Video Ads Blocker

By GoldSparrow in Potentially Unwanted Programs

Threat Scorecard

Threat Level: 80 % (High)
Infected Computers: 757
First Seen: June 12, 2017
Last Seen: May 22, 2023
OS(es) Affected: Windows

The Video Ads Blocker software by youtubeadblock.net is promoted as a browser extension that can block native ads on YouTube. As its name suggests, the Video Ads Blocker is supposed to allow Web surfers to browse video content without having to tolerate five seconds long adds and click the 'Skip' button. That may seem annoying to some users, and you may like to install the Video Ads Blocker on your computer. What you should consider is that YouTube is an ad-supported platform (like Vimeo, Metacafe and Dailymotion)—the content creators make money from getting their videos monetized by displaying advertisement. Additionally, the Video Ads Blocker software may block ads on Youtube.com, but it is designed to connect to ad portals and click on advertisements in the background. The Video Ads Blocker by youtubeadblock.net is classified as adware because it runs a client server on the computer without your knowledge and loads ads via a hidden instance of Internet Explorer.

The Video Ads Blocker program is not recognized as a legitimate browser extension by vendors like Google Inc., The Mozilla Foundation, Opera Software and Microsoft Corp. The installer package for the Video Ads Blocker adware is presented to users as 'install_youtubeadblock_net_sfx.exe,' which is a self-extracting archive. The package delivers 'install.exe' to your desktop that is the main installer. When you run 'install.exe' by youtubeadblock.net, it would be installed to the Temp directory as opposed to Program Files (x86) and Program Files, which are the default destination for legitimate software. The following files are installed by the Video Ads Blocker adware:

  • C:\DOCUME~1\~1\LOCALS~1\Temp\nst2.tmp
  • C:\DOCUME~1\~1\LOCALS~1\Temp\nsd3.tmp\leftside.bmp
  • C:\DOCUME~1\~1\LOCALS~1\Temp\nsd3.tmp\sqlite3.exe
  • C:\DOCUME~1\~1\LOCALS~1\Temp\nsd3.tmp\chrome-extension.localstorage
  • C:\DOCUME~1\~1\LOCALS~1\Temp\nsd3.tmp\ff_store.json
  • C:\DOCUME~1\~1\LOCALS~1\Temp\nsd3.tmp\ff_store_2.json
  • C:\DOCUME~1\~1\LOCALS~1\Temp\nsd3.tmp\System.dll
  • C:\DOCUME~1\~1\LOCALS~1\Temp\nsd3.tmp\nsExec.dll

The executable dropped by the Video Ads Blocker adware include a signature by a company named 'AVIA CULTURA SERVICE OOO' that has no registration online. As mention above, the Video Ads Blocker uses the module 'sqlite3.exe' to connect to a remote server and load advertisements in the system background. You are not likely to see windows, pop-ups, and banners powered by Video Ads Blocker because these actions are intended to take place on a hidden instance of Internet Explorer. You may notice diminished system performance and slower loading of videos on YouTube. You should remove the Video Ads Blocker adware with the help of a reliable anti-malware scanner.

Trending

Most Viewed

Loading...