Problem z wchodzeniem na strony

[SJN3000]

Siema, mam taki problem. Jak próbuję wejść na niektóre strony (np. botoflegends) to mi wyskakuje takie coś.  http://www.freeappstools.com/pl/alounblock.html

Jak to usunąć?

[SJN3000]

Proszę bardzo.

 

OTL: http://wklejto.pl/199303

 

EXTRAS: http://wklejto.pl/199304

 

Dodam, że plik PRAWDOPODOBNIE pochodzi z przedwczoraj, bo wtedy zaczęły się te "redirecty" 

[SJN3000]

Zrobiłem logi, ale są strasznie długie ;c

[Nezvik]

Na virustotal.com przeskanuj pliki:

C:\Windows\SysNative\Drivers\kbfiltr.sys

C:\Windows\{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}_WiseFW.ini

C:\Users\Jan\AppData\Roaming\maybe.exe
C:\Users\Jan\AppData\Roaming\trey.exe

:OTL
MOD - [2014/01/02 17:51:32 | 003,153,904 | ---- | M] () -- C:\Users\Jan\AppData\Local\fst_pl_31\upfst_pl_31.exe
SRV - [2014/04/23 12:17:31 | 000,118,056 | ---- | M] (Elex do Brasil Participações Ltda) [Auto | Running] -- C:\Program Files (x86)\iSafe\iSafeSvc.exe -- (iSafeService)
SRV - [2014/02/26 15:28:24 | 000,425,104 | ---- | M] (Taiwan Shui Mu Chih Ching Technology Limited.) [Auto | Running] -- C:\Program Files (x86)\WinZipper\winzipersvc.exe -- (winzipersvc)
DRV:[b]64bit:[/b] - [2014/04/23 12:19:45 | 000,043,520 | ---- | M] (Elex do Brasil Participações Ltda) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\iSafeKrnlBoot.sys -- (iSafeKrnlBoot)
DRV - [2014/04/23 12:19:47 | 000,048,128 | ---- | M] (Elex do Brasil Participações Ltda) [Kernel | System | Running] -- C:\Program Files (x86)\iSafe\iSafeNetFilter.sys -- (iSafeNetFilter)
DRV - [2014/04/23 12:19:46 | 000,066,048 | ---- | M] (Elex do Brasil Participações Ltda) [Kernel | System | Running] -- C:\Program Files (x86)\iSafe\iSafeKrnlKit.sys -- (iSafeKrnlKit)
DRV - [2014/04/23 12:19:43 | 000,232,960 | ---- | M] (Elex do Brasil Participações Ltda) [File_System | On_Demand | Running] -- C:\Program Files (x86)\iSafe\iSafeKrnl.sys -- (iSafeKrnl)
O4 - HKLM..\RunOnce: [upfst_pl_31.exe] C:\Users\Jan\AppData\Local\fst_pl_31\upfst_pl_31.exe ()
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=ds&from=wpm0226&uid=HitachiXHTS727575A9E364_J3340084HVRHXAHVRHXAX&ts=1393421124&type=default&q={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=ds&from=wpm0226&uid=HitachiXHTS727575A9E364_J3340084HVRHXAHVRHXAX&ts=1393421124&type=default&q={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKCU\..\SearchScopes,DefaultScope = {0191A6B0-1154-4C22-9182-23A95BBE92D9}
IE - HKCU\..\SearchScopes\{0191A6B0-1154-4C22-9182-23A95BBE92D9}: "URL" = http://www.google.com/search?q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.awesomehp.com/web/?type=ds&ts=1392910632&from=tt4u&uid=HitachiXHTS727575A9E364_J3340084HVRHXAHVRHXAX&q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.awesomehp.com/web/?type=ds&ts=1392910632&from=tt4u&uid=HitachiXHTS727575A9E364_J3340084HVRHXAHVRHXAX&q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKLM\..\SearchScopes,DefaultScope = {0191A6B0-1154-4C22-9182-23A95BBE92D9}
IE - HKLM\..\SearchScopes\{0191A6B0-1154-4C22-9182-23A95BBE92D9}: "URL" = http://www.google.com/search?q={searchTerms}
IE - HKLM\..\SearchScopes\{2FF71901-6190-A9AF-970E-3585DA2FC33B}: "URL" = http://search.delta-homes.com/web/?utm_source=b&utm_medium=newgdp&from=newgdp&uid=HitachiXHTS727575A9E364_J3340084HVRHXAHVRHXAX&ts=0
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0191A6B0-1154-4C22-9182-23A95BBE92D9}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0191A6B0-1154-4C22-9182-23A95BBE92D9}: "URL" = http://www.google.com/search?q={searchTerms}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{2A36D998-6019-8578-C7DE-563CBAD61C7C}: "URL" = http://search.delta-homes.com/web/?utm_source=b&utm_medium=newgdp&from=newgdp&uid=HitachiXHTS727575A9E364_J3340084HVRHXAHVRHXAX&ts=0
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd103&cd=2XzuyEtN2Y1L1QzuyCzzyD0DyEtA0DzzyBtCtAyEtAzy0AyBtN0D0Tzu0CyCyCyEtN1L2XzutBtFtBtFyDtFtCtDyBtDtN1L1Czu1L1C1H1B1QtCtDtA&cr=82497921&ir=
O4 - HKCU..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart File not found
O4 - HKCU..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background File not found
O4 - HKCU..\Run: [Overwolf] C:\Program Files (x86)\Overwolf\Overwolf.exe -silent File not found
O4 - HKLM..\Run: [fst_pl_31] C:\Program Files (x86)\fst_pl_31\fst_pl_31.exe ()
O4 - HKCU..\Run: [Xfire] C:\Program Files (x86)\Xfire2\Xfire.exe File not found
O4 - HKCU..\Run: [xwidget] C:\Program Files (x86)\XWidget\xwidget.exe File not found
O8:[b]64bit:[/b] - Extra context menu item: &Download All using 4shared Desktop - res://C:\Program Files (x86)\4shared Desktop\Desktop.32/D_ALL_LINK File not found
O8:[b]64bit:[/b] - Extra context menu item: &Download using 4shared Desktop - res://C:\Program Files (x86)\4shared Desktop\Desktop.32/D_ONE_LINK File not found
O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found
O8:[b]64bit:[/b] - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000 File not found
O8:[b]64bit:[/b] - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105 File not found
O8:[b]64bit:[/b] - Extra context menu item: Wyślij &do programu OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: &Download All using 4shared Desktop - res://C:\Program Files (x86)\4shared Desktop\Desktop.32/D_ALL_LINK File not found
O8 - Extra context menu item: &Download using 4shared Desktop - res://C:\Program Files (x86)\4shared Desktop\Desktop.32/D_ONE_LINK File not found
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: Wyślij &do programu OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 File not found
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll File not found
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll File not found
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - AutoRun File - [2013/08/13 21:35:55 | 000,000,000 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
 
:Files
C:\Windows\SysNative\drivers\iSafeKrnlBoot.sys
C:\Users\Jan\AppData\Roaming\sp_data.sys
C:\Users\Jan\AppData\Local\fst_pl_31\upfst_pl_31.exe

:Commands
[emptytemp]

[Janusz.]

Wykonaj logi OTL

www.mpcforum.pl/topic/679592-tutlogi-co-i-jak/

[Rocki star12]

wsadź pan je na wklejto.pl

Potem udostępnij tutaj. Pliki extras i te 2.