log2.soft.cn.yahoo.com

Hi,

Lately when i use internet explorer and try to connect to any webpage this link appear at ie’s bottom bar:
hxxp://log2.soft.cn.yahoo.com/cnsmin/_coop/cnsminex_empty.htm?sc=ystat" style=“display: none;” height=“0” width=“0”>"

its been problematic for me as it can prevent me from accessing many webpages such as my e-mail.

When I tried to scan my pc using avast to see whether if its caused by some kind of virus or malware it tells me that my computer is infected by VBS: malware-gen. however i doubt that its the problem because despite deleting the infected files, the same problem keeps coming back and as i did more scans, it continues to find the same malware. whats even stranger is that sometimes the problems seems to disappear only to reappear a few hours later.

has anyone encountered the same problem or knows a way to fix this?

thanks,

I’m having the same problem along with other stange links ???

you can block it through linux box.i don’t know about window, just go to ACL file and made these changes
acl all src 0.0.0.0/0.0.0.0
acl localhost src 127.0.0.1/255.255.255.255

acl SSL_ports port 445 443 441 563
acl Safe_ports port 80 # http
acl Safe_ports port 81 #
acl Safe_ports port 21 # ftp
acl Safe_ports port 445 443 441 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT

http_access allow localhost
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
acl blocked_sites url_regex http://js.tongji.cn.yahoo.com/621252/ystat.js
acl blocked_sites url_regex http://js.tongji.cn.yahoo.com/
acl blocked_sites url_regex http://v.freefl.info/014.htm
acl blocked_sites url_regex http://v.freefl.info/real10.htm
acl blocked_sites url_regex http://v.freefl.info/014.htm
acl blocked_sites url_regex http://v.freefl.info/real11.htm
acl blocked_sites url_regex http://v.freefl.info/lz.htm
acl blocked_sites url_regex http://v.freefl.info/bf.htm
acl blocked_sites url_regex http://v.freefl.info/kong.htm
http_access deny blocked_sites
http_access allow localnet
http_access deny all

now Trojan horse is blocked cuz its internal links have been blocked ,…enjoy and sleep