I have a laptop running Windows 7 Professional. I've installed the paid version of Malwarebytes and I've run several scans. On the first scan, Malwarebytes discovered several trojans and they were all cleaned. Other scans indicated there were no problems. However, Malwarebytes alerts me that several malicious web sites are being blocked. The web sites are names like "thousands-search.com" or "diseases-search.com." They all are from IP 192.162.19.34. It appears to be a Russian domain. At any rate, the apparent malware creates a directory in USER NAME\appdata\roaming\onzycyik\etbiitu.exe. I've tried deleting the tasks but they keep coming back. I was finally able to delete that directory, but it came back. I used Malwarebytes root kit scanner and it found no rootkits. I've searched on the web for anything related to etbiitu, but found nothing. I even went through the Registry and deleted all references to etbiitu, but it keeps coming back. I would be grateful for any help!
