Avast keeps finding HTML: Script-inf

[REDACTED]

Hello, I'm kinda stuck with this problem, every 2-10 minutes, Avast blocks some conections from HTML: Script-inf, what worries me is that the files blocked are some executables like ccleaner.
Some other process blocked are:
C:/Windows/explorer.exe
C:/Windows/svchost.exe
I also tried to use online scanners but they found nothing.

[Pondus]

Instructions  >>>  https://forum.avast.com/index.php?topic=194892.0


screenshots of avast detections would also help

[REDACTED]

Hi, sorry for the delay, malwarebytes took a really long time, here's the results, also a few screenshots of the problem, my Main language is spanish, I hope it is not a problem. Many of the warnings are related to Windows update or MSN.
I can't post images yet, I exceeded the size limit In this post, I don't want to doublepost.

[PDI]

Hi 00kronos,

you have a MikroTik router probably. You have to reset the configuration to the factory defaults, upgrade it's firmware and set the configuration again or reapply the configuration backup you created after first set up.

Regards,
PDI

[Sass Drake]

• Open Notepad (click Start button -> type notepad.exe -> press Enter)
• Copy text from code block below and paste it into Notepad

Code: [Select]

EmptyTemp:

• Go to File -> Save As
• Make sure that  UTF-8 is selected as Encoding (left side of Save button)
• Save it as fixlist.txt on Desktop
• Open again FRST and click on button Fix
• Wait until FRST finishes
• fixlog.txt should be genereted and opened. Attach it your post and wait further instructions.

[REDACTED]

Here's the results, so far no mayor problems, still I'll contact my internet distributor to reset my router, until then I'll wait until futher instructions

[Pondus]

still I'll contact my internet distributor to reset my router,

They usually have a reset button on the backside ...

[REDACTED]

still I'll contact my internet distributor to reset my router,

They usually have a reset button on the backside ...

I mean factory reset, I never did this before so I'm unsure if I mess up something

[Pondus]

Hi 00kronos,

you have a MikroTik router probably. You have to reset the configuration to the factory defaults, upgrade it's firmware and set the configuration again or reapply the configuration backup you created after first set up.

Regards,
PDI

https://www.zdnet.com/article/thousands-of-mikrotik-routers-are-snooping-on-user-traffic/

https://www.zdnet.com/article/mikrotik-routers-enslaved-in-massive-coinhive-cryptojacking-campaign/

https://www.symantec.com/blogs/threat-intelligence/hacked-mikrotik-router