964594 - Blocklist "Video downloader" add-on

Status: VERIFIED FIXED

(Toolkit :: Blocklist Policy Requests, defect)

Description

[rctgamer3]

Attachment: videodownloader.xpi

Video downloader 2.0.0.430 {77BEC163-D389-42c1-91A4-C758846296A5}

Bypasses about:newaddon and injects ads/remote scripts into Amazon, YouTube and other sites.
Also active under {21EAF666-26B3-4A3C-ABD0-CA2F5A326744} afaik.

Comment 1

[Jorge Villalobos [:jorgev] (he/him)]

How was this add-on installed? Also, how did you find out about the other ID?

Comment 2

[rctgamer3]

I saw a report of the V-bates add-on on a Dutch tech support site. http://www.pcwebplus.nl/phpbb/viewtopic.php?f=222&t=12899

After Googling V-bates (and the extension IDs mentioned) I found this YouTube video downloader.
Homepage: http://www.vid-downloader.com

Ran the setup in a sandbox and it installed itself into my profiles.
It installs a BHO into IE called "V-bates Helper" which is how I knew it was V-bates related.

("Video downloader" mentioned in bug 881825)

Comment 3

[Jorge Villalobos [:jorgev] (he/him)]

Note: V-bates was also mentioned on bug 881825, but we didn't have a concrete sample. Now we do, and it is clearly being silently installed.

Comment 4

[Jorge Villalobos [:jorgev] (he/him)]

Blocked: https://addons.mozilla.org/en-US/firefox/blocked/i566. Note that only {77BEC163-D389-42c1-91A4-C758846296A5} is being blocked, since it's the one I was able to verify.

Comment 5

[Iulian Timis]

Verified as fixed in https://addons.mozilla.org/en-US/firefox/blocked/i566 on FF27 (Win 7).
Closing bug.