I bought a THL T9 Plus recently and get some preintalled apps on it, like YouTube. I thought, that this apps are original, because Google Play client recognised these too. My phone behaved strange in some cases, so I tested it with Malwarebytes Anti-Malware.
It found: Android/Trojan.Spy.Agent.YQ
in system/priv-app/thl_YouTube folder.