Avast WEBforum

Other => Viruses and worms => Topic started by: zararmuhammad12 on January 16, 2021, 09:37:08 PM

Title: I am recieveing this message from avast Win32: ntfsCorrupt-B
Post by: zararmuhammad12 on January 16, 2021, 09:37:08 PM: I am receiving this message from avast Win32:ntfsCorrupt-B when ever i go on YouTube idk what this is(http://file:///C:/Users/xyz/Pictures/Screenshots/Screenshot%20(7).png)
Title: Re: I am recieveing this message from avast Win32: ntfsCorrupt-B
Post by: Pondus on January 16, 2021, 09:43:52 PM: Win32:NtfsCorrupt-B [Expl] = exploit = https://en.wikipedia.org/wiki/Exploit_(computer_security)

So the video you try to see may have a exploit code

could be related to this
Windows NTFS Remote Code Execution Vulnerability CVE-2020-17096
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17096

NTFS Remote Code Execution (CVE-2020-17096) Analysis
https://blog.zecops.com/vulnerabilities/ntfs-remote-code-execution-cve-2020-17096-analysis/
Title: Re: I am recieveing this message from avast Win32: ntfsCorrupt-B
Post by: Pondus on January 16, 2021, 09:47:00 PM: If you think it is wrong (suspected false positive) then report it >> https://forum.avast.com/index.php?topic=14433.msg1289438#msg1289438
Title: Re: I am recieveing this message from avast Win32: ntfsCorrupt-B
Post by: zararmuhammad12 on January 16, 2021, 09:47:41 PM: idk if it wrong
Title: Re: I am recieveing this message from avast Win32: ntfsCorrupt-B
Post by: Pondus on January 16, 2021, 09:49:27 PM: Quote from: zararmuhammad12 on January 16, 2021, 09:47:41 PM
idk if it wrong
You dont need to know, report it and avast lab will tell you
Title: Re: I am recieveing this message from avast Win32: ntfsCorrupt-B
Post by: zararmuhammad12 on January 16, 2021, 10:00:42 PM: i am just scared cuz this never happened is it that ntfs windows bug
Title: Re: I am recieveing this message from avast Win32: ntfsCorrupt-B
Post by: DavidR on January 16, 2021, 10:18:12 PM: Quote from: zararmuhammad12 on January 16, 2021, 10:00:42 PM
i am just scared cuz this never happened is it that ntfs windows bug

To start with the Avast Web Shield has intercepted this when you connected to YouTube, not on your system, so in that regard you have less to worry about.
Title: Re: I am recieveing this message from avast Win32: ntfsCorrupt-B
Post by: Pänthéon_ on January 17, 2021, 01:36:38 PM: Me too youtube down
Title: Re: I am recieveing this message from avast Win32: ntfsCorrupt-B
Post by: bob3160 on January 17, 2021, 07:45:36 PM: Quote from: Pänthéon_ on January 17, 2021, 01:36:38 PM
Me too youtube down
No problem here with YouTube. The popup seems to be for a
particular video.
Title: Re: I am recieveing this message from avast Win32: ntfsCorrupt-B
Post by: italiangm on January 17, 2021, 08:23:05 PM: Was attempting to read an article in reddit that discussed Avast's aborting connection to a youtube video when Avast actually triggered the same aborting connection notification! The article's URL:

https://www.reddit.com/r/avast/comments/kyp0lk/avast_blocking_youtube_video/

This is crazy. Surely this must be a false positive. UPDATE: I also reported it.
Title: Re: I am recieveing this message from avast Win32: ntfsCorrupt-B
Post by: Pondus on January 17, 2021, 09:02:43 PM: Quote from: italiangm on January 17, 2021, 08:23:05 PM
Was attempting to read an article in reddit that discussed Avast's aborting connection to a youtube video when Avast actually triggered the same aborting connection notification! The article's URL:

https://www.reddit.com/r/avast/comments/kyp0lk/avast_blocking_youtube_video/

This is crazy. Surely this must be a false positive. UPDATE: I also reported it.
Probably because the exploit command is written there

Bleeping computer
https://www.bleepingcomputer.com/news/security/windows-10-bug-corrupts-your-hard-drive-on-seeing-this-files-icon/
Title: Re: I am recieveing this message from avast Win32: ntfsCorrupt-B
Post by: DavidR on January 17, 2021, 10:37:40 PM: Quote from: Pondus on January 17, 2021, 09:02:43 PM
Quote from: italiangm on January 17, 2021, 08:23:05 PM
Was attempting to read an article in reddit that discussed Avast's aborting connection to a youtube video when Avast actually triggered the same aborting connection notification! The article's URL:

https://www.reddit.com/r/avast/comments/kyp0lk/avast_blocking_youtube_video/

This is crazy. Surely this must be a false positive. UPDATE: I also reported it.
Probably because the exploit command is written there

Bleeping computer
https://www.bleepingcomputer.com/news/security/windows-10-bug-corrupts-your-hard-drive-on-seeing-this-files-icon/

Most likely as I got alerts on both locations reddit and bleeping, whilst informing people of the exploit command it shouldn't be in text form but in image form.