Click on screenshot to zoom
Danger level 6
Type: Trojans
Common infection symptoms:
  • Annoying Pop-up's
  • Cant change my homepage
  • Connects to the internet without permission
  • Installs itself without permissions
  • Shows commercial adverts
  • Slow Computer
  • Slow internet connection
  • Strange toolbar installed without Your permission
  • System crashes


JS/TrojanClicker.Agent.NDA is another detection of YXH-youtube_player.xpi browser extension that pretends to be a YouTube video player, and is a constituent part of a malicious infection that can perform a list of actions ranging from Denial of Service attacks to forceful browser redirection. Currently JS/TrojanClicker.Agent.NDA spreads via Facebook. Spam bots post spam comments on the user's comment wall or under some picture. These comments contains a link to a fake website that pretends to be the official YouTube webpage.

The fake comments posted on Facebook contain the same information:


And although the links to the fake YouTube website are not clickable, out of sheer curiosity a lot of users copy and paste the link into their browser's address bar and press Enter. This is how easily JS/TrojanClicker.Agent.NDA infects Google Chrome and Mozilla Firefox browsers.

Once the user opens the fake YouTube web page he is confronted with a pop-up that urges him to install an HD YouTube player if he wants to view the video. The frustrating thing about this pop-up is that even if the user does not click on the download link, the add-on download starts automatically. However, you can choose whether to install the fake YouTube HD add-on or not. If you click "Cancel", you will not experience any further damage, but a lot of users seem to be going along the installation process automatically, without giving it a second thought.

If the add-on gets installed, however, the malware that it brings along can perform various actions, just as it has been mentioned previously. JS/TrojanClicker.Agent.NDA can increase a number of visits to particular websites, because a number of visits raises up the number of hits for online ads. It can also redirect the users to other malicious websites, compromising the system even further.

Remove JS/TrojanClicker.Agent.NDA before installing the add-on. If you find the manual removal too tedious, erase JS/TrojanClicker.Agent.NDA automatically after having downloaded a computer security program. The computer security program of choice will also check for other possible infections and terminate them for good.

Download Spyware Removal Tool to Remove* JS/TrojanClicker.Agent.NDA
  • Quick & tested solution for JS/TrojanClicker.Agent.NDA removal.
  • 100% Free Scan for Windows

How to manually remove JS/TrojanClicker.Agent.NDA

Files associated with JS/TrojanClicker.Agent.NDA infection:


Post comment — WE NEED YOUR OPINION!

Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.