BleepingComputer.com: What is yontoo layers client?

Just removed this for a customer last week. It was giving him problems with IE 8 on Vista, popping up Insecure Content Warnings every time he used online banking, and a couple other things. He didn't know how it got there, never used PageRage and didn't want to start. It seemed the thing had got installed with something else, which on the face of it, makes it less than a desirable program.

Programs and Features, (Should be called Add/Remove Programs: whenever MSFT gets something right they never fail to change it) then removed Yontoo Layers as the gentleman above described. Then searched the registry for Yontoo and removed fifteen or so entries. Then searched his hard drive for same and removed three or four folders. That seemed to do it.

For personal use, removing it with Revo Uninstaller should probably suffice. Revo is better than Programs & Features, or Add/Remove Programs.

I just disabled the Yontoo add-ons because i suddenly was getting those spurious little underlined words, which usually end up linking to other articles or pop-up definitions of the word, but with Yontoo, it would bring up generally unrelated or barely related web site links as adverts. Malware, maybe not. Spamware or tracking cookies? I would say definitely so; if not directly a problem, then indirectly could easily be so. Bad ju-ju.

Ignotus, on 14 January 2012 - 02:04 AM, said:

I always say if all else fails read the fine print!! I am on my way there now---->
Thanks! D'Aun @billidaunsb

This post has been edited by D'Aun: 11 March 2012 - 07:31 AM

I disinfect PCs for a living. As far as I am concerned, Yontoo is malware and it is spyware. Why? It installs without asking permission,
does irritating things to your browsers and collects information about whereyou are browing.
I consider it a browser hijacker in some ways. It is not easy for an end user to remove.
To uninstall it go to your control panel and uninstall it. Then use msconfig and see if it's in there. Finally run Hijackthis and remove
it's entries there. Now run CCleaner, run the cleaner part and then run the registry scan to remove it there. Restart your PC.
I recently had it install itself silently on one of my PCs just from visiting a website to look around.
I do not have a Facebook account and never did - never will, so it did not come from there.