Home Malware Programs Adware Ytnoads

Ytnoads

Posted: February 14, 2014

Threat Metric

Threat Level: 2/10
Infected PCs: 398
First Seen: February 14, 2014
Last Seen: April 10, 2023
OS(es) Affected: Windows


Ytnoads is a browser add-on that malware researchers have rated as being a Potentially Unwanted Program, due to a combination of potentially undesirable functions, along with Ytnoads's attempts to block its own uninstallation – an invasive act that no legitimate software would commit. Ironically, the symptoms of Ytnoads add-on being installed often include infected Web advertisements, which may be both security and performance problems for the affected Web browser. Since Ytnoads has more than enough traits to qualify Ytnoads as a PUP, deleting Ytnoads with strong anti-malware software is the safest way to handle Ytnoads, and the easiest way to get your browser back under your complete control.

When No Advertisements Turn out to Mean More Advertisements

With almost no marketing presence on the Web and no company history to analyze, Ytnoads has the classic marks of being another case of advertising shovelware that exists to expose random PC users to advertisements for fast, easy profits. Ytnoads installer files, often detected as Adware.MultiPlug.Installer.Setup.E or other MultiPlug variants, usually are distributed with random file names and may be bundled with unrelated applications. Malware researchers also see some circumstantial reasons indicating that Ytnoads may be a variant of previous adware products, such as UTAdRReMoovalAppa, WatchItNoAds and ExstraCoupon.

After its installation, Ytnoads may modify Chrome and Firefox to display additional advertisements. Because Ytnoads may update itself, Ytnoads also may include other functions that impact your browser negatively. Ytnoads advertisements are displayed as pop-ups and/or injected links into unrelated Web pages, and these functions may block some website content or cause poor browser performance. However, malware experts find them most questionable for their inherent security risks, as always is the case with advertisements that display automatically, and can't be disabled or filtered.

The Add-On that isn't Easily Subtracted from Your Browser

Despite its advertising and update-related functions, Ytnoads's most inappropriate feature is its efforts at blocking any attempt to be rid of Ytnoads. While Ytnoads does display itself in the add-on managers for both Firefox and Chrome, Ytnoads exploits permissions settings to block its deletion. Similarly, attempting to disable Ytnoads is unlikely to be successful, unless it's initiated by a PC security expert or an appropriate security program.

Ytnoads, like similar adware programs seen of late, doesn't install itself to Internet Explorer (although that Web browser has its own troubles, some of which have been noted in a previous article on the Tritax family). Although IE isn't vulnerable to Ytnoads, dealing with adware, in general, calls for both safe browsing behavior on the part of the user and the presence of dependable anti-malware utilities. Ytnoads's installation never should happen in the first place, assuming that you don't indulge in unsafe downloading behavior that gives Ytnoads the opportunity.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%ALLUSERSPROFILE%\YTNoAdss\wZwC.dll File name: wZwC.dll
Size: 425.47 KB (425472 bytes)
MD5: 40e7d5ff152d337e719c6cb921508f70
Detection count: 94
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\YTNoAdss
Group: Malware file
Last Updated: February 19, 2014
%ALLUSERSPROFILE%\YTNoAds\ih3.dll File name: ih3.dll
Size: 424.96 KB (424960 bytes)
MD5: 3d18f5e535fa33b2feb1bdf13bb681b0
Detection count: 94
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\YTNoAds
Group: Malware file
Last Updated: February 19, 2014
%ALLUSERSPROFILE%\YTNoAds\FbAJSZ2.x64.dll File name: FbAJSZ2.x64.dll
Size: 472.06 KB (472064 bytes)
MD5: bbf139e2caf378b60b935fc7f8eee7fd
Detection count: 94
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\YTNoAds
Group: Malware file
Last Updated: February 19, 2014
%ALLUSERSPROFILE%\YTNoAds\BS0Ip8.x64.dll File name: BS0Ip8.x64.dll
Size: 473.08 KB (473088 bytes)
MD5: 5563afcc03ad0725344bef2eeef45cbb
Detection count: 91
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\YTNoAds
Group: Malware file
Last Updated: February 19, 2014
%ALLUSERSPROFILE%\YTNoAds\XQpI4LjGP.x64.dll File name: XQpI4LjGP.x64.dll
Size: 471.04 KB (471040 bytes)
MD5: 70e2e4c0ef3a32f0dd2b01ce0d710b7d
Detection count: 85
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\YTNoAds
Group: Malware file
Last Updated: February 19, 2014
%ALLUSERSPROFILE%\YTNOAds\RD0L63irZU.x64.dll File name: RD0L63irZU.x64.dll
Size: 472.06 KB (472064 bytes)
MD5: 06fbc45fa37a5b92356a3844a8c9222b
Detection count: 83
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\YTNOAds
Group: Malware file
Last Updated: February 19, 2014
%ALLUSERSPROFILE%\YTNoAds\CFHeUe.dll File name: CFHeUe.dll
Size: 423.93 KB (423936 bytes)
MD5: ff56557b7f1cb30869301284f1e12605
Detection count: 72
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\YTNoAds
Group: Malware file
Last Updated: February 19, 2014
%ALLUSERSPROFILE%\YTNoADs\PORzP.x64.dll File name: PORzP.x64.dll
Size: 477.69 KB (477696 bytes)
MD5: 192caa7def23e2a4592eb1f54b07e94b
Detection count: 66
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\YTNoADs
Group: Malware file
Last Updated: February 19, 2014
%ALLUSERSPROFILE%\YTNoAds\dNWrp.x64.dll File name: dNWrp.x64.dll
Size: 475.13 KB (475136 bytes)
MD5: 345b7e504ceb1f307f7bc2f3f6e83e63
Detection count: 61
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\YTNoAds
Group: Malware file
Last Updated: February 19, 2014
%ALLUSERSPROFILE%\Datos de programa\YYTNoAdS\SFveqoovW.dll File name: SFveqoovW.dll
Size: 425.98 KB (425984 bytes)
MD5: f6210790b0c5a01a0b72891772f814ac
Detection count: 52
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\Datos de programa\YYTNoAdS
Group: Malware file
Last Updated: February 19, 2014
%ALLUSERSPROFILE%\YYTNoAds\xK.x64.dll File name: xK.x64.dll
Size: 475.13 KB (475136 bytes)
MD5: c3e31c8a4c5dd1292629ec2aa99cfd7b
Detection count: 51
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\YYTNoAds
Group: Malware file
Last Updated: February 19, 2014
%ALLUSERSPROFILE%\YTNoAds\vJE.x64.dll File name: vJE.x64.dll
Size: 472.06 KB (472064 bytes)
MD5: 6098d9147fcfa9521ae0af2a888f94aa
Detection count: 44
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\YTNoAds
Group: Malware file
Last Updated: February 19, 2014
%ALLUSERSPROFILE%\YTNoAds\B1WKv.x64.dll File name: B1WKv.x64.dll
Size: 474.11 KB (474112 bytes)
MD5: 6c5f140fa32e37be2971566359fe2e74
Detection count: 36
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\YTNoAds
Group: Malware file
Last Updated: February 19, 2014
%ALLUSERSPROFILE%\YTNoAds\q.x64.dll File name: q.x64.dll
Size: 475.64 KB (475648 bytes)
MD5: 17d4754268e022c6b5ee17d919b48720
Detection count: 35
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\YTNoAds
Group: Malware file
Last Updated: February 19, 2014
%ALLUSERSPROFILE%\YTNoAds\6UhtNL.dll File name: 6UhtNL.dll
Size: 425.98 KB (425984 bytes)
MD5: 9e75a1213810c31f2ae3e03cce35c919
Detection count: 30
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\YTNoAds
Group: Malware file
Last Updated: February 19, 2014
%ALLUSERSPROFILE%\YTNoAdss\23_AnM.dll File name: 23_AnM.dll
Size: 424.44 KB (424448 bytes)
MD5: 5273e58cc6d164178fdbaa0486867c20
Detection count: 25
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\YTNoAdss
Group: Malware file
Last Updated: February 19, 2014
%ALLUSERSPROFILE%\YTNoAds\fh.dll File name: fh.dll
Size: 424.44 KB (424448 bytes)
MD5: 7082beb4e2376e3a4aef8e570f574900
Detection count: 20
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\YTNoAds
Group: Malware file
Last Updated: February 19, 2014
%ALLUSERSPROFILE%\YTNoAds\gQfVZ4u.dll File name: gQfVZ4u.dll
Size: 424.96 KB (424960 bytes)
MD5: ae5f63b1ff6c1fbfd0f001b7236ebf3c
Detection count: 15
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\YTNoAds
Group: Malware file
Last Updated: February 19, 2014
%ALLUSERSPROFILE%\Application Data\YTNoAds\swBin6Kzk.dll File name: swBin6Kzk.dll
Size: 423.93 KB (423936 bytes)
MD5: e7209c44c18a90ffec6e9d830601d528
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\Application Data\YTNoAds
Group: Malware file
Last Updated: February 19, 2014
%ALLUSERSPROFILE%\YTNoAds\CVunSqXGO.dll File name: CVunSqXGO.dll
Size: 425.98 KB (425984 bytes)
MD5: 3723e4168957e02a18c654e309d07678
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\YTNoAds
Group: Malware file
Last Updated: February 19, 2014
%ALLUSERSPROFILE%\YTNoAds\UhjegV5_y.x64.dll File name: UhjegV5_y.x64.dll
Size: 474.11 KB (474112 bytes)
MD5: e924d71a5b36f57d4e69ae6626516549
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\YTNoAds
Group: Malware file
Last Updated: February 19, 2014
%ALLUSERSPROFILE%\YTNoAds\G.x64.dll File name: G.x64.dll
Size: 477.18 KB (477184 bytes)
MD5: 9f6969a27bb83f6a6da103dd1fd88ff0
Detection count: 4
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\YTNoAds
Group: Malware file
Last Updated: February 19, 2014

More files

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}SOFTWARE\Classes\YTNoAds.YTNoAdsSOFTWARE\Classes\YTNoAds.YTNoAds.1.7

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\YTNoAds%PROGRAMFILES%\YTNoAds%PROGRAMFILES(x86)%\YTNoAds
Loading...