modern day hero!

Anonymous said...

HELP! Win XP Pro with all updates updated. When I go to the Add/Remove programs and try to remove this program [Yontoo 1.10.02] I get a pop up that says:
Tarma Installer: Setup Initialization error
Nothing happens, cannot get it to uninstall. This is very frustrating. I have heard some people say to update the Yontoo, then uninstall it, but I cannot find anywhere to download an update. Please post a response? Thanks In advance!

Admin said...

I don't know how to update it either. There may be an uninstaller located here:

C:\Program Files\Yontoo\

If you can't find it then delete Yontoo folder manually.

blogyah said...

im trying to un install yontoo, but when i click on the un install button i get an error message that reads : "Setup initialisation error" from Tarma installer. Not sure what im meant to do about this. cheers

Anonymous said...

Thanks for the useful guide.

I've got windows 8 - have removed all yontoo tabs and uninstalled programme but found a yontoo folder under Program Files (x86) -can't delete folder or file inside Y2Desktop.Updater.exe_old
I get the message that the file is in use. Any ideas?

Admin said...

First of all, restart your computer. Then open up Task Manager and end ALL non-Windows processes. Try to remove the Yontoo folder.

Mrs. V said...

Can anyone help me?! These Buzzdock adds are SO annoying!! I've tried to uninstall Yontoo but every time I click the uninstall button a pop-up called Tarma Installer: says, "Setup Initialization error." I can't get past this! HELP!!!!

Gary Anderson said...

I cannot delete Yontoo Desktop. It is not showing up on progams. But it does show up when typing in a search. Yontoo Desktop application. It still shows up as running in task manager. I have tried deleting it manually but it says I dont have permission. I have Mcafee and malwarebytes but neither of these are helping me get rid of this

digiSys_gft said...

In order to uninstall the "Tarma Installer", you have to first stop the process by killing it in the Task Manager.

Cookiegirl said...

Ive tried various things, but when I try to uninstall Yontoo I get "Error 2 while loading Archive. System cannot find the file specified". However, Chrome has been sending me messages to ask me to uninstall the program!!!!!!!!!!!! I'm at a loss - any advice?


Anonymous said...

I've gotten rid of it everywhere i could but every 10 minutes, my Norton Internet Security tells me that it blocked safety risk Yontoo.C
It has been doing this for the last two days and won't stop. Does this mean that Yontoo is repeatedly trying to download?