First break the link to a suspect site so as to avoid accidental exposure - hXXp://69.28.58.10/favicon.ico
For me the IP turns up a different ISP C3 Networks.
There is a possibility that it may have been hacked as modifying the favicon.ico file is a common symptom. Instead of a small icon appearing in the address bar code can be introduced to try and execute a drive by malware infection.
The favicon.ico file would have been first intercepted, checked and if found or considered infected it wouldn’t have been loaded or run by the browser. Avast would have aborted that connection to prevent it being downloaded into the browser cache and into the browser…
