URL:Mal with http://point.lotusiloveyou.com

[system]

Everything seems fine now. Thank you

[dbrisendine]

https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Fix with Farbar Recovery Scan Tool

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[b] This fix was created for this user for use on that particular machine.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[/b]
Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on
  https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
  icon and select
  https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finished FRST will generate a log on the Desktop, called Fixlog.txt.
    Please attach it to your reply.

How is your system running now?

[system]

Can you help me too, please?

@dbrisendine post:2

https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Fix with Farbar Recovery Scan Tool

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[b] This fix was created for this user for use on that particular machine.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[/b]
Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on
  https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
  icon and select
  https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finished FRST will generate a log on the Desktop, called Fixlog.txt.
    Please attach it to your reply.

How is your system running now?

[Eddy]

The log from MBam is missing.

[dbrisendine]

Bruna51,

There is a malicious entry in your registry. Open regedit (press the Win key + the R key, then type regedit and press Enter), navigate to Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies and there should be an entry named “Shell” with value “explorer.exe,msiexec.exe /i http://point…”. Delete it.

Then run (via Win+R dialog) control schedtasks. Select “Task Scheduler Library” in the left panel. In the list in the middle select “PowerWord-SCT-JT” task and delete it.

Then reboot your computer.

Let me know if it worked.

[system]

@Eddy post:4

The log from MBam is missing.

Here it goes