Thit belongs to Yontoo adware.
Removal:
-
The directory at "<$APPDATA>\Mozilla\Firefox\Profiles\<$ENV(Yontoo_ff_path)>\extensions\plugin@yontoo.com".
-
The directory at "<$COMMONAPPDATA>\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}".
-
The directory at "<$PROGRAMFILES>\Yontoo Layers".
There are some other files and quite a few registry edits needed to FINISH removing this trash. Luckily spybot S&D takes care of this one quite well.