Be aware . . I went onto You Tube yesterday, to have a look a some kosher aircraft videos. 

 

And clicked on one I had viewed previously, without problems. However, this time round, half way through the video, banner headlines appeared on the video offering alternative possibilities involving "Sexy ladies". Nothing clicked and I didn't click anything at this point ! But I discontinued viewing the video.

 

Next thing I knew was during the evening of the same day. Bit meter software showed  that my machine was involved in an intense heavy duty conversation over the internet which I had not initiated. I checked Windows Update and it wasn't that. I cut the link from this machine to the router/modem and the traffic stopped. However, even after re-booting the tablet and the router several times the unexplained  traffic came back.

 

I suspected that the You Tube encounter earlier in the day had got something to do with this and that a "Naughty stuff" server had been implanted on my machine.

 

So I used W10 utilities to wipe all the temporary files, unloaded the web browser and the web and virus software and wiped the system using CCleaner, including the unused disk space and then reloaded everything from bona fide web sources. 

 

The unexplained heavy web traffic disappeared and as yet, hasn't returned.

 

Anybody else had experience of this on You Tube ? - first time for me !

 

. . . . . And just a few days after the thread invading trolls were given their marching orders on here !

 

I've got bit meter running on this machine, due to some previous  unexplained excessive use charges  (£126 excess for one quarter) which my telecoms provider is trying to obtain recompense for. And can it be a coincidence that, just this week, I ramped up my response to this issue on the Resolver service hosted by money saving expert site ?

 

 

Nick

Edited 17 November, 20169 yr by Clunkclick

I've got bit meter running on this machine, due to some previous  unexplained excessive use charges  (£126 excess for one quarter) which my telecoms provider is trying to obtain recompense for. And can it be a coincidence that, just this week, I ramped up my response to this issue on the Resolver service hosted by money saving expert site ?

This sounds like you're saying BT infected your machine because you're complaining about your excessive use charges?

Edited 17 November, 20169 yr by Mort

Get some decent security software on. The stuff that comes with Windows is free for a reason.

It's most likely not YouTube, but something that's hijacked the flash or video codec.

 

I've got bit meter running on this machine, due to some previous  unexplained excessive use charges  (£126 excess for one quarter) which my telecoms provider is trying to obtain recompense for. And can it be a coincidence that, just this week, I ramped up my response to this issue on the Resolver service hosted by money saving expert site ?

 

 

Nick

 

If you're at the stage of going to the ombudsman (CEDR) don't bother doing it via Resolver. They won't accept contact through a 3rd party. They've got a form you can download to submit. Which reminds me I need to do that fr my complaint with Plusnet.

Get some decent security software on. The stuff that comes with Windows is free for a reason.

+1

Although this should have been step one when BT started claiming high usage.

Security software, installed from outset  of the tablet's use, is/was a standard package provided by the ISP. 

 

I suspect that the first instance of "Excess use" I experienced was of the same cause, but unlike this occasion, how they got round the security wasn't as clear.  This time I think it was a pure trojan embedded  (As it doesn't seem to have propagated elsewhere on my system) in a  copy of a popular You Tube video which activated as soon as the video played - clever. I presume the reason they do it this way, is  that the securiy package can't vet streamed content and that once the user invokes the video to execute on his or her system, he/she has given permisions and its game over. So it probably wouldn't have mattered what security package I had, if any.

 

The issue of the excess charge was, about two weeks ago raised by me to level two l in the Resolver system,  as they weren't supplying the information I requested. After two weeks had elapsed, there'd still been no response, so I contacted them again, thru Resolver, earlier in the week, re-requesting the info originally asked for. Still nothing. The case is now eligible to be raised to the next level and will be if I don't get a response by the weekend. And, by the end of the  week  after next it will become an overdue (Unpaid) bill issue.

 

But the alleged excess usuage, which ran from July to September and amounts to nearly double my  allowance of 45GB stands out like a sore thumb against usuage levels prior to and after the event. Prior to the event, I have never been charged for excess use (As evidenced in my quarterly bills) in the last 14 years and October usuage was within the 45GB limit and, so far this month I've only used about 6 GB up to 15th. 

 

And, as to culpability, the user is encouraged to use the security package provided by the ISP., which is what I did.

 

Speaks for itself.

 

 

Postscript

 

Just had a quick look on the web and was unable to find references to trojans actually embedded in videos. Might this be an innovation by the malwaristers ?

 

 

N.

Edited 17 November, 20169 yr by Clunkclick

Someone keeps going on to my PC and looking at naked ladies..... I'll have to stop! 

Chance would be a fine thing.

 

Presumably, if it was an embedded PHP script in the video, inserted with criminal economic intent, what was the point of telegraphing it to "Victims".

 

I suppose there's the possibility that there is lots of other innocent looking vids on YT with undisclosed  "Diversion/virtual hosting instructions" in them - how do you like paying for that in your premium unlimited data plan.

 

 

N

Edited 21 November, 20169 yr by Clunkclick

The other day you said you did a flash update.... Are you sure it was a was proper flash update and not a spyware/other-nasties install?

The other day you said you did a flash update.... Are you sure it was a was proper flash update and not a spyware/other-nasties install?

I doubt our Nick would do anything that silly..