How to remove the Yontoo Runtime malware

Some anti-malware programs classify YontooIEClient.dll as a harmful extension to Internet Explorer: such as not-a-virus:AdWare.Win32.WebCake.a (detected by Kaspersky), and PUA.Maltrec.TS!g4 or Yontoo (detected by Symantec). Add-ons like this can display ads, slow down your computer and cause various other errors. If you can't remember installing the associated Yontoo Runtime software, it's no surprise. In most cases, this kind of adware is installed on the side when you install a freeware product like a Youtube Downloader or a PDF Converter. In the following selection, you can read more about Yontoo Runtime and how to get rid of it.

Click here to automatically remove the Yontoo Runtime malware

YontooIEClient.dll file information

The process known as Yontoo Runtime or Yontoo Layers Runtime or Yontoo Layers Client or Yontoo Layers Runtime (Drop Down Deals) or Yontoo Layers Client for Internet Explorer or Yontoo

belongs to software Yontoo or Yontoo Layers Runtime or Yontoo Layers Client or Yontoo Layers or Yontoo Runtime or PageRage or Drop Down Deals or Yontoo Layers Client for Internet Explorer

by Yontoo ( or Yontoo Technology (

Description: YontooIEClient.dll is not essential for Windows and will often cause problems. YontooIEClient.dll is located in a subfolder of "C:\Program Files". Known file sizes on Windows 10/8/7/XP are 194,848 bytes (37% of all occurrences), 194,928 bytes and 13 more variants. 
This .dll file is a Browser Helper Object (BHO) that runs automatically every time you start your web browser. BHOs are not stopped by personal firewalls, because they are identified by the firewall as part of the browser itself. BHOs are often used by adware and spyware. IDs used by this BHO include FD72061E-9FDE-484D-A58A-0BAB4151CAD8. The program has no visible window. YontooIEClient.dll is able to monitor web browsers. YontooIEClient.dll is not a Windows system file. The YontooIEClient.dll file is certified by a trustworthy company. YontooIEClient.dll is able to connect to the Internet. Therefore the technical security rating is 48% dangerous, however you should also read the user reviews.

Uninstalling this variant: If problems with Yontoo or Yontoo Layers Runtime come up, you could also do the following:
  1) uninstall the program using the Control Panel ⇒ Uninstall a Program
  2) search the support area on the Yontoo website.

Recommended: Identify YontooIEClient.dll related errors

Important: Some malware also uses the file name YontooIEClient.dll, for example not-a-virus:AdWare.Win32.WebCake.a (detected by Kaspersky), and PUA.Maltrec.TS!g4 or Yontoo (detected by Symantec). Therefore, you should check the YontooIEClient.dll process on your PC to see if it is a threat. If Yontoo Runtime has changed your browser's search engine and start page, you can recover your browser's default settings as follows:

Reset default browser settings for Internet-Explorer ▾
  1. In Internet Explorer, press the key combination Alt + X to open the Tools menu.
  2. Click Internet options.
  3. Click the Advanced tab.
  4. Click the Reset... button.
  5. Enable the Delete personal settings option.
This will reset your Internet Explorer to its default settings. Your browser will start with the familiar start page and search engine—without popups, ads, cookies, but all browser add-ons are deleted too [1]. Make cleaning up your browser and your computer simpler and safer with Security Task Manager.


User Comments

I've looked it up before and it says it's used with facebook. The problem is... You can't get rid of it and I've had issues with my computer ever since it was installed. It will install itself without the user knowing. Other malware and spyware files will install themselves through this.
  Pissed off  
i think its an Trojan... in the link is the Virus scan
  NoNameHere11   (further information)
I just happened to check add ons and there it was. don't know a thing about this!!
  Janet McClearn  
Appeared on my system without my knowledge or assent (appears to have been secretly bundled in AeroSnap via I uninstalled and disabled the browser addon then used Spybot S/D to remove most of its remaining files. Still had to edit the registry manually to completely get rid of the IE addon.
  Puffin   (further information)
This appeared without permission and ive had my computer repeatedly show shockwave crash and freezing of programs and causing programs to become un-responsive get rid of it (if u can) thats the problem especcially if you cannot open your control panel
  Paul v hyland... paulhyland  
unwanted toolbars and browser add ons (Adware W32/Yontoo). Instruction to properly remove this kind of adware can be found in the link
  Ax   (further information)
it delays windows 8 os big time
I don't want it but I can't successfully get rid of it.

Rating chart

Summary: Average user rating of YontooIEClient.dll: based on 22 votes with 8 user comments. 2 users think YontooIEClient.dll is essential for Windows or an installed application. 5 users suspect danger. 15 users think YontooIEClient.dll is dangerous and recommend removing it. One user is not sure about it.

Do you have additional information?
What do you know about YontooIEClient.dll:
How would you rate it:
Link for more info:
Your Name:

Best practices for resolving YontooIEClient issues

The following programs have also been shown useful for a deeper analysis: ASecurity Task Manager examines the active YontooIEClient process on your computer and clearly tells you what it is doing. Malwarebytes' well-known Banti-malware tool tells you if the YontooIEClient.dll on your computer displays annoying ads, slowing it down. This type of unwanted adware program is not considered by some antivirus software to be a virus and is therefore not marked for cleanup.

A clean and tidy computer is the key requirement for avoiding PC trouble. This means running a scan for malware, cleaning your hard drive using 1cleanmgr and 2sfc /scannow, 3uninstalling programs that you no longer need, checking for Autostart programs (using 4msconfig) and enabling Windows' 5Automatic Update. Always remember to perform periodic backups, or at least to set restore points.

Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the 6resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the 7DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.

Other processes

YontooIEClient.dll [all]