I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
Adware Yontoo
Also known as: Trojan Siggen, Trojan Generic
SHA256: 978744141ef710f85656c6d9c3510e791fdab38326c5a845cd8611c28924e3a9
SHA1: 55693c2a5ed9bd1bfcdb0928b5a3a8dfb92d9b16
MD5: 5d4ea25746448a8f75b57816569b24e7
File size: 1055240 bytes
Created files:
%Program Files%\Yontoo\OptChrome.exe – Adware Yontoo
%Program Files%\Yontoo\YontooIEClient.dll – Adware Yontoo
%Common AppData%\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\Setup.exe – Adware Yontoo
%Common AppData%\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_Setup.dll – Adware Yontoo
%Common AppData%\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_Setupx.dll – Adware Yontoo
%Temp%\25F32F8F\7za.exe – Adware Yontoo
%Temp%\25F32F8F\sqlite3.exe – Adware Yontoo
%Temp%\25F32F8F\x64\regsvr32.exe – Adware Yontoo
%Temp%\25F32F8F\x86\regsvr32.exe – Adware Yontoo
%Temp%\25F32F8F\YontooIEClient.dll – Adware Yontoo
%Temp%\25F32F8F\_Setup.dll – Adware Yontoo
%Temp%\25F32F8F\_Setupx.dll – Adware Yontoo
%Temp%\5D4EA25746448A8F75B57816569B24E7-05E0.exe – Adware Yontoo
Adware Yontoo created autostart registry keys:
HKLM\Software\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}\InProcServer32 : %Program Files%\Yontoo\YontooIEClient.dll
HKLM\Software\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}\InProcServer32\ThreadingModel: Both
HKLM\Software\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}\InprocServer32 : %Program Files%\Yontoo\YontooIEClient.dll
HKLM\Software\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}\InprocServer32\ThreadingModel: Apartment
HKLM\Software\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}\InprocServer32 : %Program Files%\Yontoo\YontooIEClient.dll
HKLM\Software\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}\InprocServer32\ThreadingModel: Apartment