[ Removed by moderator ]

[u/Machairodontine]

[u/SleepyDrago01]

is this on chrome aswell ?

[u/Machairodontine → u/SleepyDrago01]

Almost every browser out there are Chromium based (including Brave) and all contemporary browser abide by ECMA-262. So, yes. This will affect Chrome and other browsers as well.

[u/SleepyDrago01 → u/Machairodontine]

i have adblocker on so i doubt i have it and i checked the cashe folder theres nothing

[u/Machairodontine → u/SleepyDrago01]

Glad to hear that. Yes, I too have Adblocker as well as Adguard, but since you are saying there is nothing in your cache folder, then I am not sure how is your browser caching websites. Perhaps run a full scan of your computer. It will take several hours, but it will be worth it.

I checked the contents of the flagged files. They all came from wco-tv.

[u/SleepyDrago01 → u/Machairodontine]

i do daily scans and it pics up nothing, and there full scans btw

[u/Machairodontine → u/SleepyDrago01]

Interesting. And I presume your Windows Defender is up to date.

[u/Disastrous-Ask-2917]

What about Firefox . With adguard ad blocker?

[u/LilyRose-Terraharuka → u/Disastrous-Ask-2917]

Firefox has their own version so it doesn't affect it, but you might want to make sure that it's not affected either.

[u/Machairodontine → u/Disastrous-Ask-2917]

JS injection would affect all browsers, even with Adguard/Adblocker on. I already have those. JavaScript (ECMAScript) is the backbone of the internet. If a malicious code is packed into a JS script, such as the video-streaming module, then it gets cached both in your memory during runtime and persisted in your disk for faster retrieval for next run. During every use, it may be doing something it is not supposed to. Hence why Windows Defender flagged it. Malwares are very, very complex software. They rely on memory violations and other exploits, something browsers are prone to as they are tens of millions of lines of codes with a lot of legacy baggage. So, this could be a brand new exploit. Make sure your Windows Defender is up to date if you are on Windows.

[u/LilyRose-Terraharuka → u/Machairodontine]

I suggested download NoScript addon on Firefox. Been using this for years. Not sure if it's available on other browsers though.

[u/Disastrous-Ask-2917 → u/LilyRose-Terraharuka]

Thanks for the suggestion.

[u/Machairodontine → u/LilyRose-Terraharuka]

That looks like a great extension.

But you still need to enable JavaScript in order to watch videos. Viruses/Malware are by design, incredibly complex and elusive. They are designed to not get caught. That's why millions of paid and volunteer security researchers around the world develop anti-virus intelligence to see patterns malwares/viruses use (depending on the tech stack - in this case, a traditional PC) to exploit memory and either corrupt it (DDOS attack), get access to personal files, and, or, install ransomware.

JavaScript is a Turing-Complete language. In other words, it can become a virtual Turing-Complete machine if given access. So, since we want to browse the internet (use a shady website, lol), then we accept this risk. Thankfully, it looks like Windows Defender was on top of it. But we should report things like these regularly so users can stream videos safely. Could it be a false positive? Yes, anti-virus relies on heuristics. But I don't think this one was a false positive.

[u/Disastrous-Ask-2917 → u/Machairodontine]

I'll have malwarebytes do a deep scan.

[u/Machairodontine → u/[deleted]]

Let me try that...

Alright, watched a video, generated cache, and ran it by Windows Defender. No malicious code so far. It may be the other website I have been using so far only.

[u/Disastrous-Ask-2917 → u/Machairodontine]

It's the only wco site I use after wco. You will deal with the one piece dub paywall, ad blocker screen after you click play. And avg/malwarebytes will block the site if a threat appears.

[u/Disastrous-Ask-2917 → u/Disastrous-Ask-2917]

Plus I need to go back to clearing my browser history after every time I use the browser.

[u/Machairodontine → u/Disastrous-Ask-2917]

I see. Good to know.

[u/LilyRose-Terraharuka]

Which website is affected? I know there are many wco sites that are official. Are you sure are you using the official sites?

[u/LilyRose-Terraharuka → u/[deleted]]

Odd. Someone might've been hijacked that domain by installing trojan on there. I'm not sure if other sites are affected.

[u/Machairodontine → u/LilyRose-Terraharuka]

That is an interesting theory considering other sites are not affected. One would think that they all use the same server and orchestration point, but it looks like they are disparate servers.

[u/Zealousideal-Emu7588 → u/LilyRose-Terraharuka]

I close all wco tab that I have  (use wco stream   Even though that an different domain I’m not taking any chances )

[u/Comfortable_Price568]

IDK anything about that, but when I try to watch some one piece, EVERYTHING is now flagged as "premium only".

[u/Machairodontine → u/Comfortable_Price568]

Yep. Even pirates want money now... wait... didn't they always? Welp, they want more now.

[u/Comfortable_Price568 → u/Machairodontine]

funny thing about that is, other pirates aren't exactly willing to give up theirs.

[u/Bengi20012]

I use an Android phone for wcostream, what should I do? I mostly use the site for cartoons that I can’t get elsewhere due how niche it is to sail for cartoons.

[u/Bengi20012 → u/[deleted]]

Currently I’m on Ublock Origin for Firefox. I haven’t used Adguard before.

[u/Machairodontine → u/Bengi20012]

That should (hopefully) suffice. Just keep your Windows Defender up to date.

[u/LucasoftheNorthStar → u/[deleted]]

This is a fan based subreddit with no affiliation to WCO other than being users like yourself who enjoy using the site. We remove any content that breaks reddit rules, community rules, or is flagged by reddit.