"Malicious URL Blocked" message pops up constantly

Viruses and worms
1

I know that this issue has been discussed here before but I tried all those steps and I can’t get this Malware Virus off my computer

Please Help

The Avast message is:
URL: hxxp://stream-xtech.eu/wp-login.php?v
Processo: C:\Windows\Explorer.EXE
Infecção: URL:Ma

in attachment my OTL log

2

Please make your link unklickable: for example hxxp instead of http

DJBone

3

Hi you look to have thrown everything at it bar the kitchen sink

Let me know if this kills it

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF


:OTL
[2012-09-08 01:38:32 | 000,005,176 | ---- | M] () (No name found) -- C:\Users\Joana\AppData\Roaming\mozilla\firefox\profiles\dd6d8gls.default\extensions\504aa15a07ed3@504aa15a07f0c.info.xpi
O2 - BHO: (no name) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O4 - HKLM..\Run: [tuto4pc_pt_6] File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present

:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

THEN

CLEAR THE BAD TOOLBARS

Download AdwCleaner from here to your desktop
Run AdwCleaner and select Delete

https://dl.dropbox.com/u/73555776/AdwCleaner.GIF

Once done it will ask to reboot, allow this
On reboot a log will be produced please attach that

4

When I ran malwarebyte this time it removed 3 that never found and looks like it stopped.

Tkx anyway essexboy

5

[2012-09-08 01:38:32 | 000,005,176 | ---- | M] () (No name found) – C:\Users\Joana\AppData\Roaming\mozilla\firefox\profiles\dd6d8gls.default\extensions\504aa15a07ed3@504aa15a07f0c.info.xpi

This one is still a problem waiting to happen