What is HTML Iframe Inf Malware

HTML: iframe - inf

Hello again,

Today I had the same problem again. When Avast kept giving me warnings and notifications that it has protected me from going onto malicious websites (even when I wasn't surfing), I pushed "More Info" button on the Avast pop-up, which took me to the Avast webpages that explained more about the infection (and attempted browser hijackings or re-direction, or whatever it is).

I did this for two Avast warning pop-ups (that tried to take me to two different malicious sites). Below are the URL's to the two Avast webpages that opened when I clicked the "more info" button on the warning pop-up:

hxxp: //www.avast.com/en-ca/lp-security-information-fp2? p_ext = 0 & utm_campaign = Virus_alert & utm_source = prg_fav_60_0 & utm_medium = prg_systray & utm_content =.% 2Ffa% 2Fen-ca% 2Fvirus-alert-challen = 2Ffa% 2Fen- ca% 2Fvirus-alert-: inf & p_prc = file: // C: \ Program% 20Files \ Common% 20Files \ ComObjects \ update.exe & p_obj = http: //www.allzoomovies.com/? x = 4302 & p_var =.% 2Ffa% 2Fen-ca% 2Fvirus-alert- default2 & p_pro = 0 & p_vep = 6 & p_ves = 0 & p_lqa = 0 & p_lsu = 24 & p_lst = 0 & p_lex = 162 & p_lng = en & p_lid = en-ca & p_elm = 7 & p_vbd = 1367


hxxp: //www.avast.com/en-ca/lp-security-information-fp2? p_ext = 0 & utm_campaign = Virus_alert & utm_source = prg_fav_60_0 & utm_medium = prg_systray & utm_content =.% 2Ffa% 2Fen-ca% 2Fvirus-alert-challen = 2Ffa% 2Fen- ca% 2Fvirus-alert-: inf & p_prc = file: // C: \ Program% 20Files \ Common% 20Files \ ComObjects \ update.exe & p_obj = http: //www.animalsexmania.net/? x = 9171.5825.7884.4683 & p_var =.% 2Ffa% 2Fen-ca% 2Fvirus -alert-default2 & p_pro = 0 & p_vep = 6 & p_ves = 0 & p_lqa = 0 & p_lsu = 24 & p_lst = 0 & p_lex = 162 & p_lng = en & p_lid = en-ca & p_elm = 7 & p_vbd = 1367


Note that the first hijack or re-direct (or whatever) attempt tried to take my browser to allzoomovies.com, which is in the first (Avast website) URL above. The second attempt was to take my browser to www.animalsexmania.net The Avast pop-up popped up perhaps 10 times over a few mins, but it seemed to always be trying to take my browser to one of these two sites.


In addition, I saved the above two web pages in .htm format, and have attached them to this post. If they will open for you, you will see virtually the same pages that I saw when I went to these (Avast info) pages .

Hope this helps, and thanks again,

Daveinsk

Edited by Budapest, 29 January 2012 - 05:43 PM.
Disabled links