Video Preview Ads and Miner PUP – How to Remove It (Firefox)

Video Preview Ads and Miner PUP – How to Remove It (Firefox)

WaterMiner Monero MinerThis article aims to explain what is the Video Preview Adware extension for Firefox and how to remove it from your computer to prevent it from mining Monero.

The Video Preview browser extension is the type of software you do not want to have on your computer system. The browser extension’s primary purpose is to slither in your computer by pretending to be helpful and in the meantime display advertisements that lead to third-party websites. And not only this, but the Video Preview extension has also bene reported by security experts to perform other activities on your computer as well, such as mine for the cryptocurrency Monero via a JavaScript injected in your browser. Since the Video Preview Adware and Miner extension may be indirectly risky to your computer and uses it’s resources without your consent, recommendations are to read tis article and learn how to remove this PUP from Firefox and your PC.

Threat Summary

NameVideo Preview
TypeCryptoCurrency Miner and Adware extension.
Short DescriptionA browser extension for Google Chrome that comes embedded with a Monero miner script.
SymptomsYou may see different types of ads to appear on your browser and firefox.exe process may take up to 100% of your CPU’s power.
Distribution MethodBundled downloads. Web pages which may advertise it.
Detection Tool See If Your System Has Been Affected by Video Preview


Malware Removal Tool

User ExperienceJoin Our Forum to Discuss Video Preview.

Video Preview PUP – How Did I Get It

The main method by which the Video Preview app is installed onto the computers of unsuspecting users has been reported to be via a fake web page, pretending to be an update for the latest version of Mozilla Firefox. The Video Preview extension is added as a result of the same “Firefox requires a manual update” pop-up we have detected before. It looks like the following:

When the victim clicks on the “Install” button, he or she may see on their screen the following prompt, which if OK’d will install the Video Preview extension on your web browser:

In addition to this, the “Firefox Requires a manual Update” scamming message may also be associated with a lot of other apps, just like Video Preview extension and if you see such a pop-up with a very long URL in the future, we recommend that you avoid it.

Video Preview Extension – Main Activity

The Video Preview extension is what security researchers often put in the PUP category. PUP stands for a potentially unwanted program and such programs often aim to perform activities that are not by default malicious, but may lead to malicious applications being installed on your PC.

Once installed on your web browser, the Video Preview extension may immediately change it’s web browser settings so that the application can display numerous types of advertisements on your computer while remaining uninterrupted. And not only this, but the Video Preview extension may also use the following tracking technologies:

  • Cookies.
  • Pixels.
  • Tags.
  • Geo-Locators.

These tracking technologies may be utilized by the Video Preview extension to cause different advertisements to appear on your computer which may target you based on what you do online. They may track your:

  • Online search history.
  • Browsing history.
  • Online clicks.
  • Bookmarked websites.

This information may be used by the Video Preview extension to send different advertisements, based on your interests and lead you to third-party websites that may be dangerous for your computer, like scamming sites or even malicious websites that may infect your PC with malware. The ads which may be displayed by the Video Preview PUP could be of the following types:

  • Browser Redirects.
  • Pop-ups.
  • Taken over banner spaces on the sites you visit, even if you have ad-blocking extension.
  • Highlighted text ads on the sites you visit.

The main activity of the Video Preview PUP however is to perform a so-called cryptocurrency mining operation. This procedure is done in the following chronological steps:

Step 1: The Video Preview PUP injects a JavaScript code on your computer.
Step 2: The script connects your IP address to a mining pool, linked to the cryptocurrency wallet of the cyber-criminals.
Step 3: The JavaScript code begins to perform calculations, otherwise known as mining operations or hashing operations and these calucations result in the Monero cryptocurrency tokens being mined.
Step 4: After the tokens are mined, they are added to the crypto wallet of the cyber-criminals.

The only real symptom by which you could identify a miner, like Video Preview extension on your web browser is to check the firefox.exe process on your Windows Task Manager and if it’s running on 90% and higher without you having opened a lot of New Tabs and sites, it is very likely that you Firefox browser has been compromised.

Remove Video Preview PUP from Your Computer

In order to make sure that all of the files and objects created by the Video Preview PUP have been removed from your computer system, we recommend that you follow the removal instructions underneath. They have been created to help you to either manually or automatically get rid of this pesky software from your computer. If manual removal is not something you feel confident in doing, be advised that security experts always recommend to use an advanced anti-malware software for the removal. Such software will automatically scan for all of the unwanted files of this program to make sure it’s eradicated completely and does not cause problems in the future.

Ventsislav Krastev

Ventsislav has been covering the latest malware, software and newest tech developments at SensorsTechForum for 3 years now. He started out as a network administrator. Having graduated Marketing as well, Ventsislav also has passion for discovery of new shifts and innovations in cybersecurity that become game changers. After studying Value Chain Management and then Network Administration, he found his passion within cybersecrurity and is a strong believer in basic education of every user towards online safety.

More Posts - Website

Leave a Comment

Your email address will not be published. Required fields are marked *

Time limit is exhausted. Please reload CAPTCHA.

Share on Facebook Share
Share on Twitter Tweet
Share on Google Plus Share
Share on Linkedin Share
Share on Digg Share
Share on Reddit Share
Share on Stumbleupon Share