|Type||CryptoCurrency Miner and Adware extension.|
|Short Description||A browser extension for Google Chrome that comes embedded with a Monero miner script.|
|Symptoms||You may see different types of ads to appear on your browser and firefox.exe process may take up to 100% of your CPU’s power.|
|Distribution Method||Bundled downloads. Web pages which may advertise it.|
|Detection Tool|| See If Your System Has Been Affected by Video Preview |
Malware Removal Tool
|User Experience||Join Our Forum to Discuss Video Preview.|
Video Preview PUP – How Did I Get It
The main method by which the Video Preview app is installed onto the computers of unsuspecting users has been reported to be via a fake web page, pretending to be an update for the latest version of Mozilla Firefox. The Video Preview extension is added as a result of the same “Firefox requires a manual update” pop-up we have detected before. It looks like the following:
When the victim clicks on the “Install” button, he or she may see on their screen the following prompt, which if OK’d will install the Video Preview extension on your web browser:
In addition to this, the “Firefox Requires a manual Update” scamming message may also be associated with a lot of other apps, just like Video Preview extension and if you see such a pop-up with a very long URL in the future, we recommend that you avoid it.
Video Preview Extension – Main Activity
The Video Preview extension is what security researchers often put in the PUP category. PUP stands for a potentially unwanted program and such programs often aim to perform activities that are not by default malicious, but may lead to malicious applications being installed on your PC.
Once installed on your web browser, the Video Preview extension may immediately change it’s web browser settings so that the application can display numerous types of advertisements on your computer while remaining uninterrupted. And not only this, but the Video Preview extension may also use the following tracking technologies:
These tracking technologies may be utilized by the Video Preview extension to cause different advertisements to appear on your computer which may target you based on what you do online. They may track your:
- Online search history.
- Browsing history.
- Online clicks.
- Bookmarked websites.
This information may be used by the Video Preview extension to send different advertisements, based on your interests and lead you to third-party websites that may be dangerous for your computer, like scamming sites or even malicious websites that may infect your PC with malware. The ads which may be displayed by the Video Preview PUP could be of the following types:
- Browser Redirects.
- Taken over banner spaces on the sites you visit, even if you have ad-blocking extension.
- Highlighted text ads on the sites you visit.
The main activity of the Video Preview PUP however is to perform a so-called cryptocurrency mining operation. This procedure is done in the following chronological steps:
Step 2: The script connects your IP address to a mining pool, linked to the cryptocurrency wallet of the cyber-criminals.
Step 4: After the tokens are mined, they are added to the crypto wallet of the cyber-criminals.
The only real symptom by which you could identify a miner, like Video Preview extension on your web browser is to check the firefox.exe process on your Windows Task Manager and if it’s running on 90% and higher without you having opened a lot of New Tabs and sites, it is very likely that you Firefox browser has been compromised.
Remove Video Preview PUP from Your Computer
In order to make sure that all of the files and objects created by the Video Preview PUP have been removed from your computer system, we recommend that you follow the removal instructions underneath. They have been created to help you to either manually or automatically get rid of this pesky software from your computer. If manual removal is not something you feel confident in doing, be advised that security experts always recommend to use an advanced anti-malware software for the removal. Such software will automatically scan for all of the unwanted files of this program to make sure it’s eradicated completely and does not cause problems in the future.