Youtube Video Issue (Updated x2)

[RobotsAreAttacking]

UPDATE 2 UPDATE BOOGALOO: It appears I've resolved the issue, the rootkits are gone. Entered safe mode, moved the files into the recycle bin, then deleted them entirely. I think they're gone for good! Yay!

UPDATE:

However, there is new information I'd like to add: while I was off panicking, I downloaded Kaspersky. It said I had rootkits on my computer (tdsskiller or something like that), with one being rootkit.boot.pihar.b. The only thing I can think of that would have given me that is that I recently downloaded two WADs (custom campaigns or mods or something like that) for Doom II, as I'm very behind the times. Is it possible that old sites could be "corrupted"? Also, how can I remove the rootkits, seeing as the Kaspersky programs aren't doing it to two of these files?

Original Post:

Hello! Long time lurker (for several years, on and off), and I do apologize for suddenly joining just to ask this.

Recently, I was trying to watch/listen to a Youtube video (specifically, a Dark Souls 2 soundtrack from the latest DLC). I was only able to listen to a few seconds before the tab suddenly redirected to another site. While I don't remember exactly what was on the page, I do recall that it had a picture of some woman in a swimsuit, with tons of yellow text all around her. I assume this was an advertisement.

Regardless, I noticed that it had a "Back" button, which I clicked. Said button opened a new tab, but I closed it before I could see where it led. Being concerned that this was a virus, I went and downloaded both AvG and Malwarebytes (despite having read people saying that the former isn't very good), but neither turned up any threats.

So my question(s) to whoever is reading this, is: do you believe that this was a virus of some kind? If so, is there an anti-virus or something I can do that you would recommend?

Please answer quickly, as I'm sitting here very paranoid about what could happen next, and my cat is upset with me for disturbing his nap with furious typing.

EDIT: It occurred to me that I should make it known - this happened only once so far, on said Youtube video. I've been Googling, but haven't found any satisfactory answers so far.

 

[Lilani]

Sounds like it could possibly be adware of a sort, though it's odd that it only happens on that video. Try looking for unusual processes in the task manager.

Could you provide a link to the video? I'd like to see it for myself and see if it does the same to me. Youtube videos on their own shouldn't transmit viruses.

 

[RobotsAreAttacking]

Sounds like it could possibly be adware of a sort, though it's odd that it only happens on that video. Try looking for unusual processes in the task manager.

Could you provide a link to the video? I'd like to see it for myself and see if it does the same to me. Youtube videos on their own shouldn't transmit viruses.

Thank you very much for responding! The video in question was the following: https://www.youtube.com/watch?v=alTQiC6hhGc

I also looked in my task manager for unusual processes before posting in this thread, and found the "smax4pnp" process that I don't recognize. I looked it up and I'm unsure what to do with it, as some sites tell me it can be a virus.

However, there is new information I'd like to add: while I was off panicking, I downloaded Kaspersky. It said I had rootkits on my computer (tdsskiller or something like that), with one being rootkit.boot.pihar.b. The only thing I can think of that would have given me that is that I recently downloaded two WADs (custom campaigns or mods or something like that) for Doom II, as I'm very behind the times. Is it possible that old sites could be "corrupted"? Also, how can I remove the rootkits, seeing as the Kaspersky programs aren't doing it to two of these files?

Sorry for giving more information and questions after you responded, but I just found this out not too long ago, and am in a state of panic.

 

[Lilani]

Thank you very much for responding! The video in question was the following: https://www.youtube.com/watch?v=alTQiC6hhGc

I also looked in my task manager for unusual processes before posting in this thread, and found the "smax4pnp" process that I don't recognize. I looked it up and I'm unsure what to do with it, as some sites tell me it can be a virus.

However, there is new information I'd like to add: while I was off panicking, I downloaded Kaspersky. It said I had rootkits on my computer (tdsskiller or something like that), with one being rootkit.boot.pihar.b. The only thing I can think of that would have given me that is that I recently downloaded two WADs (custom campaigns or mods or something like that) for Doom II, as I'm very behind the times. Is it possible that old sites could be "corrupted"? Also, how can I remove the rootkits, seeing as the Kaspersky programs aren't doing it to two of these files?

Sorry for giving more information and questions after you responded, but I just found this out not too long ago, and am in a state of panic.

Hm, yeah I was able to watch it just fine, no unusual ads or webpage redirects.

As for the rest...I'm not too savvy in the software department so I'm not entirely sure. You may have accidentally clicked a decoy link that installed the adware when you downloaded those things, or it came with them. I had the same problem a while back, though it wasn't a virus but only adware I accidentally downloaded with a file reading program (one of those deals where you have to opt out in order to not install the adware, and I forgot to opt out). So when I realized what was going on I just went to "Uninstall a program" under the control panel, found the offending program, and uninstalled it.

You may try that, but if yours is really a virus then it may not appear in the control panel and it may be too recalcitrant to let itself be uninstalled.

 

[RobotsAreAttacking]

Hm, yeah I was able to watch it just fine, no unusual ads or webpage redirects.

As for the rest...I'm not too savvy in the software department so I'm not entirely sure. You may have accidentally clicked a decoy link that installed the adware when you downloaded those things, or it came with them. I had the same problem a while back, though it wasn't a virus but only adware I accidentally downloaded with a file reading program (one of those deals where you have to opt out in order to not install the adware, and I forgot to opt out). So when I realized what was going on I just went to "Uninstall a program" under the control panel, found the offending program, and uninstalled it.

You may try that, but if yours is really a virus then it may not appear in the control panel and it may be too recalcitrant to let itself be uninstalled.

I'm not positive I clicked the wrong or decoy link, but given how quickly I clicked it without checking where it led or what the pages contents were, it's a possibility. That happened to me before with what I thought was Microsoft's official website for gamepad support (back when I had a decent computer).

Regardless, thank you for your help!