Infection blocked but the URL shown has never been visited (HTML:lframe-inf)

system · 2015-08-25T05:39:52.000Z

Hello,

First of all, thank you for taking the time and I really appreciate it.

Every once in a while, Avast would show a pop up saying Infection is blocked, but I have never visited that URL. The pop up does not appear often, maybe 1-2 times a day and does so at random times while browsing different sites. The Avast scan and Malwarebytes did not detect anything at all.

Please let me know what I should do next. All help appreciated!

Pondus · 2015-08-25T06:02:55.000Z

see here https://forum.avast.com/index.php?topic=53253.0
scroll down to second picture … Farbar Recovery Scan Tool … run as instructed and attach the two diagnostic logs

see below the box you write in … Attachments and other options

there may be some hours wait before anyone is online and can assist you

system · 2015-08-25T06:26:48.000Z

Thank you Pondus,

I have attached the files as you instructed…now I wait

TwinHeadedEagle · 2015-08-25T06:42:32.000Z

Hello,

https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

[*]Right-click on
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
[]Wait patiently until the main console will appear, it may take a minute or two.
[]In the main box please paste in the following script:

createsrpoint;
autoclean;
emptyalltemp;
ipconfig /flushdns >>"%temp%\log.txt";b

[*]Make sure that Scan All Users option is checked.
[*]Push Run Script and wait patiently. The scan may take a couple of minutes.
[*]When the scan completes, a zoek-results logfile should open in notepad.
[*]If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Post its content into your next reply.

system · 2015-08-25T07:34:31.000Z

Thank you TwinHeadedEagle,

I finished the scan and attached the results.

TwinHeadedEagle · 2015-08-25T12:52:42.000Z

Good. How is your PC behaving now?

system · 2015-08-25T15:55:18.000Z

Hello Twin,

Up to now I have not yet seen the pop up appear. I will have to use it for 1-2 more days to know for sure, since it only pops up once in a while. I’ll keep you updated though.

Thank you for your help! (So the ZOEK cleaned up the computer of unwanted items?)

system · 2015-08-26T02:11:31.000Z

Hello,

This morning when I turned on my computer, the pop-up appeared again (2 of them), indicating the same message from the same URL.

Is there anything else that I can try?

All help appreciated. Thank you in advance.

TwinHeadedEagle · 2015-08-26T06:18:46.000Z

https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

[*]Right-click on
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
[*]Make sure that Addition option is checked.
[*]Press Scan button and wait.
[*]The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please include their content into your next reply.

system · 2015-08-26T07:07:40.000Z

Hello TwinHeadedEagle,

I have attached the two logs below.

I noticed that the pop-up warning came up a lot more frequently today, about 5-6 times within 5 hours.

At work, I connect to the office’s wifi router. After an Avast Smart Scan was completed, it indicated that there were some issues with the Home Network Security and wanted me to enter router’s password to fix the issue.

Upon seeing that, I immediately disconnected from the router and used the internet from my phone instead. I scanned for network threat again and it said that it didn’t find any problems on the network.

Is it possible that the router is breached, and someone is trying to ask my computer to go to that URL?

Thank you once again, really appreciate it.

TwinHeadedEagle · 2015-08-26T14:02:42.000Z

Yes, it could be possible. You can also try to reinstall Google Chrome if you only get warning for Chrome.

system · 2015-08-26T14:19:01.000Z

I have tried uninstalling and reinstalling google chrome already and it did not seem to help.

However, the popup has not yet appeared since I got home.

Right now I am just hoping it’s the problem from router at work.

Will update if anything happens…

Thank you so much for your help though!!

system · 2015-08-28T11:54:55.000Z

The pop-up warning has not appeared since last message…until now.

I noticed that the warning appeared when I was visiting this page: http://scribol.com/lifestyle/written-months-before-death-young-girl-taylor-smith-letter-will-inspire-sadden?utm_source=H_Skylikes&utm_medium=referral&utm_content=3237

To make sure that it was from this site, I opened it 4 more times, and the warning appeared 3 times.

Is it possible that certain sites are problematic and makes avast show a warning? Even though the urls do not match?

And should I be concerned with whether my computer is infected with virus or malware?

Thanks in advance!

Announcements