HTML IFRAME-INF

Viruses and worms
1

I seriously need help! I believe my computer has been infected with a malware virus. Every couple minutes or so, Avast pops up and says “a virus has been deteched.” The virus is html iframe-inf…i guess it’s coming from www.feedsearchs.com or something like that. I have ran avast 3 times, and it still wont go away. The internet could be off, and nothing will be open and running, but the computer is acting like the internet is running. I can hear pop ups, but yet nothing is on the screen. It’s kinda scary, especially if your sitting at home alone watching tv, then all the sudden your computer starts blurting out adds/pop ups, yet you seen nothing open on the screen. Please help!!! How do I get rid of the virus?

2

Are there these messages with the button “Abort connection”?
If so, close your browsers, clean your temporary files (maybe using CCleaner) and run a full avast scanning.

3

yes, the pop ups say “abort connection”

how do I clean my temporary files with a (CCleaner)

please forgive me…im not the smartest with computers lol.

4

Google is your friend… http://www.ccleaner.com/download
Download, install (without Yahoo toolbar), run.
There is a tutorial in their site also.

5

Well there is no point in guessing as it looks like there is nothing at the URL you gave.

What is the infected file name, where was it found e.g. (the full URL, see below) ?
Check the avast! Log Viewer (right click the avast ‘a’ icon), Warning section, this contains information on all avast detections. C:\Program Files\Alwil Software\Avast4\ashLogV.exe - Or check the source file using notepad C:\Program Files\Alwil Software\Avast4\DATA\log\Warning.log

For URLs change the http part to hXXp so the link isn’t active.

6

There are a few websites that are popping up with this warning:
http://feedsearchs.com/portal/a.php
http://compguard.org/1.html

7

There are a few websites that are popping up with this warning:
hxxp://feedsearchs.com/portal/a.php
hxxp://compguard.org/1.html
hxxp://www.mp3musiclive.net/?udi=find0&cn1=US&cn2=CA&trlev=01\unp254194216
hxxp://www.goasks.com/ads.htm" file

I tried cleaning with the CCleaner, and still have no luck. I still keep getting the warning pop ups from AVAST asking mme to abort the connection. Also my computer is now moving sooooooo slow. Help please…

8

You can’t clean infected websites with ccleaner, that only on your local system and isn’t what I would call a security program, cleaning out the temp internet files, etc. won;t stop avast detecting malware on web sites.

9

So how do I get rid of it…why is my computer now running slow. Is there something that can get rid of the malware, what should I do?

10

I suggest:

  1. Clean your temporary files.
  2. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
  3. Use SUPERantispyware, MBAM or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete them.
  4. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
  5. Make a HijackThis log to post here or this analysis site. Or even submit the RunScanner log to to on-line analysis.
  6. Disable System Restore and then reenable it again.
  7. Immunize your system with SpywareBlaster.
  8. Check if you have insecure applications with Secunia Software Inspector.
11

Firstly this html:iframe-inf didn’t get on your system, which is what my previous comments were about, so would be unrelated to any other symptoms you are experiencing.

So there might be a possibility that you have other malware on your system either hidden or undetected. So work through Tech’s steps, reporting on the results of each step.