Related Posts

How To Remove Yontoo Virus – Uninstall Yontoo Toolbar Malware Browser Hijacker (Yontoo Layers Client)

What is Yontoo (Yontoo Toolbar, Yontoo Layers Client)?

Yontoo, Yontoo web apps, Yontoo Layers Client, PageRage, My Super Cheap, DropDownDeals, and all other Yontoo products and associated software are essentially unethical web applications Yontoo and third parties can utilize to bundle with for revenue or install onto browsers and computers without consent to initiate a plethora of different third party malware infections and symptoms. So many categories of malware and viruses are associated with Yontoo such as adware, spyware, and browser hijackers that it may be difficult to simply remove Yontoo programs including Yontoo Layers Client.

Remove Yontoo Virus

Yontoo is often referred to as the Yontoo virus but is considered malware by cyber security experts because Yontoo can infect browsers and computers without direct permission. Yontoo may change home pages and provided search engines causing browsers to start up at websites that associate with, sponsor, or use Yontoo as well as searches inputted into the browser address bar to redirect to unwanted websites.

Is Yontoo safe to use?

No, Yontoo and associated Yontoo products are not safe to use for any purpose whatsoever (with exceptions to criminals, and black hats, which you are not). Yontoo is associated with so much malware that if Yontoo is on your system it is considered a very high level or risk. Your computer is extremely vulnerable to losing complete functionality and you are vulnerable to malware, viruses, and Trojans capable of collecting personal information such as credit card numbers and passwords via key-loggers, etc.

Yontoo related infections are too often related to cyber criminal activity involving credit theft, extortion, identity theft, and more.

Remove Yontoo, Yontoo Toolbars, and Yontoo Layers Client immediately using the easy steps below to protect yourself and computer.

How To Remove Yontoo Virus – And Third Party Malware

  1. Antivirus & Anti-Malware Software
  2. System Restore
  3. Uninstall Yontoo Programs
  4. Remove Yontoo Add-ons, Extensions, And Toolbars
*Yontoo Virus Removal Tips

I can not stress enough how many different categories of malware are associated with Yontoo. If infected by the Yontoo virus, you may experience a series of several different symptoms including in text advertisements and a slow, sluggish computer.

If your internet browser settings such as Home Page and Provided Search Engine (internal browser search engine) without your consent you are facing symptoms of a common browser hijack.

Yontoo Manual Removal Information

Manually removing Yontoo is not suggested since it primarly bundles with other malware. If you wish to attempt to remove Yontoo and Yontoo Layers Client manually, this information can assist you.

Yontoo Files
Yontoo Folder Locations
%ProgramFiles%\Yontoo Layers Client for Internet Explorer
%ProgramFiles%\Yontoo Layers Runtime
%ProgramFiles%\Drop Down Deals
%ProgramFiles% (x86)\Yontoo
Yontoo Registy Entires, Keys, & Values

Please note, this list is compiled of associated registry entries and may need to be edited or updates.

To access Window’s Registry Editor, type regedit into the Start Menu search field and press Enter.

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2102}
 IE:64bit: - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" ={searchterms}&l=dis&o=HPNTDF
 IE:64bit: - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2102}: "URL" ={searchTerms}
 IE - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2102}
 IE - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" ={searchterms}&l=dis&o=HPNTDF
 IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2102}: "URL" ={searchTerms}
 IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" ={searchTerms}&SearchSource=4&ctid=CT2786678
 IE - HKU\S-1-5-21-1677838086-1244034719-3675916251-1001\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
 IE - HKU\S-1-5-21-1677838086-1244034719-3675916251-1001\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" ={searchTerms}&affID=109217&tt=280612_7_&babsrc=SP_ss&mntrId=a883be400000000000008ca98265595d
 [2012/07/02 15:11:14 | 000,000,000 | ---D | M] (Babylon) -- C:\Program Files (x86)\Mozilla Firefox\extensions\
 O2 - BHO: (Yontoo) - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll (Yontoo LLC)
 O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
 O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
 O3 - HKU\S-1-5-21-1677838086-1244034719-3675916251-1001\..\Toolbar\WebBrowser: (no name) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No CLSID value found.
 O4 - HKU\S-1-5-21-1677838086-1244034719-3675916251-1001..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED File not found
 [2012/07/02 15:10:37 | 000,000,000 | ---D | M] -- C:\Users\Tommy-\AppData\Roaming\Babylon

1. Anti-Malware Software (Detect And Remove Malware)

Malwarebytes is the most recommended Antivirus / Anti-Malware software used to scan, detect, and remove malware. View other Antivirus recommendations. Use either free or paid versions to perform a full system scan to detect and remove TornTV and third party malware infecting your system.
Remove Virus

2. System Restore  (Troubleshoot)

Perform a system restore to an automatic restore point created by Window’s each week and during system updates. System Restores can be very helpful to remove all types of malware including browser hijackers. They can even be used to remove browser add-ons and extensions.

3. Uninstall Yontoo (Yontoo Web Apps, Yontoo Layers Client , etc.)

Yontoo may install as a standalone or install the Yontoo Layers Client alongside third party platforms such as Torntv and RageRage.

If Yontoo is present on your system remove the application(s) immediately and search for any other suspicious program and remove them as well.

1. Access Window’s Start Menu and select Control Panel

2. Select Uninstall a program or Add and remove programs

3. Search for an application titled Yontoo or related to Yontoo (Yontoo Layers Client)  in the list of installed programs, double click them to uninstall or select them and click the Uninstall button. Please note, there many be more than 1 unwanted application installed, check for other suspicious programs including Torntv and a large amount of other possibilities.

Uninstall Yontoo

4. Once the intent to remove Yontoo via the uninstaller is initiated, Yontoo may prompt a few windows before uninstalling the program is successful. The first window that usually prompts is the Change Installation window shown below. Click the radio option that reads:

Click this option to completely remove Yontoo. Warning, you will lose all dependent applications.

Remove Yontoo Malware

5. A final notification will prompt, click YES. Uninstalling Yontoo is now complete.

Yontoo Web Apps Removal


Important! Yontoo is a shared web app component. If you remove it, Yontoo Web Apps will no longer work.

In order to completely remove Yontoo, uninstall must close your web browsers.

Click Tes to close your browsers and remove Yontoo.

click No to remove Yontoo without closing your browsers (files in use may be left behind).

Click Canel to abort uninstall and leave Yontoo on your computer.

4. Remove TornTV (Add-on, Extension, Toolbar)

Remove Yontoo add-ons, extensions, and Toolbars and third party browser helper objects negatively affecting your browser and system.

To view a list of associated BHOs please refer to a previous post about Text Enhance.

Mozilla Firefox

1. Click Tools and select Add-ons. (Ctrl+Shift+A)

2. On the Extensions and Plugin look for Yontoo and associated add-ons and remove them.

Microsoft Internet Explorer

1. Click Tools and select Manage add-ons.

2. On the Toolbars and Extensions tab look for Yontoo and associated add-ons and remove them.

Google Chrome

1. Click on the Wrench or 3 bar icon next to the address bar and navigate to Tools > Extensions.

2. Look for Yontoo and associated extensions and remove them by clicking the trashcan icon immediately adjacent to the add-on/extension.

Remove Yontoo Toolbar Virus Google Chrome


Leave a Reply

Your email address will not be published.

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

6 replies to “How To Remove Yontoo Virus – Uninstall Yontoo Toolbar Malware Browser Hijacker (Yontoo Layers Client)

  1. Alex

    thanks for the help i noticed it was on by accident and was trying to get it off for a while but as soon as i found your helpful tips i got it done right away good job and great walkthrough thx

  2. Harvey High

    Thank you for this very important info. Everyone should be made aware of this bad maliscious virus. I appreciate people like you. Thank you!!!

  3. Brian Starr-Nolan

    In attempting to remove Yontoo [from Control Panel – Uninstall] I get this message from TARMA UNINSTALLER: Error 2 While loading archive the system cannot find the file specified [ie, \setup.dat]

    What next?

  4. Steve

    Thanks for the information Sean. Much appreciated.
    – I have Yontoo installed on my computer. I am about to do the the things that you said to get it and other applications off. I don’t know how they got on. I guess because my wife lets our son use the computer too often and he sometimes downloads games or utilities.