Hello!
I am new to this forum and also new to viruses & Co.
I have exactly the same problem: avast keeps popping up with a warning
URL: http:// microsoftntdll.sytes.net/is-ready
Infektion: URL:Mal
Process: C:\windows\sytem32\wscript.exe

Following the suggestions in this thread I have installed MCshield and run it on the USB stick which I used after being to a copy shop and it found it infected. I run Avast on the hard disk, but it did not find anything. I have Windows 7 and I just updated Avast.
If understand right I cannot use the solution with the script in OTL, because it is not a general one.
What should I do?
I’be grateful for any help!
Robi