A little help

Viruses and worms
1

Sorry I’m kind of new to this…
One day my friend’s laptop unable to browse any page, the pages loaded nothing but blanks, I checked the page “view source” (He’s using opera) and it showed like this:

His AIS reports nothing at all and always updated. How to fix this please

2

Attach your basic diagnostic logs. (MBAM, FRST and aswMBR)
Instructions: https://forum.avast.com/index.php?topic=53253.0

3

Okay my friend got lazy and reset his laptop…
But I’m curious about this, I tried Malwarebytes and no threat found, what kind of virus is this?
Can anyone explain the script above? How it got there, what it does, I noticed something like a proxy “10.24.224.140:8080”, does it alter browser or network proxy, why does it only load blanks, thanks for the help

4

according to this scan result the code above is not malicious
https://www.virustotal.com/nb/file/1ff84cce3264e7a70b24499e6be213dee668bb651a5e8742db11214f871531c9/analysis/1431589837/

5

Not malicious?

I get infected too, some website will not affected like google, gmail, yahoo, etc. But when I browse any unpopular website the script sometime redirect me into ads on iframe or blank page. I get notice when I open stackoverflow website and their group website which have anti-iframe javascript and give me alert every I load their website = “For security reasons, framing is not allowed; click OK to remove the frames.”

Any website with frame or jquery box/popup/cbox will redirect to blank page or ads. Very Annoying!

Short conclusion, this is stupid modem server script (smartfren). Some people who use smartfren infected too :
ex: (https://plus.google.com/+MhdSulhan/posts/9gtA4kzdinG)

6
Short conclusion, this is stupid modem server script (smartfren). Some people who use smartfren infected too : ex: (https://plus.google.com/+MhdSulhan/posts/9gtA4kzdinG)
script sample scan https://www.virustotal.com/en/file/71c6652cdeecd14c423e24a54e6f1b8aa8f30d365ba0142a3c63e84dcd17e757/analysis/1431622853/ https://www.virustotal.com/en/file/1ff84cce3264e7a70b24499e6be213dee668bb651a5e8742db11214f871531c9/analysis/1431622866/

if you need help, follow instructions in the link Asyn posted above …

7

He is using Smartfren…
Thanks venita, did you able to get around it?