Avast community forum
Home
Help
Search
Login
Register
Avast WEBforum
»
Other
»
Viruses and worms
(Moderators:
Maxx_original
,
misak
) »
Threat Blocked on Youtube !
« previous
next »
Print
Pages: [
1
]
Go Down
Author
Topic: Threat Blocked on Youtube ! (Read 3147 times)
0 Members and 1 Guest are viewing this topic.
The Game2
Jr. Member
Posts: 42
Threat Blocked on Youtube !
«
on:
January 18, 2017, 06:08:29 PM »
Hello everyone,
At 5 pm i was on Google and i typed in the search bar the command to delete System32 (Windows XP) in Command Prompt (just for fun).
There was a video on youtube, i clicked on it and avast said this :
**********************
Avast Web Shield blocked a threat :
Infection : BV:DelFiles (Trj)
File : {gzip}
Process : /Applications/Google Chrome.app/Contents/MacOS/Google Chrome
**********************
A Youtube page is infected ?? Never saw that since i une youtube (since February 2009)
I am using MacOS.
Logged
TrueIndian
Poster
Posts: 433
Re: Threat Blocked on Youtube !
«
Reply #1 on:
January 18, 2017, 06:09:57 PM »
Can you give us a link to the youtube video? Just make sure its in htxp format to be not clickable
Logged
Malware Researcher
https://twitter.com/avman1995
The Game2
Jr. Member
Posts: 42
Re: Threat Blocked on Youtube !
«
Reply #2 on:
January 18, 2017, 06:13:04 PM »
htxp://www.youtube.com/watch?v=O5Q0w03py2A
Logged
The Game2
Jr. Member
Posts: 42
Re: Threat Blocked on Youtube !
«
Reply #3 on:
January 18, 2017, 06:25:25 PM »
I made a test and i can watch popular Youtube videos (around 6 million views) normally.
D
Logged
Pondus
Probably Bot
Posts: 37529
Not a avast user
Re: Threat Blocked on Youtube !
«
Reply #4 on:
January 18, 2017, 06:47:42 PM »
Probably because the batch file (crash code) is posted in youtube comments below the movie
https://virustotal.com/en/file/24732accb7a1c4c97c53edc041cbdd3e7fb70a155994b4aa1cd670c20c91d062/analysis/1484761525/
«
Last Edit: January 18, 2017, 06:50:13 PM by Pondus
»
Logged
The Game2
Jr. Member
Posts: 42
Re: Threat Blocked on Youtube !
«
Reply #5 on:
January 18, 2017, 06:54:57 PM »
Ok, so the famous "delete" command is in the description !
Logged
Pondus
Probably Bot
Posts: 37529
Not a avast user
Re: Threat Blocked on Youtube !
«
Reply #6 on:
January 18, 2017, 07:00:34 PM »
Yes, and avast webshield read all code in the html ..... and BANG ,,, detection
and as you see from my VT link above, most consider it malicious / dangerous
detection name say it all > Delete / KillAll / KillFiles
«
Last Edit: January 19, 2017, 06:25:49 AM by Pondus
»
Logged
The Game2
Jr. Member
Posts: 42
Re: Threat Blocked on Youtube !
«
Reply #7 on:
January 18, 2017, 07:16:23 PM »
But, a question remains : As i know that the code posted in the comments is in MS-DOS (Batch files),so it is Windows language, how could a Mac version of the antivirus be alerted, as MacOS does not use MS-DOS ?
Logged
Pondus
Probably Bot
Posts: 37529
Not a avast user
Re: Threat Blocked on Youtube !
«
Reply #8 on:
January 18, 2017, 07:25:28 PM »
Because they use the same signatures (maybe not all but many). There are also cross platform malware
Anyway you may recive a mail with attached doc on your Mac that containe a windows malware (not knowing) you may spread that malware by forward that mail to users with windows pc, so AV stop the infection as soon as possible. Most AV will detect malicious files for windows / mac / Linux / android
«
Last Edit: January 18, 2017, 07:49:53 PM by Pondus
»
Logged
TrueIndian
Poster
Posts: 433
Re: Threat Blocked on Youtube !
«
Reply #9 on:
January 21, 2017, 05:48:56 AM »
Such cases have been reported before if you use the forum search function you can see how many have seen this happen.
Its just the code in the video description triggering web shield which scans all code and html.This shows how good avast can be at blocking malicious web pages and scripts.
Logged
Malware Researcher
https://twitter.com/avman1995
Print
Pages: [
1
]
Go Up
« previous
next »
Avast WEBforum
»
Other
»
Viruses and worms
(Moderators:
Maxx_original
,
misak
) »
Threat Blocked on Youtube !