Malicious Web Sites

[bwfqtbq]

I have a laptop running Windows 7 Professional. I've installed the paid version of Malwarebytes and I've run several scans. On the first scan, Malwarebytes discovered several trojans and they were all cleaned. Other scans indicated there were no problems. However, Malwarebytes alerts me that several malicious web sites are being blocked. The web sites are names like "thousands-search.com" or "diseases-search.com." They all are from IP 192.162.19.34. It appears to be a Russian domain. At any rate, the apparent malware creates a directory in USER NAME\appdata\roaming\onzycyik\etbiitu.exe. I've tried deleting the tasks but they keep coming back. I was finally able to delete that directory, but it came back. I used Malwarebytes root kit scanner and it found no rootkits. I've searched on the web for anything related to etbiitu, but found nothing. I even went through the Registry and deleted all references to etbiitu, but it keeps coming back. I would be grateful for any help!
 

[1PW]

Hello bwfqtbq and

Your description seems to describe a persistent, and perhaps morphing, malware that's currently eluding your anti-virus protections as well of those within Malwarebytes Anti-Malware.

I recommend following the advice from the topic: Available Assistance for Possibly Infected Computers and have one of the Malware Removal Experts assist you with your issue.

If, as recommended, you do open a topic in Malware Removal Help, please make reference to this thread.

Thank you.