- Mar 21, 2013 8:59 AM
But rather than installing FreeTwitTube, the software instead installs a Yontoo plug-in for Safari, Chrome, and Firefox. The plug-in inserts ads and other content onto other webpages as you surf. The real risk with browser extension-based malware is that such extensions can easily access and execute remote code—and monitor the URLs you visit, along with the content of those pages. It doesn’t appear that Yontoo does that… yet.
You can check if you’re a Yontoo victim by reviewing your browser’s installed plug-ins. Deleting the extension should be enough to rid your Mac of the malware.