:OTL PRC - [2014-12-16 10:02:44 | 000,347,944 | ---- | M] (Elex do Brasil Participações Ltda) – C:\Program Files (x86)\Elex-tech\YAC\iSafeTray.exe PRC - [2014-12-16 09:56:18 | 000,118,048 | ---- | M] (Elex do Brasil Participações Ltda) – C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc2.exe PRC - [2014-12-16 09:56:05 | 000,118,048 | ---- | M] (Elex do Brasil Participações Ltda) – C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe MOD - [2014-12-18 10:11:27 | 001,175,040 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\wx._core_.pyd MOD - [2014-12-18 10:11:27 | 001,160,704 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082_ssl.pyd MOD - [2014-12-18 10:11:27 | 001,062,400 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\wx._controls_.pyd MOD - [2014-12-18 10:11:27 | 000,811,008 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\wx._windows_.pyd MOD - [2014-12-18 10:11:27 | 000,805,888 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\wx._gdi_.pyd MOD - [2014-12-18 10:11:27 | 000,735,232 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\wx._misc_.pyd MOD - [2014-12-18 10:11:27 | 000,713,216 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082_hashlib.pyd MOD - [2014-12-18 10:11:27 | 000,686,080 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\unicodedata.pyd MOD - [2014-12-18 10:11:27 | 000,557,056 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\pysqlite2._sqlite.pyd MOD - [2014-12-18 10:11:27 | 000,525,640 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\windows._lib_cacheinvalidation.pyd MOD - [2014-12-18 10:11:27 | 000,364,544 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\pythoncom27.dll MOD - [2014-12-18 10:11:27 | 000,320,512 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\win32com.shell.shell.pyd MOD - [2014-12-18 10:11:27 | 000,167,936 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\win32gui.pyd MOD - [2014-12-18 10:11:27 | 000,128,512 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082_elementtree.pyd MOD - [2014-12-18 10:11:27 | 000,127,488 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\pyexpat.pyd MOD - [2014-12-18 10:11:27 | 000,119,808 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\win32file.pyd MOD - [2014-12-18 10:11:27 | 000,110,080 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\pywintypes27.dll MOD - [2014-12-18 10:11:27 | 000,108,544 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\win32security.pyd MOD - [2014-12-18 10:11:27 | 000,098,816 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\win32api.pyd MOD - [2014-12-18 10:11:27 | 000,087,552 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082_ctypes.pyd MOD - [2014-12-18 10:11:27 | 000,078,336 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\wx._animate.pyd MOD - [2014-12-18 10:11:27 | 000,070,656 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\wx._html2.pyd MOD - [2014-12-18 10:11:27 | 000,045,568 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082_socket.pyd MOD - [2014-12-18 10:11:27 | 000,038,912 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\win32inet.pyd MOD - [2014-12-18 10:11:27 | 000,027,136 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082_multiprocessing.pyd MOD - [2014-12-18 10:11:27 | 000,025,600 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\win32pdh.pyd MOD - [2014-12-18 10:11:27 | 000,024,064 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\win32pipe.pyd MOD - [2014-12-18 10:11:27 | 000,022,528 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\win32ts.pyd MOD - [2014-12-18 10:11:27 | 000,018,432 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\win32event.pyd MOD - [2014-12-18 10:11:27 | 000,017,408 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\win32profile.pyd MOD - [2014-12-18 10:11:27 | 000,011,264 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\win32crypt.pyd MOD - [2014-12-18 10:11:27 | 000,010,240 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\select.pyd MOD - [2014-12-18 10:11:27 | 000,007,168 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\hashobjs_ext.pyd MOD - [2014-12-18 10:11:26 | 000,122,368 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\wx._wizard.pyd MOD - [2014-12-18 10:11:26 | 000,035,840 | ---- | M] () – C:\Users\Maciek\AppData\Local\Temp_MEI26082\win32process.pyd SRV - [2014-12-16 09:56:05 | 000,118,048 | ---- | M] (Elex do Brasil Participações Ltda) [Auto | Running] – C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe – (iSafeService) DRV:64bit: - [2014-12-16 10:02:05 | 000,045,224 | ---- | M] (Elex do Brasil Participações Ltda) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\iSafeKrnlBoot.sys – (iSafeKrnlBoot) DRV:64bit: - [2014-11-03 10:04:18 | 000,049,320 | ---- | M] (Elex do Brasil Participações Ltda) [Kernel | System | Running] – C:\Windows\SysNative\drivers\iSafeNetFilter.sys – (iSafeNetFilter) DRV - [2014-12-16 10:02:05 | 000,249,000 | ---- | M] (Elex do Brasil Participações Ltda) [File_System | System | Running] – C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys – (iSafeKrnl) DRV - [2014-12-16 10:02:05 | 000,099,496 | ---- | M] (Elex do Brasil Participações Ltda) [Kernel | System | Running] – C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys – (iSafeKrnlKit) DRV - [2014-12-16 10:01:59 | 000,065,704 | ---- | M] (Elex do Brasil Participações Ltda) [Kernel | System | Running] – C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys – (iSafeKrnlR3) DRV - [2004-01-26 16:36:35 | 000,095,552 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] – C:\Windows\SysWOW64\drivers\prohlp02.sys – (prohlp02) DRV - [2003-12-01 16:20:52 | 000,004,832 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] – C:\Windows\SysWOW64\drivers\sfhlp01.sys – (sfhlp01) FF - prefs.js…browser.search.isUS: false FF - user.js - File not found O2:64bit: - BHO: (no name) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - No CLSID value found. O2 - BHO: (no name) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - No CLSID value found. O4 - HKU\S-1-5-21-919106326-3501466161-1232319530-1000…\RunOnce: [Adobe Speed Launcher] 1418893891 File not found O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1 O7 - HKU\S-1-5-21-919106326-3501466161-1232319530-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O7 - HKU\S-1-5-21-919106326-3501466161-1232319530-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 221 :Files C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC C:\Windows\SysNative\drivers\iSafeNetFilter.sys C:\Windows\SysNative\drivers\iSafeKrnlBoot.sys C:\Windows\SysNative\log C:\Users\Maciek\AppData\Roaming\Elex-tech C:\Program Files (x86)\Elex-tech C:\Users\Public\Desktop\YAC.lnk C:\Windows\SysNative\drivers\iSafeKrnlBoot.sys C:\Users\Public\Desktop\YAC.lnk C:\Users\Maciek\AppData\Local\PUTTY.RND C:\Users\Maciek\AppData\Roaming.mono C:\Users\Maciek\AppData\Roaming\Elex-tech :commands [emptytemp] [emptyflash] Pokaż restarcie raport z usuwania i aktualny OTL. Wyłącz i włącz przywracanie systemu http://windows.micro… … -questions