Trojan.Win32.Clicker!BT

The Trojan.Win32.Clicker!BT is a Trojan that will affect the browsers Mozilla Firefox and Google Chrome. If you are using Mozilla Firefox, the Trojan.Win32.Clicker!BT will install a suspicious add-on. On the other hand, if your browser of choice is Google Chrome, Trojan.Win32.Clicker!BT may change your default home page and ask you to fill out affiliate surveys.

Where can You Find Trojan.Win32.Clicker!BT?

Malware experts have found that Trojan.Win32.Clicker!BT makes candycrushsagafreelifes.tumblr.com its home. As you may have guessed from the domain name, the incentive to visit the unsafe Tumblr blog is the promise of additional game lives for the very popular Candy Crush Saga game. Malware creators often make use of popular trends and news as bait in order to disseminate their products. Because of the huge interest in the game, it is not strange that people end up getting infected with Trojan.Win32.Clicker!BT.

However, if you visit the said website, you will be notified that a lot of people are viewing your Facebook profile, and you have the option of finding out who they are. The pop-up box will be filled with the following instructions:

'To activate your Profile Viewer... follow the simple instructions below.
Step 1: Click Scan button.
Step 2: Click download file ProfileViewersSetup.exe and click yes when prompted to start scanning who viewed your profile.
Step 3: Once you click yes the results will be available to you.'

Trojan.Win32.Clicker!BT Works Differently for Firefox and Chrome

The end result of clicking the 'Scan' button will depend on which browser you are currently using.

1. If you are using Mozilla Firefox, the effect will be that Trojan.Win32.Clicker!BT will install an add-on called WhoViewS. Even if you want to abort the installation, it is unlikely that you will manage to do so. In the case that you have Firefox open, it will be closed for a brief moment, Trojan.Win32.Clicker!BT will display a notification (that you will most likely miss), and then boot up Firefox again. If Firefox is not running, it will be started, the notification will flash before you and Firefox will close again.
2. The notification, which will require inhuman reflexes if you want to interact with it, will have an 'Allow this installation' option and a 'Continue' button. All of this will be without any significance because the browser will be open for just a second. After Trojan.Win32.Clicker!BT has done its job, WhoViewS will be listed as an installed add-on in Firefox's extensions menu. Considering your system's security, it may be best to disable or remove the dubious application.
3. If you are using Google Chrome, Trojan.Win32.Clicker!BT will act in a slightly different way. Instead of performing the 'Scan' or initiate a download, you will be redirected to a fake Profile Viewer website with the URL ulolnow.com. In order for you to gain full access to the Profile Viewer 'Services', you will be required to complete a sponsored offer that will be presented. The offers will be of different number and nature and will depend on availability and region.
4. Another possible redirect may cause you to end up at theprofilestatisticsonfb.blogspot.com. Once there, you will, again, be prompted to download a Profile Viewer executable. However, you may also notice the addition of a 'Continue' and 'Next' buttons, next to an image, with the text 'Keekin? See who's following you!' on it. Clicking on either of the buttons will illustrate an offer for the installation of an unknown Facebook app.

It seems that the purpose of which Trojan.Win32.Clicker!BT was designed with is to generate revenue through pay-per-click schemes. Although that is the common payload of Trojan Clickers like this one, system malfunctions and slowdowns may also occur if you are infected with Trojan.Win32.Clicker!BT. Moreover, you should always be suspicious of programs that install or make changes in a surreptitious way or without your consent.

The benefits provided by all of these 'Profile Viewer' apps are questionable, to say the least, and it is recommended that you take measures of Trojan.Win32.Clicker!BT's removal. However, the less technically acquainted users should avoid manual removal since improper removal may cause browser or system damage. In order to have safer browsing experience, one should avoid untrusted download sources and employ real-time security tools at all times.