Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

Question

HTML:Script-inf HELP

Oct 2, 2018 10:28AM PDT

I don't really remember when it started, but I really need someone's help because whatever this thing is, it's making my anti-virus block perfectly normal websites, I can't play games without the constant popups and it isn't allowing me to update anything on my computer anymore.

I run AVAST! anti-virus on my computer and recently it's been giving me popups every 5-10 minutes, saying it had blocked numerous applications on my computer because it is infected with this 'trojan' called 'HTML:Script-inf'. I have done a full virus scan on Malwarebytes and Avast. No threats detected. I enabled rootkit detection on Malwarebytes, no threats and I even did a scan on my network to see if there were any issues. Nothing. I don't even know how to move this to my vault on Avast if it even is a problem.

This computer is a PC, running on public wifi provided by the apartment complex I live in. It's an iBuyPower and it's running Windows 10. We have a laptop on here that is on the same network and hasn't had any issues.

Currently it is blocking around 40 or so things and has gotten to the point where I can't click links on websites and it won't let my computer, my video card or my platform Steam update.

-- clientconfig.akamai.steamstatic.cxm

-- tile-service.weather.microsoft.cxm

-- cdn.content.prod.cms.msn.cxm

-- cdp1.public-trust.cxm

-- tlu.dl.delivery.mp.microsoft.cxm

-- store-images.s-microsoft.cxm

-- emwl.ws.microsoft.cxm

-- dl.delivery.mp.microsoft.cxm

-- assets.nvidiagrid.nxt

-- crl.globalsign.nxt

-- img-s-msn-com.akamaized.cxm

-- ocsp.digicert.cxm

-- fotkica.cxm

-- www. kqzyfj. cxm


This isn't even all of the things that have been blocked, just things it has blocked since 10am this morning. Can anyone help? Please and thank you!

Discussion is locked

- Collapse -
Answer
This needs to be taken on by Avast.
Oct 2, 2018 11:59AM PDT
- Collapse -
Answer
Reported
Oct 3, 2018 2:34PM PDT

Hi there, thanks for reporting this and I've passed this on to our developers and Threat Labs team to determine what could be causing this. We appreciate you reaching out!

- Collapse -
Possible attack
Oct 4, 2018 7:23AM PDT

I've confirmed that it's very possible this is a genuine MITM or injection attack on the router; in this case, it sounds like you are using a shared router in the apartment complex. This is very possibly a genuine detection.

We recommend that you contact the complex and ask them to ensure that the router is reset and updated with the latest firmware and security updates.

Our Threat Labs team blogged about this here: https://blog.avast.com/phishing-scams-and-mikrotik-routers

And the detection is discussed in more detail on our forums: https://forum.avast.com/index.php?topic=222230.msg1478092#msg1478092