Threat Detected on Youtube videos

Just today I have starting getting this message when opening videos (not on the home page) on Youtube while using Chrome:

Avast Web Shield Has Blocked a harmful file or webpage

When I click for more details I get:

Infection Blocked

URL: http://yt.extensionstats.com/v?ms=1&id=nqsaop6qzrg&op=1&eid=dddfjkig&url=https%3A

Infection: URL:Mal

Process: C:\Program Files(x86)Google\Chrome\Application\Chrome.exe

This is odd for several reasons. I am on a new computer (1 week old) and haven’t been on any fishy sites. This wasn’t happening as recently as yesterday. I haven’t installed any new extensions other than the ones that carried over from syncing my google account (these extensions are: awesome screenshot, adblock, Google Docs, Google Sheets, Google Slides, Rapportive, Read Later Fast, Image Search By Google, and Stylish) but again none of these were giving me problem recently.

I ran an Avast Scan (nothing found), MBAM (nothing found), and Adwcleaner (nothing found) + Chrome reset and still the issue. I’m not sure if this is a false positive but I wanted to run it by here to see if it is anything I should be concerned by.

I’ve got exactly the same matter since today, i am feeling like something not usual happened yesterday actually but can’t remember what exactly, anyway this is happening when i open a youtube video received on my gmail account.

Anyone else?

Infection bloquée
URL hxxp://yt.extensionstats.com/v?ms=1&id=5diwpZBueQ4&op=0&eid=kekkiaca&url=http%3A//www.motika.com.mk/francuzin-so-svojot-raketen-tochak-se-trka-so-ferari/&cb=8452579
Infection URL:Mal

I am getting the exact same thing. Started happening today out of absolutely NOWHERE. Literally was going through a playlist and in a matter of a few videos, these errors started coming up. Scanned my computer with MalwareBytes and SUPERAntiSpyware and both popped up with nothing. Really annoying, especially because it decides to speak out saying “Threat has been detected!” Why does it have to make noise like that? Also for when it updates, rahhh!

Either way, please fix this because I highly doubt I did something to make this happen. Maybe it’s a commono extension extension like Adblock Plus or something that’s causing it?

Regards

URL hxxp://yt.extensionstats.com/v?ms=1&id=L7Oll5dpM2c&op=1&eid=kekkiaca&url=https%3A//www.youtube.com/watch%3Fv%3D
Infection URL:Mal

EDIT:

Weird… I just disabled all of my extensions and then it stopped. Re-enabled them all, it pops up… I wonder which one is problematic… Ugh…

DOUBLE EDIT:

FOUND IT! It appears to be ----- “Open SEO Stats(Formerly: PageRank Status)”, one of my favorite extensions :frowning: (I assume you both also have this extension installed?) wonder if it’s a false-positive or if they are actually doing something fishy…

I too was getting this yt.extensions message today when I used Chrome … I disabled the Extension Open SEO Stats(Formerly: PageRank Status) – which stopped the notifications …

I have also been getting the same error since yesterday while opening any youtube video. It is indeed very annoying because of the sound and talking voice

I managed to fix mine by trying to disable some of my extensions I had on chrome.
It worked when I disabled Quick Note. To do this, click the 3 lined menu button top right on chrome > More Tools > Extensions
and then Next to enabled, there’s a check box. just untick that and you should be good to go.

I’m also with the same notification everytime I open a Youtube video. It started today!

I fixed my issue. I tested each extension and found the culprit, Read Later Fast by Diigo. I uninstalled it and reset my google sync so it does not reinstall on re-sync. Also uninstalled Awesome Screenshot by Diigo just to be safe and downloaded an alternative.

Hello,
thanks for notice. Domain will be unblocked in next stream update.

Milos

Gonna post my log results from latest scan just in case.

Looks clean :slight_smile:

Awesome. Thanks Essex.

Same problem here for the last few days.
I can see a number of suggested solutions by users but It’s not clear to me what is avast’s final and official recommendation?
What do I have to do as a user?
Thanks.

This popup is still showing up, we disabled/removed the google chome plugin: Open SEO Stats(Formerly: PageRank Status) and the annoying popups on youtube stopped.

I have the exact same problem and would be grateful if someone could check my logs just in case.

Edit: Got it! Sorry!

[i][u][b]2014-11-03 23:54 - 2014-11-03 [i][u][b]C:\Users\Anna\Downloads\Microsoft.Windows.XP.Professional.SP3.x86.April.2014.torrent

2014-10-29 11:27 - 2014-10-29 11:27 - 00024711 _____ () C:\Users\Anna\Downloads\WinXP-SP3-PL_multiboot_2008-05-04_(SyMiLiOn).torrent[/b][/u][/i]

So, I’m going to guess, Windows isn’t real, and, on top of that, you have at least 75 more torrent files, if not more (And that’s only from the last month).[u] I will decline to pass your case on to a remover.[/u]

Add this to the list of not real Windows files you currently own -_-
14-10-29 11:04 - 2014-10-29 11:04 - 00019801 _____ () C:\Users\Anna\Downloads\Windows.XP.SP3.PL.9w1.IE8.WMP11.DX.NET.FINAL.FULL.Kwiecien.2014-NiKKA.iso.torrent

Edit: You wiped the logs… Be careful what you do online. We don’t support Piracy here.

I’ll have to ask again;
Avast people, is there something I have to do?

Not to my knowledge, Something is obviously triggering an alert still Would you post an FRST log?

https://forum.avast.com/index.php?topic=53253.0

I’d be glad to…
but how?

Witaj bijonster,

Ściągasz z torrentów? Uważaj, ta strona może cię namierzyć!
Re: http://www.chip.pl/news/wydarzenia/prawo-i-polityka/2011/12/pobierasz-z-torrentow-oni-moga-cie-namierzyc

pozdrawiam,

polonus

Quoted is the English version of the website Polonus posted!!! (Thanks for that Pol!)

It was created just a new online service that keeps track of everything you download from file sharing sites. This could mean trouble for tens of thousands of people who illegally download files Copyright (mainly music and movies).

Downloading from torrents? Beware, this site can you track
Downloading from torrents? Beware, this site can you track

Page: Youhavedownloaded.com, does exactly what its name suggests: it creates a huge database of millions of media files that have been downloaded by tens of millions of numbers, Internet Protocol [IP], from which the files were made available to web sites and services such as BitTorrent. When you visit this site, it automatically scans IP addresses and indicate which files you’ve downloaded.

So far Youhavedownloaded has a database of about 52,286,000 users and 110,800 torrents made up of 1,918,000 individual files. On the home page you can within seconds see a small sample of what married Internet users, including the movie “Spy Kids 4,” “The Walking Dead” and the fourth season of “Sons of Anarchy”.

The site has been built as a proof-of-concept. One of the founders Suren Ter-Saakov, based on studies of a well-known researcher Brian Krebs. This site does not analyze the data using a dynamic IP, which may vary and can be used to hide online activities. The site and servers are also not store any timestamps or other personal information.

  • Despite the many constraints and completely “innocent” nature of Youhavedownloaded.com, still has the ability to scare or embarrass a lot of people before you start downloading pirated material - says Lukasz Nowatkowski, Expert. IT security company G Data.

Ter-Saakov said he received an email from one of the surfers, who asked that his IP information has been removed, because it pulled pornography and he was afraid that his parents know about it.

This page outside Gauge “guilty” also draws attention to how the Internet can be a dangerous trade information that can be obtained on the basis of the user’s IP. Such carelessness very conducive to the spread of malware.

Aside from the mere fact of ethical downloading copyrighted material if you use pages that allow you to exchange files, remember to keep all the necessary precautions. You have no guarantee that the songs you want to download, are exactly what they claim.

  • Check whether your computer is equipped with anti-virus software, allowing to reliably protect your data. Also remember to run a scan all downloaded files - summarizes the expert G Data software.

So… Say, I were to get an Uber, who has your IP address (I don’t, nor do I care!) and had them scan it through, what would I find? (@bijonster)

Więc … Powiedz, miałbym dostać Uber , który ma adres IP ( nie mam , ani mnie to obchodzi !) I miał je zeskanować go przez , co chciałbym znaleźć? ( bijonster )