Summary Operating System Windows 7 Ultimate 32-bit CPU Intel Celeron 346 Prescott 90nm Technology RAM 1,00GB

Dual-Channel DDR2 @ 199MHz (4-4-4-12) Motherboard LENOVO LENOVO (LGA775/PSC/TJS) 60 C Graphics LCD1770NX (1280x1024@60Hz) 128MB ATI Radeon X300/X550/X1050 Series (Microsoft Corpo ration - WDDM) (Connect3D) ATI Radeon X300/X550/X1050 Series Secondary (Microsoft C orporation - WDDM) (Connect3D) CrossFire Disabled Storage 74GB Hitachi HDS728080PLA380 40Y9028LEN ATA Device (SATA ) 48 C 3GB takeMS Mem-drive Mini USB Device (USB) Optical Drives TSSTcorp DVD-ROM TS-H352C ATA Device Audio SoundMAX Integrated Digital Audio Operating System Windows 7 Ultimate 32-bit Computer type: Mini Tower Installation Date: 1.10.2013 16:22:00 Serial Number: MHFPT-8C8M2-V9488-FGM44-2C9T3 Windows Security Center User Account Control (UAC) Disabled Firewall Enabled Windows Update AutoUpdate Disabled Windows Defender Windows Defender Enabled Antivirus Antivirus Enabled Company Name AVAST Software Display Name avast! Antivirus Product Version 8.0.1489.0 Virus Signature Database Up to date .NET Frameworks installed v3.5 SP1 v3.0 SP2 v2.0 SP2 Internet Explorer Version 8.0.7600.16385 PowerShell Version 2.0 Java Java Runtime Environment Path C:\Program Files\Java\jre7\bin\j ava.exe Version 7.0 Update 40 Build 43 Environment Variables USERPROFILE C:\Users\ThinkCentre

SystemRoot C:\Windows User Variables TEMP C:\Users\ThinkCentre\AppData\Loc al\Temp TMP al\Temp Machine Variables ComSpec C:\Windows\system32\cmd.exe FP_NO_HOST_CHECK NO NUMBER_OF_PROCESSORS 1 OS Windows_NT Path C:\Windows\system32 C:\Windows C:\Windows\System32\Wbem C:\Windows\System32\WindowsPowerShell\v1 .0\ PATHEXT .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.J S;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE x86 PROCESSOR_IDENTIFIER x86 Family 15 Mo del 4 Stepping 9, GenuineIntel PROCESSOR_LEVEL 15 PROCESSOR_REVISION 0409 PSModulePath C:\Windows\system32\Wind owsPowerShell\v1.0\Modules\ TEMP C:\Windows\TEMP TMP C:\Windows\TEMP USERNAME SYSTEM windir C:\Windows Power Profile Active power scheme Uravnote eno Hibernation Enabled Turn Off Monitor after: (On AC Power) 10 min Turn Off Hard Disk after: (On AC Power) 20 min Suspend after: (On AC Power) 30 min Screen saver Disabled Uptime Current Session Current Time 30.12.2013 14:25:02 Current Uptime 2.005 sec (0 d, 00 h, 33 m, 25 s) Last Boot Time 30.12.2013 13:51:37 Services Running Running Running Running Running Running Running Running Running Running Running Running Running Running Running Running Running Application Experience avast! Antivirus Background Intelligent Transfer Service Base Filtering Engine COM+ Event System Cryptographic Services DCOM Server Process Launcher Desktop Window Manager Session Manager DHCP Client Diagnostic Policy Service Diagnostic Service Host Diagnostic System Host Distributed Link Tracking Client DNS Client Group Policy Client IP Helper Multimedia Class Scheduler C:\Users\ThinkCentre\AppData\Loc

Running Running Running Running Running Running Running Running Running Running Running Running Running Running Running Running Running Running Running Running Running Running Running Running Running Running Running Running Running Running mework Running Running Running Running Running Running Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped

Network Connections Network List Service Network Location Awareness Network Store Interface Service Offline Files Peer Name Resolution Protocol Peer Networking Identity Manager Plug and Play Portable Device Enumerator Service Power Print Spooler Program Compatibility Assistant Service Remote Procedure Call (RPC) RPC Endpoint Mapper Security Accounts Manager Security Center Server Shell Hardware Detection SSDP Discovery Superfetch System Event Notification Service Task Scheduler TCP/IP NetBIOS Helper Themes User Profile Service Windows Audio Windows Audio Endpoint Builder Windows Backup Windows Defender Windows Driver Foundation - User-mode Driver Fra Windows Event Log Windows Firewall Windows Management Instrumentation Windows Search Windows Update Workstation ActiveX Installer (AxInstSV) Adaptive Brightness Application Identity Application Information Application Layer Gateway Service Application Management BitLocker Drive Encryption Service Block Level Backup Engine Service Bluetooth Support Service BranchCache Certificate Propagation CNG Key Isolation COM+ System Application Computer Browser Credential Manager Disk Defragmenter Distributed Transaction Coordinator Encrypting File System (EFS) Extensible Authentication Protocol Fax Function Discovery Provider Host Function Discovery Resource Publication Google Update Service (gupdate)

Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped ort Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped Stopped

Google Update Service (gupdatem) Health Key and Certificate Management HomeGroup Listener HomeGroup Provider Human Interface Device Access IKE and AuthIP IPsec Keying Modules Interactive Services Detection Internet Connection Sharing (ICS) IPsec Policy Agent KtmRm for Distributed Transaction Coordinator Link-Layer Topology Discovery Mapper Media Center Extender Service Microsoft .NET Framework NGEN v2.0.50727_X86 Microsoft iSCSI Initiator Service Microsoft Software Shadow Copy Provider Net.Tcp Port Sharing Service Netlogon Network Access Protection Agent Parental Controls Peer Networking Grouping Performance Logs & Alerts PnP-X IP Bus Enumerator PNRP Machine Name Publication Service Problem Reports and Solutions Control Panel Supp Protected Storage Quality Windows Audio Video Experience Remote Access Auto Connection Manager Remote Access Connection Manager Remote Desktop Configuration Remote Desktop Services Remote Desktop Services UserMode Port Redirector Remote Procedure Call (RPC) Locator Remote Registry Routing and Remote Access Secondary Logon Secure Socket Tunneling Protocol Service Skype Updater Smart Card Smart Card Removal Policy SNMP Trap Software Protection SPP Notification Service Tablet PC Input Service Telephony Thread Ordering Server TPM Base Services UPnP Device Host Virtual Disk Volume Shadow Copy WebClient Windows Biometric Service Windows CardSpace Windows Color System Windows Connect Now - Config Registrar Windows Error Reporting Service Windows Event Collector Windows Font Cache Service Windows Image Acquisition (WIA) Windows Installer

Stopped Stopped Stopped Stopped Stopped .0 Stopped Stopped Stopped Stopped Stopped Stopped Stopped TimeZone

Windows Windows Windows Windows Windows

Media Center Receiver Service Media Center Scheduler Service Media Player Network Sharing Service Modules Installer Presentation Foundation Font Cache 3.0.0

Windows Remote Management (WS-Management) Windows Time WinHTTP Web Proxy Auto-Discovery Service Wired AutoConfig WLAN AutoConfig WMI Performance Adapter WWAN AutoConfig

TimeZone GMT +1:00 Hours Language Bosnian (Latin, Bosnia and Herzegovina) Location Bosnia and Herzegovina Format Bosnian (Latin, Bosnia and Herzegovina) Currency KM Date Format d.M.yyyy Time Format H:mm:ss Scheduler 30.12.2013 15:05; GoogleUpdateTaskMachineUA 31.12.2013 11:05; GoogleUpdateTaskMachineCore CCleanerSkipUAC SmartDefragUpdate SmartDefrag_Startup Hotfixes 30.12.2013 Definition Update for Windows Defend er - KB915597 (Definition 1.165.658.0) Install this update to revise the defini tion files used to detect spyware and other potentially unwanted s oftware. Once you have installed this item, it cannot be remove d. System Folders Application Data C:\ProgramData Cookies C:\Users\ThinkCentre\AppData\Roaming\Microsoft\W indows\Cookies Desktop C:\Users\ThinkCentre\Desktop Documents C:\Users\Public\Documents Fonts C:\Windows\Fonts Global Favorites C:\Users\ThinkCentre\Favorites Internet History C:\Users\ThinkCentre\AppData\Loc al\Microsoft\Windows\History Local Application Data C:\Users\ThinkCentre\AppData\Loc al Music C:\Users\Public\Music Path for burning CD C:\Users\ThinkCentre\AppData\Loc al\Microsoft\Windows\Burn\Burn Physical Desktop C:\Users\ThinkCentre\Desktop Pictures C:\Users\Public\Pictures Program Files C:\Program Files Public Desktop C:\Users\Public\Desktop Start Menu C:\ProgramData\Microsoft\Windows\Start M enu Start Menu Programs C:\ProgramData\Microsoft\Windows \Start Menu\Programs Startup C:\ProgramData\Microsoft\Windows\Start Menu\Prog

rams\Startup Templates es Temporary Internet Files C:\Users\ThinkCentre\App Data\Local\Microsoft\Windows\Temporary Internet Files User Favorites C:\Users\ThinkCentre\Favorites Videos C:\Users\Public\Videos Windows Directory C:\Windows Windows/System C:\Windows\system32 Process List audiodg.exe Process ID 1048 User LOCAL SERVICE Domain NT AUTHORITY Memory Usage 15 MB Peak Memory Usage 20 MB AvastSvc.exe Process ID 1432 User SYSTEM Domain NT AUTHORITY Path C:\Program Files\AVAST Software\ Avast\AvastSvc.exe Memory Usage 27 MB Peak Memory Usage 180 MB AvastUI.exe Process ID 2236 User ThinkCentre Domain LENOVO Path C:\Program Files\AVAST Software\ Avast\AvastUI.exe Memory Usage 13 MB Peak Memory Usage 15 MB csrss.exe Process ID 560 User SYSTEM Domain NT AUTHORITY Path C:\Windows\system32\csrss.exe Memory Usage 10 MB Peak Memory Usage 12 MB csrss.exe Process ID 476 User SYSTEM Domain NT AUTHORITY Path C:\Windows\system32\csrss.exe Memory Usage 2,77 MB Peak Memory Usage 3,02 MB dwm.exe Process ID 1664 User ThinkCentre Domain LENOVO Path C:\Windows\system32\Dwm.exe Memory Usage 48 MB Peak Memory Usage 64 MB explorer.exe Process ID 1708 User ThinkCentre Domain LENOVO Path C:\Windows\Explorer.EXE Memory Usage 66 MB Peak Memory Usage 79 MB C:\ProgramData\Microsoft\Windows\Templat

explorer.exe Process ID 992 User ThinkCentre Domain LENOVO Path C:\Windows\explorer.exe Memory Usage 448 KB Peak Memory Usage 448 KB jucheck.exe Process ID 1892 User ThinkCentre Domain LENOVO Path C:\Program Files\Common Files\Ja va\Java Update\jucheck.exe Memory Usage 9,82 MB Peak Memory Usage 9,85 MB jusched.exe Process ID 2224 User ThinkCentre Domain LENOVO Path C:\Program Files\Common Files\Ja va\Java Update\jusched.exe Memory Usage 5,62 MB Peak Memory Usage 5,87 MB lsass.exe Process ID 668 User SYSTEM Domain NT AUTHORITY Path C:\Windows\system32\lsass.exe Memory Usage 6,00 MB Peak Memory Usage 6,81 MB lsm.exe Process ID 676 User SYSTEM Domain NT AUTHORITY Path C:\Windows\system32\lsm.exe Memory Usage 2,49 MB Peak Memory Usage 2,74 MB PWRISOVM.EXE Process ID 2260 User ThinkCentre Domain LENOVO Path C:\Program Files\PowerISO\PWRISO VM.EXE Memory Usage 3,16 MB Peak Memory Usage 3,60 MB SearchIndexer.exe Process ID 2460 User SYSTEM Domain NT AUTHORITY Path C:\Windows\system32\SearchIndexe r.exe Memory Usage 12 MB Peak Memory Usage 12 MB services.exe Process ID 636 User SYSTEM Domain NT AUTHORITY Path C:\Windows\system32\services.exe Memory Usage 5,54 MB Peak Memory Usage 8,30 MB

SmartDefrag.exe Process User Domain Path rag 2\SmartDefrag.exe

ID 2656 ThinkCentre LENOVO C:\Program Files\IObit\Smart Def

Memory Usage 3,72 MB Peak Memory Usage 20 MB smss.exe Process ID 392 User SYSTEM Domain NT AUTHORITY Path \SystemRoot\System32\smss.exe Memory Usage 616 KB Peak Memory Usage 728 KB SOUNDMAN.EXE Process ID 2168 User ThinkCentre Domain LENOVO Path C:\Windows\SOUNDMAN.EXE Memory Usage 3,54 MB Peak Memory Usage 4,05 MB Speccy.exe Process ID 1688 User ThinkCentre Domain LENOVO Path C:\Program Files\Speccy\Speccy.e xe Memory Usage 22 MB Peak Memory Usage 22 MB spoolsv.exe Process ID 1868 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\spoolsv.exe Memory Usage 8,15 MB Peak Memory Usage 8,37 MB svchost.exe Process ID 1200 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\system32\svchost.exe Memory Usage 5,58 MB Peak Memory Usage 7,04 MB svchost.exe Process ID 1336 User NETWORK SERVICE Domain NT AUTHORITY Path C:\Windows\system32\svchost.exe Memory Usage 9,18 MB Peak Memory Usage 9,68 MB svchost.exe Process ID 2004 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\system32\svchost.exe Memory Usage 8,92 MB Peak Memory Usage 27 MB svchost.exe Process ID 780

User SYSTEM Domain NT AUTHORITY Path C:\Windows\system32\svchost.exe Memory Usage 5,79 MB Peak Memory Usage 6,52 MB svchost.exe Process ID 852 User NETWORK SERVICE Domain NT AUTHORITY Path C:\Windows\system32\svchost.exe Memory Usage 4,62 MB Peak Memory Usage 4,92 MB svchost.exe Process ID 2616 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 20 MB Peak Memory Usage 159 MB svchost.exe Process ID 900 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 12 MB Peak Memory Usage 13 MB svchost.exe Process ID 3288 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 5,42 MB Peak Memory Usage 5,45 MB svchost.exe Process ID 4084 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\system32\svchost.exe Memory Usage 4,22 MB Peak Memory Usage 4,25 MB svchost.exe Process ID 1032 User SYSTEM Domain NT AUTHORITY Path C:\Windows\System32\svchost.exe Memory Usage 42 MB Peak Memory Usage 45 MB svchost.exe Process ID 1440 User SYSTEM Domain NT AUTHORITY Path C:\Windows\system32\svchost.exe Memory Usage 5,02 MB Peak Memory Usage 5,63 MB svchost.exe Process ID 1060 User SYSTEM Domain NT AUTHORITY Path C:\Windows\system32\svchost.exe Memory Usage 26 MB

Peak Memory Usage System

39 MB

Process ID 4 Memory Usage 4,36 MB Peak Memory Usage 5,83 MB System Idle Process Process ID 0 taskeng.exe Process ID 2424 User ThinkCentre Domain LENOVO Path C:\Windows\system32\taskeng.exe Memory Usage 4,61 MB Peak Memory Usage 4,69 MB taskhost.exe Process ID 1980 User ThinkCentre Domain LENOVO Path C:\Windows\system32\taskhost.exe Memory Usage 7,12 MB Peak Memory Usage 7,13 MB taskhost.exe Process ID 2844 User ThinkCentre Domain LENOVO Path C:\Windows\system32\taskhost.exe Memory Usage 4,01 MB Peak Memory Usage 4,60 MB wininit.exe Process ID 552 User SYSTEM Domain NT AUTHORITY Path C:\Windows\system32\wininit.exe Memory Usage 2,93 MB Peak Memory Usage 3,37 MB winlogon.exe Process ID 592 User SYSTEM Domain NT AUTHORITY Path C:\Windows\system32\winlogon.exe Memory Usage 3,65 MB Peak Memory Usage 6,13 MB WmiPrvSE.exe Process ID 712 User NETWORK SERVICE Domain NT AUTHORITY Path C:\Windows\system32\wbem\wmiprvs e.exe Memory Usage 12 MB Peak Memory Usage 13 MB WmiPrvSE.exe Process ID 2904 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\system32\wbem\wmiprvs e.exe Memory Usage 7,29 MB Peak Memory Usage 7,41 MB WmiPrvSE.exe Process ID 3396

User SYSTEM Domain NT AUTHORITY Path C:\Windows\system32\wbem\wmiprvs e.exe Memory Usage 18 MB Peak Memory Usage 21 MB WUDFHost.exe Process ID 2336 User LOCAL SERVICE Domain NT AUTHORITY Path C:\Windows\system32\WUDFHost.exe Memory Usage 3,63 MB Peak Memory Usage 5,18 MB Security Options Accounts: Administrator account status Disabled Accounts: Guest account status Disabled Accounts: Limit local account use of blank passwords to console logon only Enabled Accounts: Rename administrator account Administrator Accounts: Rename guest account Guest Audit: Audit the access of global system objects Disabled Audit: Audit the use of Backup and Restore privilege Disabled Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings Not Defined Audit: Shut down system immediately if unable to log sec urity audits Disabled DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax Not Defined DCOM: Machine Launch Restrictions in Security Descriptor Definition Language (SDDL) syntax Not Defined Devices: Allow undock without having to log on Enabled Devices: Allowed to format and eject removable media Not Defined Devices: Prevent users from installing printer drivers Disabled Devices: Restrict CD-ROM access to locally logged-on use r only Not Defined Devices: Restrict floppy access to locally logged-on use r only Not Defined Domain controller: Allow server operators to schedule ta sks Not Defined Domain controller: LDAP server signing requirements Not Defined Domain controller: Refuse machine account password chang es Not Defined Domain member: Digitally encrypt or sign secure channel data (always) Enabled Domain member: Digitally encrypt secure channel data (wh en possible) Enabled Domain member: Digitally sign secure channel data (when possible) Enabled Domain member: Disable machine account password changes Disabled Domain member: Maximum machine account password age 30 days Domain member: Require strong (Windows 2000 or later) se ssion key Enabled Interactive logon: Display user information when the ses

sion is locked Not Defined Interactive logon: Do not display last user name Disabled Interactive logon: Do not require CTRL+ALT+DEL Not Defi ned Interactive logon: Message text for users attempting to log on Interactive logon: Message title for users attempting to log on Interactive logon: Number of previous logons to cache (i n case domain controller is not available) 10 logons Interactive logon: Prompt user to change password before expiration 5 days Interactive logon: Require Domain Controller authenticat ion to unlock workstation Disabled Interactive logon: Require smart card Disabled Interactive logon: Smart card removal behavior No Actio n Microsoft network client: Digitally sign communications (always) Disabled Microsoft network client: Digitally sign communications (if server agrees) Enabled Microsoft network client: Send unencrypted password to t hird-party SMB servers Disabled Microsoft network server: Amount of idle time required b efore suspending session 15 minutes Microsoft network server: Digitally sign communications (always) Disabled Microsoft network server: Digitally sign communications (if client agrees) Disabled Microsoft network server: Disconnect clients when logon hours expire Enabled Microsoft network server: Server SPN target name validat ion level Not Defined Network access: Allow anonymous SID/Name translation Disabled Network access: Do not allow anonymous enumeration of SA M accounts Enabled Network access: Do not allow anonymous enumeration of SA M accounts and shares Disabled Network access: Do not allow storage of passwords and cr edentials for network authentication Disabled Network access: Let Everyone permissions apply to anonym ous users Disabled Network access: Named Pipes that can be accessed anonymo usly Network access: Remotely accessible registry paths System\CurrentControlSet\Control\ProductOptions,System\CurrentControlSet\Control \Server Applications,Software\Microsoft\Windows NT\CurrentVersion Network access: Remotely accessible registry paths and s ub-paths System\CurrentControlSet\Control\Print\Printers,System\CurrentCo ntrolSet\Services\Eventlog,Software\Microsoft\OLAP Server,Software\Microsoft\Win dows NT\CurrentVersion\Print,Software\Microsoft\Windows NT\CurrentVersion\Window s,System\CurrentControlSet\Control\ContentIndex,System\CurrentControlSet\Control \Terminal Server,System\CurrentControlSet\Control\Terminal Server\UserConfig,Sys tem\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration,Software\ Microsoft\Windows NT\CurrentVersion\Perflib,System\CurrentControlSet\Services\Sy smonLog Network access: Restrict anonymous access to Named Pipes and Shares Enabled

Network access: Shares that can be accessed anonymously Not Defined Network access: Sharing and security model for local acc Classic - local users authenticate as themselves Network security: Allow Local System to use computer ide ntity for NTLM Not Defined Network security: Allow LocalSystem NULL session fallbac k Not Defined Network Security: Allow PKU2U authentication requests to this computer to use online identities Not Defined Network security: Configure encryption types allowed for Kerberos Not Defined Network security: Do not store LAN Manager hash value on next password change Enabled Network security: Force logoff when logon hours expire Disabled Network security: LAN Manager authentication level Not Defined Network security: LDAP client signing requirements Negotiate signing Network security: Minimum session security for NTLM SSP based (including secure RPC) clients Require 128-bit encryption Network security: Minimum session security for NTLM SSP based (including secure RPC) servers Require 128-bit encryption Network security: Restrict NTLM: Add remote server excep tions for NTLM authentication Not Defined Network security: Restrict NTLM: Add server exceptions i n this domain Not Defined Network security: Restrict NTLM: Audit Incoming NTLM Tra ffic Not Defined Network security: Restrict NTLM: Audit NTLM authenticati on in this domain Not Defined Network security: Restrict NTLM: Incoming NTLM traffic Not Defined Network security: Restrict NTLM: NTLM authentication in this domain Not Defined Network security: Restrict NTLM: Outgoing NTLM traffic t o remote servers Not Defined Recovery console: Allow automatic administrative logon Disabled Recovery console: Allow floppy copy and access to all dr ives and all folders Disabled Shutdown: Allow system to be shut down without having to log on Enabled Shutdown: Clear virtual memory pagefile Disabled System cryptography: Force strong key protection for use r keys stored on the computer Not Defined System cryptography: Use FIPS compliant algorithms for e ncryption, hashing, and signing Disabled System objects: Require case insensitivity for non-Windo ws subsystems Enabled System objects: Strengthen default permissions of intern al system objects (e.g. Symbolic Links) Enabled System settings: Optional subsystems Posix System settings: Use Certificate Rules on Windows Execut ables for Software Restriction Policies Disabled User Account Control: Admin Approval Mode for the Builtin Administrator account Disabled User Account Control: Allow UIAccess applications to pro mpt for elevation without using the secure desktop Disabled ounts

User Account Control: Behavior of the elevation prompt f or administrators in Admin Approval Mode Elevate without prompting User Account Control: Behavior of the elevation prompt f or standard users Prompt for credentials User Account Control: Detect application installations a nd prompt for elevation Enabled User Account Control: Only elevate executables that are signed and validated Disabled User Account Control: Only elevate UIAccess applications that are installed in secure locations Enabled User Account Control: Run all administrators in Admin Ap proval Mode Disabled User Account Control: Switch to the secure desktop when prompting for elevation Disabled User Account Control: Virtualize file and registry write failures to per-user locations Enabled Device Tree ACPI x86-based PC Microsoft ACPI-Compliant System ACPI Fixed Feature Butto n ACPI Thermal Zone Intel Celeron CPU 3.06GH z PCI bus ACPI Pow er Button Intel 82 801 PCI Bridge - 244E Intel 82 801G (ICH7 Family) PCI Express Root Port - 27D0 Intel 82 801G (ICH7 Family) SMBus Controller - 27DA Intel 94 5G/GZ/GC/P/PL Processor to I/O Controller - 2770 SoundMAX Integrated Digital Audio Intel(R) 945G/GZ/GC/P/PL PCI Express Root Port - 2771 Radeon X300/X550/X1050 Series Secondary (Microsoft Corporation - WDDM) Radeon X300/X550/X1050 Series (Microsoft Corporation - WDDM) Generic PnP Monitor Intel(R) 82801G (ICH7 Family) PCI Express Root Port - 27D2 Broadcom NetLink Gigabit Ethernet Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27C8 USB Root Hub USB Input Device HID-compliant mouse Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27C9

USB Root Hub Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27CA USB Root Hub Intel(R) 82801G (ICH7 Family) USB2 Enhanced Host Controller - 27CC USB Root Hub USB Mass Storage Device takeMS Mem-drive Mini USB Device Intel(R) 82801GB/GR (ICH7 Family) LPC Interface Controller - 27B8 Direct memory access controller Intel 82802 Firmware Hub Device Motherboard resources Numeric data processor Programmable interrupt controller System CMOS/real time clock System speaker System timer Generic Bus Communications Port (COM1) Motherboard resources Motherboard resources Standard floppy disk controller Standard PS/2 Keyboard ECP Printer Port (LPT1) Printer Port Logical Interface Intel(R) 82801GB/GR/GH (ICH7 Family) Serial ATA Storage Controller - 27C0 ATA Channel 0 HDS728080PLA380 40Y9028LEN ATA Device ATA Channel 1 TSSTcorp DVD-ROM TS-H352C ATA Device CPU Intel Celeron 346 Cores 1

Threads 1 Name Intel Celeron 346 Code Name Prescott Package Socket 775 LGA Technology 90nm Specification Intel Celeron CPU 3.06GHz Family F Extended Family F Model 4 Extended Model 4 Stepping 9 Revision G1 Instructions MMX, SSE, SSE2, SSE3, Intel 64, NX Virtualization Not supported Hyperthreading Not supported Fan Speed 860 RPM Bus Speed 133,0 MHz Rated Bus Speed 532,0 MHz Stock Core Speed 3066 MHz Stock Bus Speed 133 MHz Caches L1 Data Cache Size 16 KBytes L1 trace cache 12 Kops L2 Unified Cache Size 256 KBytes Core 0 Core Speed 3059,1 MHz Multiplier x 23,0 Bus Speed 133,0 MHz Rated Bus Speed 532,0 MHz Thread 1 APIC ID 0 RAM Memory slots Total memory slots 4 Used memory slots 2 Free memory slots 2 Memory Type DDR2 Size 1024 MBytes Channels # Dual DRAM Frequency 199,5 MHz CAS# Latency (CL) 4 clocks RAS# to CAS# Delay (tRCD) 4 clocks RAS# Precharge (tRP) 4 clocks Cycle Time (tRAS) 12 clocks Bank Cycle Time (tRC) 16 clocks Physical Memory Memory Usage 49 % Total Physical MB Available Physical 519 MB Total Virtual 2,00 GB Available Virtual 1,26 GB SPD Number Of SPD Modules 2 Slot #1 Type DDR2 Size 512 MBytes Manufacturer Elpida Max Bandwidth PC2-5300 (333 MHz) Part Number EBE51UD8AGWA-6E-E

Serial Number EE7E8468 Week/year 14 / 07 JEDEC #3 Frequency z

333,3 MH

CAS# Latency 5,0 RAS# To CAS# 6 RAS# Precharge 6 tRAS 16 tRC 21 Voltage 1,800 V JEDEC #2 Frequency z CAS# Latency 4,0 RAS# To CAS# 4 RAS# Precharge 4 tRAS 12 tRC 16 Voltage 1,800 V JEDEC #1 Frequency z CAS# Latency 3,0 RAS# To CAS# 3 RAS# Precharge 3 tRAS 9 tRC 12 Voltage 1,800 V Slot #2 Type DDR2 Size 512 MBytes Manufacturer Elpida Max Bandwidth PC2-5300 (333 MHz) Part Number EBE51UD8AGWA-6E-E Serial Number 5BC48468 Week/year 14 / 07 JEDEC #3 Frequency 333,3 MH z CAS# Latency 5,0 RAS# To CAS# 6 RAS# Precharge 6 tRAS 16 tRC 21 Voltage 1,800 V JEDEC #2 Frequency z CAS# Latency 4,0 RAS# To CAS# 4 RAS# Precharge 4 tRAS 12 tRC 16 Voltage 1,800 V JEDEC #1 Frequency z CAS# Latency RAS# To CAS# 3,0 3 200,0 MH 266,7 MH 200,0 MH 266,7 MH

RAS# Precharge 3 tRAS 9 tRC 12 Voltage 1,800 V Motherboard Manufacturer LENOVO Model LENOVO (LGA775/PSC/TJS) Version ThinkCentre A52 Chipset Vendor Intel Chipset Model i945P/PL/G/GZ Chipset Revision A2 Southbridge Vendor Intel Southbridge Model 82801GB (ICH7/R) Southbridge Revision A1 System Temperature 60 C BIOS Brand LENOVO Version 2HKT13AGR Date 8.9.2006 PCI Data Slot PCI-E Slot Type PCI-E Slot Usage In Use Data lanes x16 Slot Designation PCIE_16 Characteristics 3.3V Slot Number 0 Slot PCI Slot Type PCI Slot Usage Available Data lanes x1 Slot Designation PCIe x1 Characteristics 3.3V Slot Number 1 Slot PCI Slot Type PCI Slot Usage Available Bus Width 32 bit Slot Designation PCI Slot #1 Characteristics 3.3V Slot Number 2 Slot PCI Slot Type PCI Slot Usage Available Bus Width 32 bit Slot Designation PCI Slot #2 Characteristics 3.3V Slot Number 3 Graphics Monitor Name LCD1770NX on Radeon X300/X550/X1050 Series (Micr osoft Corporation - WDDM) Current Resolution 1280x1024 pixels Work Resolution 1280x984 pixels State Enabled, Primary, Output devices support Monitor Width 1280 Monitor Height 1024 Monitor BPP 32 bits per pixel Monitor Frequency 60 Hz Device \\.\DISPLAY1\Monitor0

ATI Radeon X300/X550/X1050 Series (Microsoft Corporation - WDDM) Manufacturer ATI Model Radeon X300/X550/X1050 Series (Microsoft Corpora tion - WDDM) GPU RV370 Device ID 1002-5B63 Subvendor Connect3D (17EE) Series Radeon X Current Performance Level Level 0 Transistors 75 M Release Date Jul 2005 DirectX Support 9.0 DirectX Shader Model 2.0 OpenGL Support 2.0 Bios Core Clock 391,50 Bios Mem Clock 195,75 Driver version 8.56.1.15 BIOS Version BK-ATI VER008.015.150.000 ROPs 4 Shaders Vertex 4/Pixel 42 Memory Type DDR Memory 128 MB Bus Width 64x2 (128 bit) Anti Aliasing Modes 2xRGMS, 2x2T SGMS, 2x3T SGMS, 4x 2T SGMS, 4x3T SGMS, 6x2T SGMS, 6x3T SGMS, Gamma, 6xSGMS, 4xRGMS Filtering Modes Bilinear, Trilinear, 16x Anisotropic Noise Level Quiet Count of performance levels : 1 Level 1 ATI Radeon X300/X550/X1050 Series Secondary (Microsoft Corporati on - WDDM) Manufacturer ATI Model Radeon X300/X550/X1050 Series Secondary (Microso ft Corporation - WDDM) GPU RV370 Device ID 1002-5B73 Subvendor Connect3D (17EE) Current Performance Level Level 0 Transistors 75 M Release Date 2004 DirectX Support 9.0 DirectX Shader Model 2.0 OpenGL Support 2.0 Bios Core Clock 391,50 Bios Mem Clock 195,75 Driver version 8.56.1.15 ROPs 4 Shaders Vertex 4/Pixel 42 Count of performance levels : 1 Level 1 Storage Hard drives HDS728080PLA380 40Y9028LEN ATA Devi ce Manufacturer Hitachi Product Family Deskstar Series Prefix Standard Model Capacity For This Specific Drive 800GB Heads 16

Cylinders 9.730 Tracks 2.481.150 Sectors 156.312.450 SATA type SATA-II 3.0Gb/s Device type Fixed ATA Standard ATA/ATAPI-7 Serial Number PF1B75S0U4208M LBA Size 48-bit LBA Power On Count 1309 times Power On Time 390,5 days Features S.M.A.R.T., APM, AAM, NC Q Transfer Mode SATA II Interface SATA Capacity 74 GB Real size 80.032.038.912 bytes RAID Type None S.M.A.R.T Status Good Temperature 48 C Temperature Range OK (less than 50 C) 01 Read Error Rate 100 (100) Data 0000000000 02 Throughput Performanc e 158 (158) Data 00000000D5 03 Spin-Up Time 101 (101 ) Data 0000C600C4 04 Start/Stop Count 100 (100) Data 0000000521 05 Reallocated Sectors C ount 100 (100) Data 0000000000 07 Seek Error Rate 100 (100) Data 0000000000 08 Seek Time Performance 140 (140) Data 000000001D 09 Power-On Hours (POH) 099 (099) Data 000000249B 0A Spin Retry Count 100 (100) Data 0000000000 0C Device Power Cycle Co unt nt nt 100 (100) Data 000000051D C0 Power-off Retract Cou 099 (099) Data 0000000530 C1 Load/Unload Cycle Cou 099 (099) Data 0000000530 C2 Temperature 114 (114 ) Data 00000B0030 C4 Reallocation Event Co unt 100 (100) Data 0000000000 C5 Current Pending Secto r Count 100 (100) Data 0000000000 C6 Uncorrectable Sector Count unt 100 (100) Data 0000000000 C7 UltraDMA CRC Error Co 200 (253) Data 0000000000 Partition 0 Partition ID Partition #0 Disk Letter C: Disk #0,

File System NTFS Volume Serial Number 137F98B2 Size 74 GB Used Space (28%) Free Space 2%) Flash drives takeMS Mem-drive Mini USB Device Interface USB Capacity 3,92 GB Real size 4.211.081.216 bytes RAID Type None S.M.A.R.T S.M.A.R.T not supported Partition 0 Partition ID Disk #1, Partition #0 Disk Letter E: File System FAT32 Volume Serial Number C47C3A16 Size 3,91 GB Used Space 22,3 MB (1%) Free Space (99%) Optical Drives TSSTcorp DVD-ROM TS-H352C ATA Device Media Type DVD Reader Name TSSTcorp DVD-ROM TS-H352C ATA Device Availability Running/Full Power Capabilities Random Access, Supports Removable Media Read capabilities CD-R, CD-RW, CD-ROM, DVD-RAM, DV D-ROM, DVD-R, DVD+R, DVD+RW, DVD+R DL Config Manager Error Code Device is working proper ly Config Manager User Config FALSE Drive D: Media Loaded TRUE SCSI Bus 1 SCSI Logical Unit 0 SCSI Port 1 SCSI Target Id 0 Size 1,50 GB Status OK Volume Name DISK1 Volume Serial Number 9223807D Audio Sound Card SoundMAX Integrated Digital Audio Playback Device Speakers (SoundMAX Integrated Digital Audio) Recording Devices Line In (SoundMAX Integrated Digital Audio) Microphone (SoundMAX Integrated Digital Audio) (default ) Peripherals Standard PS/2 Keyboard 3,89 GB 54 GB (7 20,3 GB

Device Kind Keyboard Device Name Standard PS/2 Keyboard Vendor (Standard keyboards) Location plugged into keyboard port Driver Date 6-21-2006 Version 6.1.7600.16385 File C:\Windows\system32\DRIVERS\i804 2prt.sys File lass.sys HID-compliant mouse Device Kind Mouse Device Name HID-compliant mouse Vendor Unknown Location USB Input Device Driver Date 6-21-2006 Version 6.1.7600.16385 File C:\Windows\system32\DRIVERS\mouh id.sys File lass.sys Mem-drive Mini Device Kind Portable Device Device Name Mem-drive Mini Vendor TAKEMS Comment WHIPLASH Location UMBus Enumerator Driver Date 6-21-2006 Version 6.1.7600.16385 File C:\Windows\system32\DRIVERS\WUDF Rd.sys Printers Fax Printer Port Print Processor Availability Priority Duplex None Print Quality Status Unknown Driver t Shared Fax Driver (v4.00) Driver Path C:\Windo ws\system32\spool\DRIVERS\W32X86\3\FXSDRV.DLL Microsoft XPS Document Writer (Default Printer) Printer Port XPSPort: Print Processor winprint Availability Always Priority 1 Duplex None Print Quality 600 * 600 dpi Color Status Unknown Driver Driver Name Microsof t XPS Document Writer (v6.00) Driver Path C:\Windo SHRFAX: winprint Always 1 200 * 200 dpi Monochrome Driver Name Microsof C:\Windows\system32\DRIVERS\mouc C:\Windows\system32\DRIVERS\kbdc

ws\system32\spool\DRIVERS\W32X86\3\mxdwdrv.dll Network You are connected to the internet Connected through Broadcom NetLink Gigabit Ethernet IP Address 172.16.20.252 Subnet mask 255.255.255.0 Gateway server 172.16.20.1 Preferred DNS server 172.16.20.1 DHCP Enabled DHCP server 172.16.20.1 External IP Address 91.205.68.197 Adapter Type Ethernet NetBIOS over TCP/IP Enabled via DHCP NETBIOS Node Type Hybrid node Link Speed 0 Bps Computer Name NetBIOS Name LENOVO DNS Name LENOVO Membership Part of workgroup Workgroup WORKGROUP Remote Desktop Disabled Console State Active Domain LENOVO WinInet Info LAN veza Local system uses a local area network to connect to the Internet Local system has RAS to connect to the Internet Wi-Fi Info Wi-Fi not enabled WinHTTPInfo WinHTTPSessionProxyType No proxy Session Proxy Session Proxy Bypass Connect Retries 5 Connect Timeout (ms) 60.000 HTTP Version HTTP 1.1 Max Connects Per 1.0 Servers INFINITE Max Connects Per Servers INFINITE Max HTTP automatic redirects 10 Max HTTP status continue 10 Send Timeout (ms) 30.000 IEProxy Auto Detect No IEProxy Auto Config IEProxy IEProxy Bypass Default Proxy Config Access Type No proxy Default Config Proxy Default Config Proxy Bypass Sharing and Discovery Network Discovery Disabled File and Printer Sharing Disabled File and printer sharing service Enabled Simple File Sharing Enabled Administrative Shares Enabled Network access: Sharing and security model for local acc ounts Classic - local users authenticate as themselves Adapters List

Broadcom NetLink (TM) Gigabit Ethernet Connection Name Local Area Connection NetBIOS over TCPIP Yes DHCP enabled Yes MAC Address 00-16-41-2D-F7-0A IP Address 172.16.20.252 Subnet mask 255.255.255.0 Gateway server 172.16.20.1 DHCP 172.16.20.1 DNS Server 172.16.20.1 Network Shares No network shares Current TCP Connections AvastSvc.exe (1432) Local 0.0.0.0:12025 LISTEN Local 0.0.0.0:12110 LISTEN Local 0.0.0.0:12119 LISTEN Local 0.0.0.0:12143 LISTEN Local 0.0.0.0:12465 LISTEN Local 0.0.0.0:12563 LISTEN Local 0.0.0.0:12993 LISTEN Local 0.0.0.0:27275 LISTEN Local 127.0.0.1:12025 LISTEN Local 127.0.0.1:12080 LISTEN Local 127.0.0.1:12110 LISTEN Local 127.0.0.1:12119 LISTEN Local 127.0.0.1:12143 LISTEN Local 127.0.0.1:12465 LISTEN Local 127.0.0.1:12563 LISTEN Local 127.0.0.1:12993 LISTEN Local 127.0.0.1:12995 LISTEN Local 127.0.0.1:27275 LISTEN Local 172.16.20.252:49157 ESTABLIS HED Remote 77.234.42.55:80 (Querying... ) (HTTP) Local 0.0.0.0:12995 LISTEN C:\Program Files\AVAST Software\Avast\AvastUI.ex e (2236) Local 172.16.20.252:62180 CLOSE-WA IT Remote 173.194.39.168:80 (Querying... ) (HTTP) C:\Program Files\Common Files\Java\Java Update\j ucheck.exe (1892) Local 172.16.20.252:62165 CLOSE-WA IT Remote 2.23.176.60:443 (Querying... ) (HTTPS) lsass.exe (668) Local 0.0.0.0:49156 LISTEN services.exe (636) Local 0.0.0.0:49159 LISTEN svchost.exe (1060) Local 0.0.0.0:49154 LISTEN svchost.exe (852) Local 0.0.0.0:135 (DCE) LISTEN svchost.exe (900) Local 0.0.0.0:49153 LISTEN System Process Local 172.16.20.252:62215 TIME-WAI T Remote 173.194.39.184:443 (Querying... ) (HTTPS) Local 172.16.20.252:62220 TIME-WAI T Remote 2.16.219.75:80 (Querying... ) (HTTP) Local 172.16.20.252:62282 TIME-WAI T Remote 173.194.39.185:80 (Querying... ) (HTTP)

Local 172.16.20.252:62290 T Remote 173.194.39.161:443 (Querying... ) (HTTPS) Local 172.16.20.252:62795 T Remote 2.16.219.75:80 (Querying... ) (HTTP) Local 172.16.20.252:62797 T Remote 173.194.39.186:80 (Querying... ) (HTTP) Local 172.16.20.252:62806 T Remote 2.16.219.27:80 (Querying... ) (HTTP) Local 172.16.20.252:62812 T Remote 2.16.219.27:80 (Querying... ) (HTTP) Local 172.16.20.252:62814 T Remote 2.16.219.27:80 (Querying... ) (HTTP) Local 172.16.20.252:52966 T Remote 2.16.219.27:80 (Querying... ) (HTTP) Local 172.16.20.252:62824 T Remote 64.30.224.172:80 (Querying... ) (HTTP) Local 172.16.20.252:62859 T Remote 77.67.97.21:80 (Querying... ) (HTTP) Local 172.16.20.252:62863 T Remote 77.67.97.21:80 (Querying... ) (HTTP) Local 172.16.20.252:62865 T Remote 188.121.41.119:80 (Querying... ) (HTTP) Local 172.16.20.252:62890 T Remote 173.194.39.167:80 (Querying... ) (HTTP) Local 172.16.20.252:62905 T Remote 5.178.40.30:80 (Querying... ) (HTTP) Local 172.16.20.252:62910 T Remote 5.178.40.24:80 (Querying... ) (HTTP) Local 172.16.20.252:62911 T Remote 173.194.39.162:80 (Querying... ) (HTTP) Local 172.16.20.252:62918 T Remote 2.16.219.75:80 (Querying... ) (HTTP) Local 172.16.20.252:62920 T Remote 2.16.219.75:80 (Querying... ) (HTTP) Local 172.16.20.252:62921 T Remote 2.16.219.75:80 (Querying... ) (HTTP) Local 172.16.20.252:62922 T Remote 2.16.219.75:80 (Querying... ) (HTTP) Local 172.16.20.252:62925 T Remote 2.23.177.84:80 (Querying... ) (HTTP) Local 172.16.20.252:62926 T Remote 173.194.39.167:443 (Querying... ) (HTTPS) Local 172.16.20.252:62932 T Remote 209.31.115.129:80 (Querying... ) (HTTP) Local 172.16.20.252:62938 T Remote 173.194.39.175:443 (Querying... ) (HTTPS) Local 172.16.20.252:62940 T Remote 77.234.41.68:80 (Querying... ) (HTTP) Local 172.16.20.252:62942 T Remote 184.173.219.67:80 (Querying... ) (HTTP) Local 172.16.20.252:52933 T Remote 2.16.219.99:80 (Querying... ) (HTTP) Local 172.16.20.252:52934 T Remote 2.16.219.99:80 (Querying... ) (HTTP) Local 172.16.20.252:52935 T Remote 2.16.219.99:80 (Querying... ) (HTTP) Local 172.16.20.252:52936 T Remote 2.16.219.99:80 (Querying... ) (HTTP) Local 172.16.20.252:52937 T Remote 2.16.219.99:80 (Querying... ) (HTTP)

TIME-WAI TIME-WAI TIME-WAI TIME-WAI TIME-WAI TIME-WAI TIME-WAI TIME-WAI TIME-WAI TIME-WAI TIME-WAI TIME-WAI TIME-WAI TIME-WAI TIME-WAI TIME-WAI TIME-WAI TIME-WAI TIME-WAI TIME-WAI TIME-WAI TIME-WAI TIME-WAI TIME-WAI TIME-WAI TIME-WAI TIME-WAI TIME-WAI TIME-WAI TIME-WAI

Local 172.16.20.252:52938 TIME-WAI T Remote 2.16.219.99:80 (Querying... ) (HTTP) Local 172.16.20.252:52940 TIME-WAI T Remote 2.16.219.27:80 (Querying... ) (HTTP) Local 172.16.20.252:52944 TIME-WAI T Remote 64.30.224.172:80 (Querying... ) (HTTP) Local 172.16.20.252:52962 TIME-WAI T Remote 2.16.219.51:80 (Querying... ) (HTTP) Local 172.16.20.252:52963 TIME-WAI T Remote 77.67.97.8:80 (Querying... ) (HTTP) Local 172.16.20.252:62919 TIME-WAI T Remote 2.16.219.75:80 (Querying... ) (HTTP) Local 172.16.20.252:52968 TIME-WAI T Remote 2.16.219.27:80 (Querying... ) (HTTP) Local 172.16.20.252:52972 TIME-WAI T Remote 173.194.39.186:80 (Querying... ) (HTTP) Local 172.16.20.252:52974 TIME-WAI T Remote 195.27.154.70:80 (Querying... ) (HTTP) Local 172.16.20.252:52992 TIME-WAI T Remote 64.30.224.172:80 (Querying... ) (HTTP) Local 172.16.20.252:52999 TIME-WAI T Remote 2.16.219.27:80 (Querying... ) (HTTP) Local 172.16.20.252:53007 TIME-WAI T Remote 2.16.219.9:80 (Querying... ) (HTTP) Local 172.16.20.252:53046 TIME-WAI T Remote 176.32.99.201:80 (Querying... ) (HTTP) System Process Local 0.0.0.0:445 (Windows shares) LISTEN Local 172.16.20.252:139 (NetBIOS session service) LISTEN wininit.exe (552) Local 0.0.0.0:49152 LISTEN Generated with Speccy v1.24.632