- Annoying Pop-up's
- Cant change my homepage
- Connects to the internet without permission
- Installs itself without permissions
- Shows commercial adverts
- Slow Computer
- Slow internet connection
- Strange toolbar installed without Your permission
- System crashes
JS/TrojanClicker.Agent.NDA is another detection of YXH-youtube_player.xpi browser extension that pretends to be a YouTube video player, and is a constituent part of a malicious infection that can perform a list of actions ranging from Denial of Service attacks to forceful browser redirection. Currently JS/TrojanClicker.Agent.NDA spreads via Facebook. Spam bots post spam comments on the user's comment wall or under some picture. These comments contains a link to a fake website that pretends to be the official YouTube webpage.
The fake comments posted on Facebook contain the same information:
SAINDO DA VAGINA
And although the links to the fake YouTube website are not clickable, out of sheer curiosity a lot of users copy and paste the link into their browser's address bar and press Enter. This is how easily JS/TrojanClicker.Agent.NDA infects Google Chrome and Mozilla Firefox browsers.
Once the user opens the fake YouTube web page he is confronted with a pop-up that urges him to install an HD YouTube player if he wants to view the video. The frustrating thing about this pop-up is that even if the user does not click on the download link, the add-on download starts automatically. However, you can choose whether to install the fake YouTube HD add-on or not. If you click "Cancel", you will not experience any further damage, but a lot of users seem to be going along the installation process automatically, without giving it a second thought.
If the add-on gets installed, however, the malware that it brings along can perform various actions, just as it has been mentioned previously. JS/TrojanClicker.Agent.NDA can increase a number of visits to particular websites, because a number of visits raises up the number of hits for online ads. It can also redirect the users to other malicious websites, compromising the system even further.
Remove JS/TrojanClicker.Agent.NDA before installing the add-on. If you find the manual removal too tedious, erase JS/TrojanClicker.Agent.NDA automatically after having downloaded a computer security program. The computer security program of choice will also check for other possible infections and terminate them for good.
How to manually remove JS/TrojanClicker.Agent.NDA
Files associated with JS/TrojanClicker.Agent.NDA infection: