Author Topic: Threat Blocked on Youtube !  (Read 3147 times)

0 Members and 1 Guest are viewing this topic.

Offline The Game2

  • Jr. Member
  • **
  • Posts: 42
Threat Blocked on Youtube !
« on: January 18, 2017, 06:08:29 PM »
Hello everyone,
At 5 pm i was on Google and i typed in the search bar the command to delete System32 (Windows XP) in Command Prompt (just for fun).
 There was a video on youtube, i clicked on it and avast said this :

**********************
Avast Web Shield blocked a threat :

Infection : BV:DelFiles (Trj)

File : {gzip}

Process : /Applications/Google Chrome.app/Contents/MacOS/Google Chrome


**********************

A Youtube page is infected ?? Never saw that since i une youtube (since February 2009)
I am using MacOS.

Offline TrueIndian

  • Poster
  • *
  • Posts: 433
Re: Threat Blocked on Youtube !
« Reply #1 on: January 18, 2017, 06:09:57 PM »
Can you give us a link to the youtube video? Just make sure its in htxp format to be not clickable

Offline The Game2

  • Jr. Member
  • **
  • Posts: 42
Re: Threat Blocked on Youtube !
« Reply #2 on: January 18, 2017, 06:13:04 PM »
htxp://www.youtube.com/watch?v=O5Q0w03py2A

Offline The Game2

  • Jr. Member
  • **
  • Posts: 42
Re: Threat Blocked on Youtube !
« Reply #3 on: January 18, 2017, 06:25:25 PM »
I made a test and i can watch popular Youtube videos (around 6 million views) normally.
 D

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37529
  • Not a avast user
Re: Threat Blocked on Youtube !
« Reply #4 on: January 18, 2017, 06:47:42 PM »
Probably because the batch file (crash code) is posted in youtube comments below the movie

https://virustotal.com/en/file/24732accb7a1c4c97c53edc041cbdd3e7fb70a155994b4aa1cd670c20c91d062/analysis/1484761525/

« Last Edit: January 18, 2017, 06:50:13 PM by Pondus »

Offline The Game2

  • Jr. Member
  • **
  • Posts: 42
Re: Threat Blocked on Youtube !
« Reply #5 on: January 18, 2017, 06:54:57 PM »
Ok, so the famous "delete" command is in the description !

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37529
  • Not a avast user
Re: Threat Blocked on Youtube !
« Reply #6 on: January 18, 2017, 07:00:34 PM »
Yes, and avast webshield read all code in the html ..... and BANG ,,, detection
and as you see from my VT link above, most consider it malicious / dangerous
detection name say it all > Delete / KillAll / KillFiles




« Last Edit: January 19, 2017, 06:25:49 AM by Pondus »

Offline The Game2

  • Jr. Member
  • **
  • Posts: 42
Re: Threat Blocked on Youtube !
« Reply #7 on: January 18, 2017, 07:16:23 PM »
But, a question remains : As i know that the code posted in the comments is in MS-DOS (Batch files),so it is Windows language, how could a Mac version of the antivirus be alerted, as MacOS does not use MS-DOS ? :-\

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37529
  • Not a avast user
Re: Threat Blocked on Youtube !
« Reply #8 on: January 18, 2017, 07:25:28 PM »
Because they use the same signatures (maybe not all but many). There are also cross platform malware

Anyway you may recive a mail with attached doc on your Mac that containe a windows malware (not knowing) you may spread that malware by forward that mail to users with windows pc, so AV stop the infection as soon as possible. Most AV will detect malicious files for windows / mac / Linux / android
« Last Edit: January 18, 2017, 07:49:53 PM by Pondus »

Offline TrueIndian

  • Poster
  • *
  • Posts: 433
Re: Threat Blocked on Youtube !
« Reply #9 on: January 21, 2017, 05:48:56 AM »
Such cases have been reported before if you use the forum search function you can see how many have seen this happen.

Its just the code in the video description triggering web shield which scans all code and html.This shows how good avast can be at blocking malicious web pages and scripts.  :)