Jump to content

Recommended Posts

I have a laptop running Windows 7 Professional. I've installed the paid version of Malwarebytes and I've run several scans. On the first scan, Malwarebytes discovered several trojans and they were all cleaned. Other scans indicated there were no problems. However, Malwarebytes alerts me that several malicious web sites are being blocked. The web sites are names like "thousands-search.com" or "diseases-search.com." They all are from IP 192.162.19.34. It appears to be a Russian domain. At any rate, the apparent malware creates a directory in USER NAME\appdata\roaming\onzycyik\etbiitu.exe. I've tried deleting the tasks but they keep coming back. I was finally able to delete that directory, but it came back. I used Malwarebytes root kit scanner and it found no rootkits. I've searched on the web for anything related to etbiitu, but found nothing. I even went through the Registry and deleted all references to etbiitu, but it keeps coming back. I would be grateful for any help!
 

Link to post
Share on other sites

Hello bwfqtbq and :welcome:

Your description seems to describe a persistent, and perhaps morphing, malware that's currently eluding your anti-virus protections as well of those within Malwarebytes Anti-Malware.

I recommend following the advice from the topic: Available Assistance for Possibly Infected Computers and have one of the Malware Removal Experts assist you with your issue.

If, as recommended, you do open a topic in Malware Removal Help, please make reference to this thread.

Thank you. :)

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.