Yontoo Pagerage. How to remove? (Uninstall guide)

Yontoo Pagerage is also known as Yontoo virus, Yontoo Pagerage hijack | Type: Browser Hijackers
Severity scale:  
  (52/100)

What is Yontoo Pagerage?

Yontoo PageRage (can also be found as Yontoo, Yontoo virus, Yontoo hijacker, etc.) is a browser extension that allows users to personalize their Facebook layouts by changing the theme, layout and similar things. This browser extension is very popular but it's not because of its capabilities. Before downloading it to your computer, you should know that this program has already been included to adware, browser hijacker and potentially unwanted program categories. It can be detected with a help of various security softwares, so if you feel that you want to remove it from your computer, you should select anti-spyware, update it and run a full system scan with its help. Why dis these antivirus companies decided to include Yontoo to PUP category? One of the most important reasons is annoying pop-up advertisements that may start appearing on your PC's desktop every time when you start your browsing on the Internet. Besides, beware that this program may start causing redirects to suspicious websites, slow downs and other things that are mostly initiated on all web browsers, including Internet Explorer, Google Chrome, Mozilla Firefox and other ones.

Beware that in most of the cases Yontoo virus appears on the PC after installing other applications. This method is mostly called as bundling and it is initiated without proper users' permission asked. How can you avoid it? Please check the next paragraph for that. If you think that it's too late because PageRage has already integrated its ads into your Facebook's profile and other websites, you should stay away from them. In addition, you should be very careful with its different kinds of banners because they can easily trick you into visiting suspicious websites. If you haven't installed this program manually, we recommend eliminating Yontoo hijacker. The easiest way to do that is to scan your computer with updated SpyHunter or other reputable anti-spyware.

How can Yontoo hijack MY COMPUTER?

Yontoo PageRage can be downloaded from its official website or the sites that are included to its distribution. Besides, you should also beware that this program can sneak inside the system in a bundle with other software, like freeware and shareware. You can prevent its infiltration by unchecking all unfamiliar entries that show up on installation windows. Please, pay attention to this distribution method, because it clearly shows that PageRage initiates some doubts about a proper privacy policy. If you are annoyed to death by its continuous pop-up advertisements and banners, follow the guide below to get rid of PageRage for good.

HOW CAN I REMOVE YONTOO PAGERAGE virus?

You should be capable of removing Yontoo Pagerage via Add/Remove feature in Windows. However, sometimes it may fail because it is known that this program drops registry entries and other components on the system that can't be eliminated like that. If you haven't installed Yontoo manually, you should think about scanning your computer with updated anti-spyware. It will help you to get rod of all suspicious programs and files. 

Automatic Yontoo Pagerage Removal Guide

You can remove Yontoo Pagerage automatically with a help of one of these programs: SpyHunter, STOPzilla, Malwarebytes Anti Malware. We recommend these applications because they can easily delete potentially unwanted programs and viruses with all their files and registry entries that are related to them.

It might be that we are affiliated with any of our recommended products. Full disclosure can be found in our Agreement of Use.
By downloading any of provided Anti-spyware software to remove Yontoo Pagerage you agree with our Privacy Policy and Agreement of Use.
Download
remover for Yontoo Pagerage
Compatible with OS X
Webroot SecureAnywhere AntiVirus is recommended remover to uninstall Yontoo Pagerage. You should confirm using free trial that it detects current version of parasite.
Not using OS X? Download a remover for Windows.
Do it now!
Download
remover for Yontoo Pagerage Happiness
Guarantee
Compatible with Microsoft
SpyHunter is recommended remover to uninstall Yontoo Pagerage. You should confirm using free trial that it detects current version of parasite.
more than 40.000.000 downloads!
What to do if you failed to remove the infection?
If you failed to remove Yontoo Pagerage using Webroot SecureAnywhere AntiVirus SpyHunter, read here how to submit a support ticket or submit a question to our support team and provide as much details as possible.
Alternate Software
STOPzilla
We are testing STOPzilla's efficiency at removing Yontoo Pagerage (2012-01-11 09:02:30)
Malwarebytes Anti Malware
We are testing Malwarebytes Anti Malware's efficiency at removing Yontoo Pagerage (2012-01-11 09:02:30)
XoftSpySE Anti Spyware
We are testing XoftSpySE Anti Spyware's efficiency at removing Yontoo Pagerage (2012-01-11 09:02:30)
Zemana Antimalware
Virus Removal Phone Support
1-877-657-9614
Help Line to remove Yontoo Pagerage
Yontoo Pagerage screenshot
Yontoo Pagerage snapshot

Yontoo Pagerage manual removal

Kill processes:
Setup.exe
Delete registry values:
HKEY_CLASSES_ROOT\YontooIEClient.Api.*
HKEY_CLASSES_ROOT\YontooIEClient.Api
HKEY_CLASSES_ROOT\YontooIEClient.Layers.*
HKEY_CLASSES_ROOT\YontooIEClient.Layers
HKEY_CLASSES_ROOT\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
HKEY_CLASSES_ROOT\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
HKEY_CLASSES_ROOT\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
HKEY_LOCAL_MACHINE\SOFTWARE\Tarma Installer\Components\{3E454121-D681-4BBE-AC01-9D4DC40D2A04}
HKEY_LOCAL_MACHINE\SOFTWARE\Tarma Installer\Components\{4E4AE263-5CE6-4307-84B6-B9BFF5729A44}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\".
Delete the registry key "YontooIEClient.DLL" at "HKEY_CLASSES_ROOT\AppID\niapdbllcanepiiimjjndipklodoedlc
Unregister DLLs:
YontooIEClient.DLL
_Setup.dll
_Setupx.dll

Delete files:
<$COMMONAPPDATA>\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_Setup.dll
<$COMMONAPPDATA>\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_Setupx.dll
<$COMMONAPPDATA>\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\Setup.dat
<$COMMONAPPDATA>\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\Setup.exe
<$COMMONAPPDATA>\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\Setup.ico
<$LOCALSETTINGS>\Temp\YontooTix2700750.log
<$PROGRAMFILES>\Yontoo Layers\YontooIEClient.dll
Delete directories:
<$APPDATA>\Mozilla\Firefox\Profiles\<$ENV(Yontoo_ff_path)>\extensions\[email protected]
<$COMMONAPPDATA>\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
<$PROGRAMFILES>\Yontoo Layers

Manual Yontoo Pagerage Removal Guide

Quick menu:

Step 1: Uninstall Yontoo Pagerage and related programs

Windows Mac OS X Step 2
Windows 7 / Vista / XP
  • Click Start Control Panel Programs and Features (if you are Windows XP user, click on Add/Remove Programs).
Windows 10 / Windows 8
  • If you are Windows 10 / Windows 8 user, then right-click in the lower left corner of the screen. Once Quick Access Menu shows up, select Control Panel and Uninstall a Program.
Uninstall Yontoo Pagerage and related programs
  • Here, look for Yontoo Pagerage or any other recently installed suspicious programs.
  • Uninstall them and click OK to save these changes.
Right click on each of suspicious entries and select 'Uninstall'
Windows Mac OS X Step 2

If you are using OS X, click Go button at the top left of the screen and select Applications.

Cick 'Go' and select 'Applications'

Wait until you see Applications folder and look for Yontoo Pagerage or any other suspicious programs on it. Now right click on every of such entries and select Move to Trash.

Click on every malicious entry and select 'Move to Trash'

Step 2: Remove Yontoo Pagerage from Windows shortcuts

Step 3
  • Right click on the shortcut of Mozilla Firefox and select Properties.
Right click on browsers' icon and select 'Properties'
  • Go to Shortcut tab and look at the Target field. Delete malicious URL that is related to your virus.
Select 'Shortcut' tab and delete 'http://isearch.babylon.com...' or other suspicious URL

Repeat steps that are given above with all browsers' shortcuts, including Internet Explorer and Google Chrome. Make sure you check all locations of these shortcuts, including Desktop, Start Menu and taskbar.

Step 3: Remove Yontoo Pagerage from each of your web browsers

Internet Explorer Mozilla Firefox Google Chrome Safari Step 4
Remove dangerous add-ons
  • Open Internet Explorer, click on the Gear icon (IE menu) on the top right corner of the browser and choose Manage Add-ons.
Click on menu icon and select 'Manage add-ons'
  • You will see a Manage Add-ons window. Here, look for Yontoo Pagerage and other suspicious plugins. Disable these entries by clicking Disable:
Right click on each of malicious entries and select 'Disable' Change your homepage if it was altered by virus:
  • Click on the gear icon (menu) on the top right corner of the browser and select Internet Options. Stay in General tab.
  • Here, remove malicious URL and enter preferable domain name. Click Apply to save changes.
Delete malicious URL, enter your desired domain name and click 'Apply' to save changes Reset Internet Explorer
  • Click on the gear icon (menu) again and select Internet options. Go to Advanced tab.
  • Here, select Reset.
  • When in the new window, check Delete personal settings and select Reset again to complete Yontoo Pagerage removal.
Go to 'Advanced' tab and click on 'Reset' button. Now select 'Delete personal settings' and click on 'Reset' button again
Internet Explorer Mozilla Firefox Google Chrome Safari Step 4
Remove dangerous extensions
  • Open Mozilla Firefox, click on the menu icon (top right corner) and select Add-ons Extensions.
Click on menu icon and select 'Add-ons'
  • Here, select Yontoo Pagerage and other questionable plugins. Click Remove to delete these entries.
Select 'Extensions' and look for malicious entries. Click 'Remove' to get rid of each of them Change your homepage if it was altered by virus:
  • Click on the menu (top right corner), choose Options General.
  • Here, delete malicious URL and enter preferable website or click Restore to default.
  • Click OK to save these changes.
When in 'General' tab, delete malicious URL from 'Home Page' section or click on 'Restore to Default' button. Click 'OK' to save changes Reset Mozilla Firefox
  • Click on the Firefox menu on the top left and click on the question mark. Here, choose Troubleshooting Information.
Click on menu icon and then on '?'. Select 'Troubleshooting Information'
  • Now you will see Reset Firefox to its default state message with Reset Firefox button. Click this button for several times and complete Yontoo Pagerage removal.
Click on 'Reset Firefox' button for a couple of times
Internet Explorer Mozilla Firefox Google Chrome Safari Step 4
Delete malicious plugins
  • Open Google Chrome, click on the menu icon (top right corner) and select Tools Extensions.
Click on menu icon. Select 'Tools' and 'Extensions'
  • Here, select Yontoo Pagerage and other malicious plugins and select trash icon to delete these entries.
Look for malicious entries and delete each of them by clicking on the Trash bin icon Change your homepage and default search engine if it was altered by your virus
  • Click on menu icon and choose Settings.
  • Here, look for the Open a specific page or set of pages under On startup option and click on Set pages.
After clicking on menu and 'Settings', select 'Set pages'
  • Now you should see another window. Here, delete malicious search sites and enter the one that you want to use as your homepage.
Click 'X' to remove malicious URLs
  • Click on menu icon again and choose Settings Manage Search engines under the Search section.
When in 'Settings', select 'Manage search engines...'
  • When in Search Engines..., remove malicious search sites. You should leave only Google or your preferred domain name.
Click 'X' to remove malicious URLs Reset Google Chrome
  • Click on menu icon on the top right of your Google Chrome and select Settings.
  • Scroll down to the end of the page and click on Reset browser settings.
When in 'Settings', scroll down to 'Reset browser settings' button and click on it
  • Click Reset to confirm this action and complete Yontoo Pagerage removal.
Click on 'Reset' button to complete your removal
Internet Explorer Mozilla Firefox Google Chrome Safari Step 4
Remove dangerous extensions
  • Open Safari web browser and click on Safari in menu at the top left of the screen. Once you do this, select Preferences.
Click on 'Safari' and select 'Preferences'
  • Here, select Extentions and look for Yontoo Pagerage or other suspicious entries. Click on the Uninstall button to get rid each of them.
Go to 'Extensions' and uninstall malicious add-ons Change your homepage if it was altered by virus:
  • Open your Safari web browser and click on Safari in menu section. Here, select Preferences as it was displayed previously and select General.
  • Here, look at the Homepage field. If it was altered by Yontoo Pagerage, remove unwanted link and enter the one that you want to use for your searches. Remember to include the "http://" before typing in the address of the page.
When in 'General', delete malicious URL and enter your desired domain name Reset Safari
  • Open Safari browser and click on Safari in menu section at the top left of the screen. Here, select Reset Safari....
Click on 'Safari' and select 'Reset Safari...'
  • Now you will see a detailed dialog window filled with reset options. All of those options are usually checked, but you can specify which of them you want to reset. Click the Reset button to complete Yontoo Pagerage removal process.
Select all options and click on 'Reset' button

Step 4: Complete Yontoo Pagerage removal

After uninstalling this potentially unwanted program (PUP) and fixing each of your web browsers, we recommend you to scan your PC system with a reputable anti-spyware. This will help you to get rid of Yontoo Pagerage registry traces and will also identify related parasites or possible malware infections on your computer. For that you can use our top-rated malware remover: SpyHunter, STOPzilla or Malwarebytes Anti Malware.

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Geolocation of Yontoo Pagerage

Map reveals the prevalence of Yontoo Pagerage. Countries and regions that have been affected the most are: Colombia, Peru, Ecuador, Mexico and Chile.

Removal guides in other languages


Information added: 03/24/15 04:33; information updated: 03/24/15 04:33

Additional resources

Attention: If you know know a reputable website reated to security threats, please add a link here: add url

Comments on Yontoo Pagerage

0
0
Cathie
I ran spybot & it found several things 7 was able to remove all except Yontoo. I have looked in add/remove programs & it is not there that I can see. I also disabled Send to one note & blog this in windows live writer in internet options, but I dont see anything else in there that looks suspicious. what am I missing?
0
0
Granuhosito
For a few months I have had annoying vertical banners at the bottom and on the left hand side of my browsers, Firefox and Chrome. I couldnt find the reason, so I uninstalled Firefox and then found an add-on called AdBlock for Chrome which stopped the problem.
I noticed that I didnt have the same banners in Opera, so I started using this browser a lot.

Now I know that it was due to Yontoo. I have no clue how this thing got installed in my computer. I got to know when I run "Avast Browser Cleanup", which I am using in trial mode. I have been able to remove it easily with this feature from Avast, but you may try to remove it by following the methods described above in this article, because "Avast Browser Cleanup" is part of the pay version of Avast.

I guess the first thing I should have done a loooong time ago is to have a look at the installed browsers add-ons and then try to find information on the Internet.
0
0
Karin
hi, I tried to install Spy Hunter and up came "error message 1721 - there is a problem with this windows installer package. a program require to complete this install could not be run. contact your support personnel."
what can I do now?
0
0
J5
Go to this site it will help you to uninstall your Yontoo problem systematically follow the instructions carefully.
if possible to uninstall completely "Download and run the removal tool"
http://www.yontoo.com/Support.aspx
0
0
Patricia
Hello there I am getting an error message to get rid of yontoo how do I get this thing out of my add & remove ?????
0
1
Paukat
use SpyHunter
0
3
Leslie
I need help using to going in manually on a virus called yontoo.

Post a comment

Attention: Use this form only if you have additional information about Yontoo Pagerage parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Home page Name



«

(All fields are required)
Like us on Facebook
News
Recent Malware
Read on mobile
Ask us
Press Mentions
I failed to remove Yontoo Pagerage using SpyHunter.

Email


Close
add text box
rss feed
help other
Spreading the knowledge: It is very hard to fight against computer parasites on the Internet alone. If you have a website, we would be more than happy if you would like to cooperate and help us spread the information about latest threats. Remember, knowledge is the most powerful weapon. Help your visitors protect their computers!