Author Topic: hxxp:iframe.inf on yahoo mail  (Read 3528 times)

0 Members and 1 Guest are viewing this topic.

jereth

  • Guest
hxxp:iframe.inf on yahoo mail
« on: September 18, 2012, 04:49:46 AM »
starting today this error ,  hxxp:iframe.inf   on this webaddress hxxp://uk.mg40.mail.yahoo.com/ws/mail/v2.0/jsonrpc?appid pops up when i try to log into one of my yahoo accounts with the process of what ever browser i happen to be running



avast came up clean as did spybot
help please

logs attached
« Last Edit: September 19, 2012, 12:07:59 AM by jereth »

CharleyO

  • Guest
Re: hxxp:iframe.inf on yahoo mail
« Reply #1 on: September 18, 2012, 04:57:11 AM »
***

Go here :   http://forum.avast.com/index.php?topic=53253.msg451454#msg451454

Read what essexboy needs you to use and post the results in this thread you started as attachments.

See an example here:   http://forum.avast.com/index.php?topic=105816.msg842175#msg842175

Oh, and welcome to the forums!


***
« Last Edit: September 18, 2012, 05:02:51 AM by CharleyO »

jereth

  • Guest
Re: hxxp:iframe.inf on yahoo mail asmbr log
« Reply #2 on: September 19, 2012, 12:22:06 AM »
heres the mbr log

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: hxxp:iframe.inf on yahoo mail
« Reply #3 on: September 19, 2012, 12:26:18 AM »
seems your post was missed...it was a bit hectic here yesterday

i will notifie the removers so they see it

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: hxxp:iframe.inf on yahoo mail
« Reply #4 on: September 19, 2012, 02:53:31 PM »
Hi there let me know if this resolves the problem

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following


Code: [Select]
:OTL
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\PROGRAM FILES\WEB ASSISTANT\FIREFOX
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (no name) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No CLSID value found.
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - No CLSID value found.
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.


:Files
C:\PROGRAM FILES\WEB ASSISTANT

:Commands
[purity]
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

jereth

  • Guest
Re: hxxp:iframe.inf on yahoo mail
« Reply #5 on: September 19, 2012, 09:37:36 PM »
the avast warning still shows up on a specific valid email ran the fix you said

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: hxxp:iframe.inf on yahoo mail
« Reply #6 on: September 19, 2012, 10:22:40 PM »
Is it just one e-mail or them all ?


jereth

  • Guest
Re: hxxp:iframe.inf on yahoo mail
« Reply #7 on: September 19, 2012, 10:34:47 PM »
sometimes just one from a litigimate site, the email originated  from gompels.co.uk  customer service

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: hxxp:iframe.inf on yahoo mail
« Reply #8 on: September 19, 2012, 11:19:21 PM »
If they only originate from one addressee then I would make an educated gues that there is something about their e-mails that Avast does not like

As it stands at the moment I can see no malware present

jereth

  • Guest
Re: hxxp:iframe.inf on yahoo mail
« Reply #9 on: September 20, 2012, 12:18:06 AM »
good to know thanks i do try to keep my pc clean

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: hxxp:iframe.inf on yahoo mail
« Reply #10 on: September 20, 2012, 06:02:48 PM »
Are then any other problems before I clean up ?