December 02, 2008
YouTube virus? Actns/Swif.T
Posted by: Jake : Category: Security
From CrunchGear moments ago, reports of a new virus are coming out just this morning. The virus seems to imbed a URL redirect to a phishing site.
The site apparently installs Antivirus 2009, which is malware. We’ll pull our most recent YouTube embeds, but be careful because this one appears to have just broken out today. If you find yourself being automatically redirected or experience other weird pop-ups, especially for something called Antivirus 2009, don’t click on anything.
Keep an eye out for more info/patches/etc on this.
Technorati Tags: Actns, Swif.T, virus, youtube, phishing, supergeekblog, crunchgear
![[Post to Twitter]](http://www.supergeekblog.com/wp-content/plugins/tweet-this/tweet-this-small.png)
Tweet ThisRelated posts:
- Fried trash - powers your TV? Plasma torch garbage processing produces usable gas, electricity Saw...
- Battlestar Galactica Season 4 Promo - The Epic Journey It’s finally coming! The last half of season 4...
- Welcome new visitors! Greetings new visitors! I have noticed a significant amount of...
- SuperGeek Launch! SuperGeek Blog is in the process of launching! We...
- SGB - What is planned? What is planned? That is an interesting question. For...
Subscribe to Supergeekblog by email
December 2nd, 2008 at 12:56 pm
I kept getting it this morning, when I surfed to my own blog at goblinbooks.com. I took out the Yotube embeds, and it went away. So it’s definitely coming from some — not all — Youtube embedded clips.
I had to get rid of my Star Wars Christmas special.
“You bastards,” I whispered as I shut it down.
December 2nd, 2008 at 12:59 pm
I don’t currently have any youtube links, but am going to have to keep an eye on them as plenty of sites I visit do.
December 2nd, 2008 at 1:46 pm
Looks like it’s a false positive by CA.
“Good afternoon. This email is in regards to issue xxxxxx for eTrust AV. I am aware that you are being infected with ACTNS/SWIF.T VIRUS.
Support and the Research team is aware of this “false positive” and is actively working on releasing public signatures to correct this.
In the meantime you can download the beta signatures that will correct the false positive.
Thank you,
CA Technical Support”
December 2nd, 2008 at 2:53 pm
[...] Original post from Supergeekblog.com. Isn’t strictly Axapta/Dynamics related, but has enough people worried that I am doing an extra cross-post here. [...]
December 2nd, 2008 at 2:55 pm
Is it a virus or a code problem? I just clicked on my youtube embed and nothing happened. Someone else told me they clicked on it prior and some virus alert came up.
December 2nd, 2008 at 2:59 pm
@Teresa - that is a really good question. I don’t have a solid answer yet. It is starting to sound like it is a “end user” problem.
Some executable flash code is giving this redirect, and then end users are installing this bogus antivirus.
I still haven’t found a solid answer on where this “youtube embedded code” is coming from though…
December 2nd, 2008 at 4:56 pm
[...] YouTube visitors - there is something funky going on with embedded videos, possible virus/phishing alert. (Actns/Swif.T is what it comes up [...]
December 2nd, 2008 at 5:13 pm
How do we stop the ACTNS/SWIF.T VIRUS thing?
Because I am a sad person that can’t live with out YouTube.
Please HELP ME…..please
WaYnE
December 2nd, 2008 at 5:17 pm
Thank you in advance;if someone can help me stap and block the virus for good.
ACTNS/SWIF.T VIRUS……….?
http://www.dirtywayne80@yahoo.com
December 2nd, 2008 at 5:46 pm
Hi Wayne - welcome to Supergeekblog!
Best advice right now is to not install that antivirus that it redirects to. That is where the actual malware is located.
Beyond that, just make sure to regularly update your antivirus. I am sure there will be updates quickly if this is serious.
December 2nd, 2008 at 6:27 pm
I am dumb whether it is a real virus or not, but I am not taking any chances. Took all links out.
I had dozens of YouTube links on my site and deleted them. Stinks, but easy enough to fix later.
Anyway, I never get past the virus warning, but this is where the youtube link tries to redirect:
http://www.youtube.com/swf/l.swf?swf=http%3A//s.ytimg.com/yt/swf/cps-vfl66122.swf&video_id=bUTBGz4zV9Y&rel=1&showsearch=1&eurl=&iurl=http%3A//i3.ytimg.com/vi/bUTBGz4zV9Y/hqdefault.jpg&sk=cmeruds0w8OsMsAXU41JNDfHiI_qvLrHC&use_get_video_info=1&load_modules=1&fs=1&hl=en
Anybody know if that is good information or not? If so, could youtube use it to fix the problems?
Thanks, qtrtilldawn@hotmail.com
December 2nd, 2008 at 8:30 pm
[...] YouTube virus? Actns/Swif.T December 2nd, 2008 [...]
December 3rd, 2008 at 6:22 pm
i got the virus like a week ago and i think i found a way to get rid of it CA found it but had no info on it so after i went and found the file i deleted it from my hdd and then deleted it from my trash bin i then immedeatly went to my ccleaner register cleaner and cleaned it and it found another file with the virus name in another place so i deleted it and it has not been back in three days