The problem is as described in the title. I was booking an interrail ticket like 10 minutes ago, and since then Avast keeps popping up saying time and again that a malicious URL was blocked. Am I being attacked or something? I am not browsing anywhere. All seems to be from xmlrpc.php, on various hosts.
Process is always the same: C:\Windows\System32\rundll.exe. The infection varies.