[m00ndogg]

Aloha from Maui,

My girlfriends PC (I'm protected with Avast and lovin' it!) got infected.
She has MicroTrend OfficeScan but it seems to be infected as well.
I installed Avast and it found LOTS of infected files in the Trend folder and scattered in lots of other folders.

Troj_vundo.bcd, Troj_Dropper.aok, Troj_Renos.eo, Trojan:win32/Tibs.gen!ldr, TrojanDownloader:win32/cutwail.s, TrojanDropper:win32/cutwail.AG, Win32:Rootkit-gen [RTK]

Those seem to have been resolved, but the stubborn one is HTML:Iframe-inf.
At least a dozen boot scans, but it still tries to connect to Malicious sites like IRC.ZIEF.PL and KRASPA.COM.
I've tried MS Malicious software removal tools, MS Defender and Avast.  NOW WHAT?

[graveash]

Check out this thread http://forum.avast.com/index.php?topic=42274.0

[m00ndogg]

Thank you VERY much for the quick reply graveash!

I had already read that post because its true that one symptom is the same
(pc trying to connect to irc.zief.pl), but I dont have the virut.h infection.
I have downloaded and will try Dr. Web 'Launch.exe' - Maybe that will solve everything, I'll let you know tomorrow....

Forgive me for being nieve, but...

1. I guess I was hoping for an Avast based solution.  You know, like an 'html:iframe-inf removal tool'.
2. At least one other mention of html:iframe-inf.  Am I the only one who is seeing this?  Is it really something else that is at the heart of it all?

Thanks again.

[graveash]

The link I sent you to was having the exact same problem. The iframe-inf was being added by the infection to every webpage. I would recomend scanning your computer here http://www.kaspersky.com/virusscanner to confirm if it is indeed a virut infection.

Welcome to the forums m00ndogg