Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

my compiuter is infected [Closed]


  • This topic is locked This topic is locked

#1
tejlor2010

tejlor2010

    New Member

  • Member
  • Pip
  • 1 posts

hello my comp is infected whit go.mail.ru

 

Additional scan result of Farbar Recovery Scan Tool (x86) Version:21-02-2016 01
Ran by Tesla (2016-02-22 12:39:20)
Running from C:\Documents and Settings\Tesla\My Documents\Downloads
Microsoft Windows XP Professional Service Pack 3 (X86) (2016-01-20 12:18:43)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1177238915-651377827-1801674531-500 - Administrator - Enabled)
Guest (S-1-5-21-1177238915-651377827-1801674531-501 - Limited - Enabled)
HelpAssistant (S-1-5-21-1177238915-651377827-1801674531-1000 - Limited - Disabled)
SUPPORT_388945a0 (S-1-5-21-1177238915-651377827-1801674531-1002 - Limited - Disabled)
Tesla (S-1-5-21-1177238915-651377827-1801674531-1003 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\Tesla

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {7591DB91-41F0-48A3-B128-1A293FD8233D}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 18 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
Adobe Shockwave Player + Authorware Web Player (HKLM\...\Adobe Shockwave Player + Authorware Web Player) (Version: v12.1.9.160 - Adobe Systems, Inc.)
Adobe Shockwave Player 12.1 (HKLM\...\{7E33E883-0D17-4397-A461-B576605E34B1}) (Version: 12.1.6.156 - Adobe Systems, Inc)
Avast Free Antivirus (HKLM\...\Avast) (Version: 11.1.2253 - AVAST Software)
CitacSaobracajne (HKLM\...\{9F5D4E08-CB47-4C68-AE28-8B34126FBF57}) (Version: 1.0.2 - MUPRS)
Corporate E-bank SLO (Version: 10.1.4.0 - Halcom) Hidden
Čitač elektronske lične karte (32-bitni) (HKLM\...\{2A97FB57-F02A-4AC8-AA0A-B6C3D92DF7CC}) (Version: 1.2.3 - MUP RS)
FastStone Image Viewer 5.1 (HKLM\...\FastStone Image Viewer) (Version: 5.1 - FastStone Soft)
GemPcCCID (HKLM\...\{BA8C3655-D91D-4D1A-B31C-882305929305}) (Version: 2.0.5 - Gemalto)
Google Chrome (HKLM\...\Google Chrome) (Version: 48.0.2564.116 - Google Inc.)
Google Update Helper (Version: 1.3.29.5 - Google Inc.) Hidden
Intel® Network Connections Drivers (HKLM\...\PROSet) (Version: 18.3 - Intel)
Intel® Active Management Technology (HKLM\...\MESOL) (Version:  - Intel Corporation)
IPTInstaller (HKLM\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.8 - HTC)
Java 8 Update 71 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218071F0}) (Version: 8.0.710.15 - Oracle Corporation)
K-Lite Mega Codec Pack 10.9.5 (HKLM\...\KLiteCodecPack_is1) (Version: 10.9.5 - )
LibreOffice 5.0.4.2 (HKLM\...\{14B5DDCF-61C4-4F1E-A621-844685D60B5A}) (Version: 5.0.4.2 - The Document Foundation)
Manager (Version: 4.0.1.25166 - 2015 pdfforge GmbH. All rights reserved) Hidden
Microsoft .NET Framework 2.0 Service Pack 2 (HKLM\...\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.0 Service Pack 2 (HKLM\...\{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Base Smart Card Cryptographic Service Provider Package (HKLM\...\KB909520) (Version:  - Microsoft Corporation)
Microsoft Office Access database engine 2007 (English) (HKLM\...\{90120000-00D1-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1031 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Mozilla Firefox 43.0.1 (x86 en-US) (HKLM\...\Mozilla Firefox 43.0.1 (x86 en-US)) (Version: 43.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 41.0.2 - Mozilla)
OfficeBanking Desktop (HKU\S-1-5-21-1177238915-651377827-1801674531-1003\...\e57dc32b0ebd359c) (Version: 1.2015.10930.3 - Asseco SEE)
PDF Architect 4 (HKLM\...\PDF Architect 4) (Version: 4.0.34.26215 - pdfforge GmbH)
PDF Architect 4 Create Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden
PDF Architect 4 Edit Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden
PDF Architect 4 View Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.2.2 - pdfforge)
Personal 4.22.0 (HKLM\...\Personal) (Version: 4.22.0 - Technology Nexus)
Personal E-bank (HKLM\...\{EBA5C4B0-7C35-443B-9D60-15B8C1908CA6}) (Version: 17.5.0.20 - Halcom)
Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9.141.259 - Google, Inc.)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 5.10.0.7508 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
SafeSign (HKLM\...\{2DF407D3-A8AD-4ACF-BFD5-5F7D42EC62FD}) (Version: 3.0.76 - A.E.T. Europe B.V.)
Samsung MFP 750 Series (HKLM\...\Samsung MFP 750 Series) (Version:  - )
Samsung MFP 750 Series (TWAIN) (HKLM\...\{44A071A4-D6CC-4984-9E45-47F627949950}) (Version:  - )
Total Commander (Remove or Repair) (HKLM\...\Totalcmd) (Version: 8.50 - Ghisler Software GmbH)
WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden
Windows XP srpski interfejs paket - latinica (HKLM\...\{D8D75AD0-9BE3-4613-BD5F-FC00E9162064}) (Version: 2.0.0.2600 - Microsoft Corporation)
WinRAR 5.21 beta 2 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.2 - win.rar GmbH)
YAC(Yet Another Cleaner!) (HKLM\...\iSafe) (Version: 6.7.141 - ELEX DO BRASIL PARTICIPAÇÕES LTDA) <==== ATTENTION

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: C:\WINDOWS\Tasks\Chrome Cleanup Tool logs upload retry.job => C:\Documents and Settings\Tesla\My Documents\Downloads\chrome_cleanup_tool(1).exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

Shortcut: C:\Documents and Settings\Tesla\Desktop\AB Soft.lnk -> Z:\AB\AB.BAT ()

==================== Loaded Modules (Whitelisted) ==============

2016-01-20 19:04 - 2016-02-10 14:30 - 00113496 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2016-01-20 19:04 - 2016-02-10 14:30 - 00133768 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-02-20 13:17 - 2016-02-20 13:17 - 02835968 _____ () C:\Program Files\AVAST Software\Avast\defs\16022000\algo.dll
2016-01-20 19:17 - 2016-02-10 14:30 - 00480760 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-02-22 07:27 - 2016-02-22 07:27 - 02835968 _____ () C:\Program Files\AVAST Software\Avast\defs\16022101\algo.dll
2016-01-23 15:09 - 2011-04-11 06:26 - 00024064 _____ () C:\WINDOWS\system32\spd__l.dll
2012-12-07 18:27 - 2012-12-07 18:27 - 00167424 _____ () C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
2016-01-23 14:49 - 2015-09-04 11:20 - 00475136 _____ () C:\Program Files\Halcom\Personal E-Bank\libFilterDocMap.dll
2016-01-23 14:49 - 2015-09-04 11:20 - 00069632 _____ () C:\Program Files\Halcom\Personal E-Bank\libOrderSummaryReport.dll
2016-01-23 14:49 - 2015-09-04 11:20 - 00124448 _____ () C:\Program Files\Halcom\Personal E-Bank\GetPIN.dll
2016-01-23 14:48 - 2011-07-19 16:13 - 00659456 _____ () C:\Program Files\Halcom\Personal E-Bank\LIBEAY32.dll
2016-01-23 14:49 - 2008-12-02 10:05 - 05107712 _____ () C:\Program Files\Halcom\Personal E-Bank\qt-mt334.dll
2016-01-23 14:49 - 2005-10-27 20:06 - 00364544 _____ () C:\Program Files\Halcom\Personal E-Bank\js32.dll
2016-01-23 14:49 - 2015-09-04 11:20 - 00098304 _____ () C:\Program Files\Halcom\Personal E-Bank\PKCS11Wrapper.dll
2016-01-23 14:49 - 2010-02-03 11:42 - 00569414 _____ () C:\Program Files\Halcom\Personal E-Bank\boost_regex_vc6_mdi.dll
2016-01-23 14:49 - 2015-09-04 11:20 - 00245760 _____ () C:\Program Files\Halcom\Personal E-Bank\banke.dll
2016-01-23 14:49 - 2015-09-04 11:20 - 00053248 _____ () C:\Program Files\Halcom\Personal E-Bank\ExchangeRateManager.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2008-04-14 13:00 - 2016-01-20 19:44 - 00000804 ____A C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1       localhost
127.0.0.1       d5356092.client.dst.baintern.de # LMS GENERATED LINE

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1177238915-651377827-1801674531-1003\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Bliss.bmp
DNS Servers: 192.168.31.1
Windows Firewall is disabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: atchk => "C:\Program Files\Intel\AMT\atchk.exe"
MSCONFIG\startupreg: picon => "C:\Program Files\Common Files\Intel\Privacy Icon\PrivacyIconClient.exe" -startup

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [Torrentex-In-TCP] => (Allow) C:\Torrentex\Torrentex.exe
FirewallRules: [Torrentex-In-UDP] => (Allow) C:\Torrentex\Torrentex.exe
StandardProfile\AuthorizedApplications: [C:\WINDOWS\system32\SUPDSvc2.exe] => Enabled:Samsung UPD Service2
StandardProfile\AuthorizedApplications: [C:\Program Files\Mozilla Firefox\firefox.exe] => Enabled:Firefox (C:\Program Files\Mozilla Firefox)
StandardProfile\AuthorizedApplications: [C:\Program Files\Google\Chrome\Application\chrome.exe] => Enabled:Google Chrome
DomainProfile\GloballyOpenPorts: [139:TCP] => Enabled:@xpsp2res.dll,-22004
DomainProfile\GloballyOpenPorts: [445:TCP] => Enabled:@xpsp2res.dll,-22005
DomainProfile\GloballyOpenPorts: [137:UDP] => Enabled:@xpsp2res.dll,-22001
DomainProfile\GloballyOpenPorts: [138:UDP] => Enabled:@xpsp2res.dll,-22002
StandardProfile\GloballyOpenPorts: [139:TCP] => :LocalSubNet:Enabled:@xpsp2res.dll,-22004
StandardProfile\GloballyOpenPorts: [445:TCP] => :LocalSubNet:Enabled:@xpsp2res.dll,-22005
StandardProfile\GloballyOpenPorts: [137:UDP] => :LocalSubNet:Enabled:@xpsp2res.dll,-22001
StandardProfile\GloballyOpenPorts: [138:UDP] => :LocalSubNet:Enabled:@xpsp2res.dll,-22002

==================== Restore Points =========================

21-01-2016 17:26:57 Installed LibreOffice 5.0.4.2
21-01-2016 17:30:44 Installed Windows XP srpski interfejs paket - latinica
21-01-2016 17:55:22 DriverPack Solution 15.8
21-01-2016 18:36:51 DriverPack Solution 15.8
23-01-2016 14:39:13 Installed GemPcCCID
23-01-2016 14:44:09 Installed Čitač elektronske lične karte (32-bitni)
23-01-2016 14:45:39 Installed Windows KB954550-v5.
23-01-2016 14:45:44 Printer Driver Microsoft XPS Document Writer Installed
23-01-2016 14:45:49 Printer Driver Microsoft XPS Document Writer Installed
23-01-2016 14:46:43 Installed %1 %2.
23-01-2016 14:48:58 Installed Personal E-bank
23-01-2016 14:55:00 Installed CitacSaobracajne
23-01-2016 15:30:55 Unsigned printer driver Epson LX-300 installed.
25-01-2016 09:44:24 Kontrolna tačka sistema
26-01-2016 14:36:39 Printer Driver Samsung MFP 750 Series Installed
26-01-2016 14:37:19 Installed Samsung MFP 750 Series
26-01-2016 14:41:03 DriverPack Solution 13
27-01-2016 11:54:53 Printer Driver PDFCreator Installed
27-01-2016 11:56:17 Installed Manager
28-01-2016 12:47:04 Printer Driver PDFCreator Installed
28-01-2016 12:47:23 Installed PDF Architect 4 View Module
28-01-2016 12:47:45 Installed PDF Architect 4 Edit Module
28-01-2016 12:47:50 Installed PDF Architect 4 Create Module
29-01-2016 13:44:43 Kontrolna tačka sistema
01-02-2016 07:47:35 Kontrolna tačka sistema
02-02-2016 12:47:30 Kontrolna tačka sistema
04-02-2016 07:44:21 Kontrolna tačka sistema
04-02-2016 09:53:45 Instalirano SafeSign.
06-02-2016 08:30:23 Kontrolna tačka sistema
08-02-2016 07:45:06 Kontrolna tačka sistema
10-02-2016 07:24:51 Kontrolna tačka sistema
10-02-2016 14:31:41 Installed Windows XP Wdf01009.
12-02-2016 07:45:00 Kontrolna tačka sistema
13-02-2016 10:05:36 Kontrolna tačka sistema
16-02-2016 07:50:40 Kontrolna tačka sistema
16-02-2016 15:32:58 Installed Skype™ 5.9
17-02-2016 08:28:11 Removed Skype™ 5.9
17-02-2016 12:18:17 Uklonjeno Skype™ 7.18
18-02-2016 10:39:46 Removed Skype™ 7.18
18-02-2016 13:25:53 Removed Skype Toolbars
18-02-2016 13:26:06 Removed Skype™ 5.0
18-02-2016 13:29:49 Installed Skype™ 5.9
18-02-2016 13:35:18 Removed Skype™ 5.9
18-02-2016 15:22:55 Advanced System~Protector
20-02-2016 08:39:37 Kontrolna tačka sistema
22-02-2016 08:17:40 Kontrolna tačka sistema

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (02/18/2016 01:29:47 PM) (Source: MsiInstaller) (EventID: 11305) (User: DRAGAN)
Description: Product: Skype™ 5.9 -- Error 1305. Error reading from file D:\Downloads\SkypeSetup_5.9.0.115 SP2.msi.  System error 1008. Verify that the file exists and that you can access it.

Error: (02/16/2016 03:32:54 PM) (Source: MsiInstaller) (EventID: 11305) (User: DRAGAN)
Description: Product: Skype™ 5.9 -- Error 1305. Error reading from file D:\Downloads\SkypeSetup_5.9.0.115 SP2.msi.  System error 1008. Verify that the file exists and that you can access it.

Error: (02/08/2016 10:25:29 AM) (Source: Pexim.FxClient.UI.Shell) (EventID: 100) (User: )
Description: Timestamp: 8.2.2016 9:25:28
Message: HandlingInstanceID: 53bf015d-e855-4b79-9473-4f09811c0021
An exception of type 'Microsoft.Practices.CompositeUI.Services.ModuleEnumeratorException' occurred and was caught.
------------------------------------------------------------------------------------------------------------------
02/08/2016 10:25:28
Type : Microsoft.Practices.CompositeUI.Services.ModuleEnumeratorException, Microsoft.Practices.CompositeUI, Version=1.0.51205.0, Culture=neutral, PublicKeyToken=null
Message : An exception occurred while enumerating the modules using the Microsoft.Practices.CompositeUI.Services.FileCatalogModuleEnumerator enumerator.
Source : Microsoft.Practices.CompositeUI
Help link :
Data : System.Collections.ListDictionaryInternal
TargetSite : Microsoft.Practices.CompositeUI.Configuration.IModuleInfo[] EnumerateModules()
Stack Trace :    at Microsoft.Practices.CompositeUI.Services.FileCatalogModuleEnumerator.EnumerateModules()
   at Microsoft.Practices.CompositeUI.CabApplication`1.LoadModules()
   at Microsoft.Practices.CompositeUI.CabApplication`1.Run()
   at Pexim.FxClient.UI.SmartClient.Library.SingletonApplication`2.Run(SmartClientApplication`2 application)
   at Pexim.FxClient.UI.Shell.ShellApplication.Main()

Additional Info:

MachineName : DRAGAN
TimeStamp : 8.2.2016 9:25:28
FullName : Microsoft.Practices.EnterpriseLibrary.ExceptionHandling, Version=2.0.0.0, Culture=neutral, PublicKeyToken=null
AppDomainName : DefaultDomain
ThreadIdentity : DRAGAN\Tesla
WindowsIdentity : DRAGAN\Tesla
    Inner Exception
    ---------------
    Type : Microsoft.Practices.CompositeUI.Configuration.SolutionProfileReaderException, Microsoft.Practices.CompositeUI, Version=1.0.51205.0, Culture=neutral, PublicKeyToken=null
    Message : An error occurred while reading the solution profile C:\Documents and Settings\Tesla\Local Settings\Apps\2.0\261OQYVJ.3TW\NQCOPO7R.JB7\offi...app_96b22ef367b5b11d_0001.07df_cff14fe4892d7e99\ProfileCatalog.xml.
    Source : Microsoft.Practices.CompositeUI
    Help link :
    Data : System.Collections.ListDictionaryInternal
    TargetSite : Microsoft.Practices.CompositeUI.Configuration.Xsd.SolutionProfileElement ReadProfile()
    Stack Trace :    at Microsoft.Practices.CompositeUI.Configuration.SolutionProfileReader.ReadProfile()
       at Microsoft.Practices.CompositeUI.Services.FileCatalogModuleEnumerator.EnumerateModules()

        Inner Exception
        ---------------
        Type : System.IO.IOException, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
        Message : The process cannot access the file 'C:\Documents and Settings\Tesla\Local Settings\Temp\l76da4xx.dll' because it is being used by another process.
        Source : mscorlib
        Help link :
        Data : System.Collections.ListDictionaryInternal
        TargetSite : Void WinIOError(Int32, System.String)
        Stack Trace :    at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
           at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy)
           at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share)
           at Microsoft.CSharp.CSharpCodeGenerator.FromFileBatch(CompilerParameters options, String[] fileNames)
           at Microsoft.CSharp.CSharpCodeGenerator.FromSourceBatch(CompilerParameters options, String[] sources)
           at Microsoft.CSharp.CSharpCodeGenerator.System.CodeDom.Compiler.ICodeCompiler.CompileAssemblyFromSourceBatch(CompilerParameters options, String[] sources)
           at System.CodeDom.Compiler.CodeDomProvider.CompileAssemblyFromSource(CompilerParameters options, String[] sources)
           at System.Xml.Serialization.Compiler.Compile(Assembly parent, String ns, XmlSerializerCompilerParameters xmlParameters, Evidence evidence)
           at System.Xml.Serialization.TempAssembly.GenerateAssembly(XmlMapping[] xmlMappings, Type[] types, String defaultNamespace, Evidence evidence, XmlSerializerCompilerParameters parameters, Assembly assembly, Hashtable assemblies)
           at System.Xml.Serialization.TempAssembly..ctor(XmlMapping[] xmlMappings, Type[] types, String defaultNamespace, String location, Evidence evidence)
           at System.Xml.Serialization.XmlSerializer.GenerateTempAssembly(XmlMapping xmlMapping, Type type, String defaultNamespace)
           at System.Xml.Serialization.XmlSerializer..ctor(Type type, String defaultNamespace)
           at System.Xml.Serialization.XmlSerializer..ctor(Type type)
           at Microsoft.Practices.CompositeUI.Configuration.SolutionProfileReader.ReadProfile()


Category: General
Priority: 0
EventId: 100
Severity: Error
Title:Enterprise Library Exception Handling
Machine: DRAGAN
Application Domain: DefaultDomain
Process Id: 172
Process Name: C:\Documents and Settings\Tesla\Local Settings\Apps\2.0\261OQYVJ.3TW\NQCOPO7R.JB7\offi...app_96b22ef367b5b11d_0001.07df_cff14fe4892d7e99\Pexim.FxClient.UI.Shell.exe
Win32 Thread Id: 4028
Thread Name: FxClient Main Thread
Extended Properties:

Error: (02/04/2016 09:54:14 AM) (Source: Pexim.FxClient.UI.Shell) (EventID: 100) (User: )
Description: Timestamp: 4.2.2016 8:54:14
Message: HandlingInstanceID: 298c95ed-8a4f-4fa0-8ffd-dd2fb1c3c771
An exception of type 'Microsoft.Practices.CompositeUI.Services.ModuleEnumeratorException' occurred and was caught.
------------------------------------------------------------------------------------------------------------------
02/04/2016 09:54:14
Type : Microsoft.Practices.CompositeUI.Services.ModuleEnumeratorException, Microsoft.Practices.CompositeUI, Version=1.0.51205.0, Culture=neutral, PublicKeyToken=null
Message : An exception occurred while enumerating the modules using the Microsoft.Practices.CompositeUI.Services.FileCatalogModuleEnumerator enumerator.
Source : Microsoft.Practices.CompositeUI
Help link :
Data : System.Collections.ListDictionaryInternal
TargetSite : Microsoft.Practices.CompositeUI.Configuration.IModuleInfo[] EnumerateModules()
Stack Trace :    at Microsoft.Practices.CompositeUI.Services.FileCatalogModuleEnumerator.EnumerateModules()
   at Microsoft.Practices.CompositeUI.CabApplication`1.LoadModules()
   at Microsoft.Practices.CompositeUI.CabApplication`1.Run()
   at Pexim.FxClient.UI.SmartClient.Library.SingletonApplication`2.Run(SmartClientApplication`2 application)
   at Pexim.FxClient.UI.Shell.ShellApplication.Main()

Additional Info:

MachineName : DRAGAN
TimeStamp : 4.2.2016 8:54:14
FullName : Microsoft.Practices.EnterpriseLibrary.ExceptionHandling, Version=2.0.0.0, Culture=neutral, PublicKeyToken=null
AppDomainName : DefaultDomain
ThreadIdentity : DRAGAN\Tesla
WindowsIdentity : DRAGAN\Tesla
    Inner Exception
    ---------------
    Type : Microsoft.Practices.CompositeUI.Configuration.SolutionProfileReaderException, Microsoft.Practices.CompositeUI, Version=1.0.51205.0, Culture=neutral, PublicKeyToken=null
    Message : An error occurred while reading the solution profile C:\Documents and Settings\Tesla\Local Settings\Apps\2.0\261OQYVJ.3TW\NQCOPO7R.JB7\offi...app_96b22ef367b5b11d_0001.07df_cff14fe4892d7e99\ProfileCatalog.xml.
    Source : Microsoft.Practices.CompositeUI
    Help link :
    Data : System.Collections.ListDictionaryInternal
    TargetSite : Microsoft.Practices.CompositeUI.Configuration.Xsd.SolutionProfileElement ReadProfile()
    Stack Trace :    at Microsoft.Practices.CompositeUI.Configuration.SolutionProfileReader.ReadProfile()
       at Microsoft.Practices.CompositeUI.Services.FileCatalogModuleEnumerator.EnumerateModules()

        Inner Exception
        ---------------
        Type : System.IO.IOException, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
        Message : The process cannot access the file 'C:\Documents and Settings\Tesla\Local Settings\Temp\mhsmifo_.dll' because it is being used by another process.
        Source : mscorlib
        Help link :
        Data : System.Collections.ListDictionaryInternal
        TargetSite : Void WinIOError(Int32, System.String)
        Stack Trace :    at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
           at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy)
           at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share)
           at Microsoft.CSharp.CSharpCodeGenerator.FromFileBatch(CompilerParameters options, String[] fileNames)
           at Microsoft.CSharp.CSharpCodeGenerator.FromSourceBatch(CompilerParameters options, String[] sources)
           at Microsoft.CSharp.CSharpCodeGenerator.System.CodeDom.Compiler.ICodeCompiler.CompileAssemblyFromSourceBatch(CompilerParameters options, String[] sources)
           at System.CodeDom.Compiler.CodeDomProvider.CompileAssemblyFromSource(CompilerParameters options, String[] sources)
           at System.Xml.Serialization.Compiler.Compile(Assembly parent, String ns, XmlSerializerCompilerParameters xmlParameters, Evidence evidence)
           at System.Xml.Serialization.TempAssembly.GenerateAssembly(XmlMapping[] xmlMappings, Type[] types, String defaultNamespace, Evidence evidence, XmlSerializerCompilerParameters parameters, Assembly assembly, Hashtable assemblies)
           at System.Xml.Serialization.TempAssembly..ctor(XmlMapping[] xmlMappings, Type[] types, String defaultNamespace, String location, Evidence evidence)
           at System.Xml.Serialization.XmlSerializer.GenerateTempAssembly(XmlMapping xmlMapping, Type type, String defaultNamespace)
           at System.Xml.Serialization.XmlSerializer..ctor(Type type, String defaultNamespace)
           at System.Xml.Serialization.XmlSerializer..ctor(Type type)
           at Microsoft.Practices.CompositeUI.Configuration.SolutionProfileReader.ReadProfile()


Category: General
Priority: 0
EventId: 100
Severity: Error
Title:Enterprise Library Exception Handling
Machine: DRAGAN
Application Domain: DefaultDomain
Process Id: 228
Process Name: C:\Documents and Settings\Tesla\Local Settings\Apps\2.0\261OQYVJ.3TW\NQCOPO7R.JB7\offi...app_96b22ef367b5b11d_0001.07df_cff14fe4892d7e99\Pexim.FxClient.UI.Shell.exe
Win32 Thread Id: 3708
Thread Name: FxClient Main Thread
Extended Properties:

Error: (02/04/2016 09:51:54 AM) (Source: Pexim.FxClient.UI.Shell) (EventID: 100) (User: )
Description: Timestamp: 4.2.2016 8:51:54
Message: HandlingInstanceID: b5ac0f80-8daa-4154-8287-84db59ca3538
An exception of type 'Microsoft.Practices.CompositeUI.Services.ModuleEnumeratorException' occurred and was caught.
------------------------------------------------------------------------------------------------------------------
02/04/2016 09:51:53
Type : Microsoft.Practices.CompositeUI.Services.ModuleEnumeratorException, Microsoft.Practices.CompositeUI, Version=1.0.51205.0, Culture=neutral, PublicKeyToken=null
Message : An exception occurred while enumerating the modules using the Microsoft.Practices.CompositeUI.Services.FileCatalogModuleEnumerator enumerator.
Source : Microsoft.Practices.CompositeUI
Help link :
Data : System.Collections.ListDictionaryInternal
TargetSite : Microsoft.Practices.CompositeUI.Configuration.IModuleInfo[] EnumerateModules()
Stack Trace :    at Microsoft.Practices.CompositeUI.Services.FileCatalogModuleEnumerator.EnumerateModules()
   at Microsoft.Practices.CompositeUI.CabApplication`1.LoadModules()
   at Microsoft.Practices.CompositeUI.CabApplication`1.Run()
   at Pexim.FxClient.UI.SmartClient.Library.SingletonApplication`2.Run(SmartClientApplication`2 application)
   at Pexim.FxClient.UI.Shell.ShellApplication.Main()

Additional Info:

MachineName : DRAGAN
TimeStamp : 4.2.2016 8:51:53
FullName : Microsoft.Practices.EnterpriseLibrary.ExceptionHandling, Version=2.0.0.0, Culture=neutral, PublicKeyToken=null
AppDomainName : DefaultDomain
ThreadIdentity : DRAGAN\Tesla
WindowsIdentity : DRAGAN\Tesla
    Inner Exception
    ---------------
    Type : Microsoft.Practices.CompositeUI.Configuration.SolutionProfileReaderException, Microsoft.Practices.CompositeUI, Version=1.0.51205.0, Culture=neutral, PublicKeyToken=null
    Message : An error occurred while reading the solution profile C:\Documents and Settings\Tesla\Local Settings\Apps\2.0\261OQYVJ.3TW\NQCOPO7R.JB7\offi...app_96b22ef367b5b11d_0001.07df_cff14fe4892d7e99\ProfileCatalog.xml.
    Source : Microsoft.Practices.CompositeUI
    Help link :
    Data : System.Collections.ListDictionaryInternal
    TargetSite : Microsoft.Practices.CompositeUI.Configuration.Xsd.SolutionProfileElement ReadProfile()
    Stack Trace :    at Microsoft.Practices.CompositeUI.Configuration.SolutionProfileReader.ReadProfile()
       at Microsoft.Practices.CompositeUI.Services.FileCatalogModuleEnumerator.EnumerateModules()

        Inner Exception
        ---------------
        Type : System.IO.IOException, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
        Message : The process cannot access the file 'C:\Documents and Settings\Tesla\Local Settings\Temp\ps2nz0dl.dll' because it is being used by another process.
        Source : mscorlib
        Help link :
        Data : System.Collections.ListDictionaryInternal
        TargetSite : Void WinIOError(Int32, System.String)
        Stack Trace :    at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
           at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy)
           at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share)
           at Microsoft.CSharp.CSharpCodeGenerator.FromFileBatch(CompilerParameters options, String[] fileNames)
           at Microsoft.CSharp.CSharpCodeGenerator.FromSourceBatch(CompilerParameters options, String[] sources)
           at Microsoft.CSharp.CSharpCodeGenerator.System.CodeDom.Compiler.ICodeCompiler.CompileAssemblyFromSourceBatch(CompilerParameters options, String[] sources)
           at System.CodeDom.Compiler.CodeDomProvider.CompileAssemblyFromSource(CompilerParameters options, String[] sources)
           at System.Xml.Serialization.Compiler.Compile(Assembly parent, String ns, XmlSerializerCompilerParameters xmlParameters, Evidence evidence)
           at System.Xml.Serialization.TempAssembly.GenerateAssembly(XmlMapping[] xmlMappings, Type[] types, String defaultNamespace, Evidence evidence, XmlSerializerCompilerParameters parameters, Assembly assembly, Hashtable assemblies)
           at System.Xml.Serialization.TempAssembly..ctor(XmlMapping[] xmlMappings, Type[] types, String defaultNamespace, String location, Evidence evidence)
           at System.Xml.Serialization.XmlSerializer.GenerateTempAssembly(XmlMapping xmlMapping, Type type, String defaultNamespace)
           at System.Xml.Serialization.XmlSerializer..ctor(Type type, String defaultNamespace)
           at System.Xml.Serialization.XmlSerializer..ctor(Type type)
           at Microsoft.Practices.CompositeUI.Configuration.SolutionProfileReader.ReadProfile()


Category: General
Priority: 0
EventId: 100
Severity: Error
Title:Enterprise Library Exception Handling
Machine: DRAGAN
Application Domain: DefaultDomain
Process Id: 1872
Process Name: C:\Documents and Settings\Tesla\Local Settings\Apps\2.0\261OQYVJ.3TW\NQCOPO7R.JB7\offi...app_96b22ef367b5b11d_0001.07df_cff14fe4892d7e99\Pexim.FxClient.UI.Shell.exe
Win32 Thread Id: 3032
Thread Name: FxClient Main Thread
Extended Properties:

Error: (02/03/2016 12:41:21 PM) (Source: Pexim.FxClient.UI.Shell) (EventID: 100) (User: )
Description: Timestamp: 3.2.2016 11:41:21
Message: HandlingInstanceID: 0cd69bae-47d1-4cb7-a5a1-5e7a1148d856
An exception of type 'Microsoft.Practices.CompositeUI.Services.ModuleEnumeratorException' occurred and was caught.
------------------------------------------------------------------------------------------------------------------
02/03/2016 12:41:21
Type : Microsoft.Practices.CompositeUI.Services.ModuleEnumeratorException, Microsoft.Practices.CompositeUI, Version=1.0.51205.0, Culture=neutral, PublicKeyToken=null
Message : An exception occurred while enumerating the modules using the Microsoft.Practices.CompositeUI.Services.FileCatalogModuleEnumerator enumerator.
Source : Microsoft.Practices.CompositeUI
Help link :
Data : System.Collections.ListDictionaryInternal
TargetSite : Microsoft.Practices.CompositeUI.Configuration.IModuleInfo[] EnumerateModules()
Stack Trace :    at Microsoft.Practices.CompositeUI.Services.FileCatalogModuleEnumerator.EnumerateModules()
   at Microsoft.Practices.CompositeUI.CabApplication`1.LoadModules()
   at Microsoft.Practices.CompositeUI.CabApplication`1.Run()
   at Pexim.FxClient.UI.SmartClient.Library.SingletonApplication`2.Run(SmartClientApplication`2 application)
   at Pexim.FxClient.UI.Shell.ShellApplication.Main()

Additional Info:

MachineName : DRAGAN
TimeStamp : 3.2.2016 11:41:21
FullName : Microsoft.Practices.EnterpriseLibrary.ExceptionHandling, Version=2.0.0.0, Culture=neutral, PublicKeyToken=null
AppDomainName : DefaultDomain
ThreadIdentity : DRAGAN\Tesla
WindowsIdentity : DRAGAN\Tesla
    Inner Exception
    ---------------
    Type : Microsoft.Practices.CompositeUI.Configuration.SolutionProfileReaderException, Microsoft.Practices.CompositeUI, Version=1.0.51205.0, Culture=neutral, PublicKeyToken=null
    Message : An error occurred while reading the solution profile C:\Documents and Settings\Tesla\Local Settings\Apps\2.0\261OQYVJ.3TW\NQCOPO7R.JB7\offi...app_96b22ef367b5b11d_0001.07df_cff14fe4892d7e99\ProfileCatalog.xml.
    Source : Microsoft.Practices.CompositeUI
    Help link :
    Data : System.Collections.ListDictionaryInternal
    TargetSite : Microsoft.Practices.CompositeUI.Configuration.Xsd.SolutionProfileElement ReadProfile()
    Stack Trace :    at Microsoft.Practices.CompositeUI.Configuration.SolutionProfileReader.ReadProfile()
       at Microsoft.Practices.CompositeUI.Services.FileCatalogModuleEnumerator.EnumerateModules()

        Inner Exception
        ---------------
        Type : System.IO.IOException, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
        Message : The process cannot access the file 'C:\Documents and Settings\Tesla\Local Settings\Temp\sut6biqx.dll' because it is being used by another process.
        Source : mscorlib
        Help link :
        Data : System.Collections.ListDictionaryInternal
        TargetSite : Void WinIOError(Int32, System.String)
        Stack Trace :    at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
           at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy)
           at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share)
           at Microsoft.CSharp.CSharpCodeGenerator.FromFileBatch(CompilerParameters options, String[] fileNames)
           at Microsoft.CSharp.CSharpCodeGenerator.FromSourceBatch(CompilerParameters options, String[] sources)
           at Microsoft.CSharp.CSharpCodeGenerator.System.CodeDom.Compiler.ICodeCompiler.CompileAssemblyFromSourceBatch(CompilerParameters options, String[] sources)
           at System.CodeDom.Compiler.CodeDomProvider.CompileAssemblyFromSource(CompilerParameters options, String[] sources)
           at System.Xml.Serialization.Compiler.Compile(Assembly parent, String ns, XmlSerializerCompilerParameters xmlParameters, Evidence evidence)
           at System.Xml.Serialization.TempAssembly.GenerateAssembly(XmlMapping[] xmlMappings, Type[] types, String defaultNamespace, Evidence evidence, XmlSerializerCompilerParameters parameters, Assembly assembly, Hashtable assemblies)
           at System.Xml.Serialization.TempAssembly..ctor(XmlMapping[] xmlMappings, Type[] types, String defaultNamespace, String location, Evidence evidence)
           at System.Xml.Serialization.XmlSerializer.GenerateTempAssembly(XmlMapping xmlMapping, Type type, String defaultNamespace)
           at System.Xml.Serialization.XmlSerializer..ctor(Type type, String defaultNamespace)
           at System.Xml.Serialization.XmlSerializer..ctor(Type type)
           at Microsoft.Practices.CompositeUI.Configuration.SolutionProfileReader.ReadProfile()


Category: General
Priority: 0
EventId: 100
Severity: Error
Title:Enterprise Library Exception Handling
Machine: DRAGAN
Application Domain: DefaultDomain
Process Id: 3900
Process Name: C:\Documents and Settings\Tesla\Local Settings\Apps\2.0\261OQYVJ.3TW\NQCOPO7R.JB7\offi...app_96b22ef367b5b11d_0001.07df_cff14fe4892d7e99\Pexim.FxClient.UI.Shell.exe
Win32 Thread Id: 3812
Thread Name: FxClient Main Thread
Extended Properties:

Error: (02/03/2016 12:40:32 PM) (Source: Pexim.FxClient.UI.Shell) (EventID: 100) (User: )
Description: Timestamp: 3.2.2016 11:40:32
Message: HandlingInstanceID: cc340cc4-2253-46a4-9d7a-a0febd24d145
An exception of type 'Microsoft.Practices.CompositeUI.Services.ModuleEnumeratorException' occurred and was caught.
------------------------------------------------------------------------------------------------------------------
02/03/2016 12:40:32
Type : Microsoft.Practices.CompositeUI.Services.ModuleEnumeratorException, Microsoft.Practices.CompositeUI, Version=1.0.51205.0, Culture=neutral, PublicKeyToken=null
Message : An exception occurred while enumerating the modules using the Microsoft.Practices.CompositeUI.Services.FileCatalogModuleEnumerator enumerator.
Source : Microsoft.Practices.CompositeUI
Help link :
Data : System.Collections.ListDictionaryInternal
TargetSite : Microsoft.Practices.CompositeUI.Configuration.IModuleInfo[] EnumerateModules()
Stack Trace :    at Microsoft.Practices.CompositeUI.Services.FileCatalogModuleEnumerator.EnumerateModules()
   at Microsoft.Practices.CompositeUI.CabApplication`1.LoadModules()
   at Microsoft.Practices.CompositeUI.CabApplication`1.Run()
   at Pexim.FxClient.UI.SmartClient.Library.SingletonApplication`2.Run(SmartClientApplication`2 application)
   at Pexim.FxClient.UI.Shell.ShellApplication.Main()

Additional Info:

MachineName : DRAGAN
TimeStamp : 3.2.2016 11:40:32
FullName : Microsoft.Practices.EnterpriseLibrary.ExceptionHandling, Version=2.0.0.0, Culture=neutral, PublicKeyToken=null
AppDomainName : DefaultDomain
ThreadIdentity : DRAGAN\Tesla
WindowsIdentity : DRAGAN\Tesla
    Inner Exception
    ---------------
    Type : Microsoft.Practices.CompositeUI.Configuration.SolutionProfileReaderException, Microsoft.Practices.CompositeUI, Version=1.0.51205.0, Culture=neutral, PublicKeyToken=null
    Message : An error occurred while reading the solution profile C:\Documents and Settings\Tesla\Local Settings\Apps\2.0\261OQYVJ.3TW\NQCOPO7R.JB7\offi...app_96b22ef367b5b11d_0001.07df_cff14fe4892d7e99\ProfileCatalog.xml.
    Source : Microsoft.Practices.CompositeUI
    Help link :
    Data : System.Collections.ListDictionaryInternal
    TargetSite : Microsoft.Practices.CompositeUI.Configuration.Xsd.SolutionProfileElement ReadProfile()
    Stack Trace :    at Microsoft.Practices.CompositeUI.Configuration.SolutionProfileReader.ReadProfile()
       at Microsoft.Practices.CompositeUI.Services.FileCatalogModuleEnumerator.EnumerateModules()

        Inner Exception
        ---------------
        Type : System.IO.IOException, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
        Message : The process cannot access the file 'C:\Documents and Settings\Tesla\Local Settings\Temp\lqg5r61o.dll' because it is being used by another process.
        Source : mscorlib
        Help link :
        Data : System.Collections.ListDictionaryInternal
        TargetSite : Void WinIOError(Int32, System.String)
        Stack Trace :    at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
           at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy)
           at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share)
           at Microsoft.CSharp.CSharpCodeGenerator.FromFileBatch(CompilerParameters options, String[] fileNames)
           at Microsoft.CSharp.CSharpCodeGenerator.FromSourceBatch(CompilerParameters options, String[] sources)
           at Microsoft.CSharp.CSharpCodeGenerator.System.CodeDom.Compiler.ICodeCompiler.CompileAssemblyFromSourceBatch(CompilerParameters options, String[] sources)
           at System.CodeDom.Compiler.CodeDomProvider.CompileAssemblyFromSource(CompilerParameters options, String[] sources)
           at System.Xml.Serialization.Compiler.Compile(Assembly parent, String ns, XmlSerializerCompilerParameters xmlParameters, Evidence evidence)
           at System.Xml.Serialization.TempAssembly.GenerateAssembly(XmlMapping[] xmlMappings, Type[] types, String defaultNamespace, Evidence evidence, XmlSerializerCompilerParameters parameters, Assembly assembly, Hashtable assemblies)
           at System.Xml.Serialization.TempAssembly..ctor(XmlMapping[] xmlMappings, Type[] types, String defaultNamespace, String location, Evidence evidence)
           at System.Xml.Serialization.XmlSerializer.GenerateTempAssembly(XmlMapping xmlMapping, Type type, String defaultNamespace)
           at System.Xml.Serialization.XmlSerializer..ctor(Type type, String defaultNamespace)
           at System.Xml.Serialization.XmlSerializer..ctor(Type type)
           at Microsoft.Practices.CompositeUI.Configuration.SolutionProfileReader.ReadProfile()


Category: General
Priority: 0
EventId: 100
Severity: Error
Title:Enterprise Library Exception Handling
Machine: DRAGAN
Application Domain: DefaultDomain
Process Id: 1860
Process Name: C:\Documents and Settings\Tesla\Local Settings\Apps\2.0\261OQYVJ.3TW\NQCOPO7R.JB7\offi...app_96b22ef367b5b11d_0001.07df_cff14fe4892d7e99\Pexim.FxClient.UI.Shell.exe
Win32 Thread Id: 2624
Thread Name: FxClient Main Thread
Extended Properties:

Error: (02/03/2016 12:39:30 PM) (Source: Pexim.FxClient.UI.Shell) (EventID: 100) (User: )
Description: Timestamp: 3.2.2016 11:39:29
Message: HandlingInstanceID: 33f6ba98-b06b-40d9-a2ad-1686d2f2e9ee
An exception of type 'Microsoft.Practices.CompositeUI.Services.ModuleEnumeratorException' occurred and was caught.
------------------------------------------------------------------------------------------------------------------
02/03/2016 12:39:29
Type : Microsoft.Practices.CompositeUI.Services.ModuleEnumeratorException, Microsoft.Practices.CompositeUI, Version=1.0.51205.0, Culture=neutral, PublicKeyToken=null
Message : An exception occurred while enumerating the modules using the Microsoft.Practices.CompositeUI.Services.FileCatalogModuleEnumerator enumerator.
Source : Microsoft.Practices.CompositeUI
Help link :
Data : System.Collections.ListDictionaryInternal
TargetSite : Microsoft.Practices.CompositeUI.Configuration.IModuleInfo[] EnumerateModules()
Stack Trace :    at Microsoft.Practices.CompositeUI.Services.FileCatalogModuleEnumerator.EnumerateModules()
   at Microsoft.Practices.CompositeUI.CabApplication`1.LoadModules()
   at Microsoft.Practices.CompositeUI.CabApplication`1.Run()
   at Pexim.FxClient.UI.SmartClient.Library.SingletonApplication`2.Run(SmartClientApplication`2 application)
   at Pexim.FxClient.UI.Shell.ShellApplication.Main()

Additional Info:

MachineName : DRAGAN
TimeStamp : 3.2.2016 11:39:29
FullName : Microsoft.Practices.EnterpriseLibrary.ExceptionHandling, Version=2.0.0.0, Culture=neutral, PublicKeyToken=null
AppDomainName : DefaultDomain
ThreadIdentity : DRAGAN\Tesla
WindowsIdentity : DRAGAN\Tesla
    Inner Exception
    ---------------
    Type : Microsoft.Practices.CompositeUI.Configuration.SolutionProfileReaderException, Microsoft.Practices.CompositeUI, Version=1.0.51205.0, Culture=neutral, PublicKeyToken=null
    Message : An error occurred while reading the solution profile C:\Documents and Settings\Tesla\Local Settings\Apps\2.0\261OQYVJ.3TW\NQCOPO7R.JB7\offi...app_96b22ef367b5b11d_0001.07df_cff14fe4892d7e99\ProfileCatalog.xml.
    Source : Microsoft.Practices.CompositeUI
    Help link :
    Data : System.Collections.ListDictionaryInternal
    TargetSite : Microsoft.Practices.CompositeUI.Configuration.Xsd.SolutionProfileElement ReadProfile()
    Stack Trace :    at Microsoft.Practices.CompositeUI.Configuration.SolutionProfileReader.ReadProfile()
       at Microsoft.Practices.CompositeUI.Services.FileCatalogModuleEnumerator.EnumerateModules()

        Inner Exception
        ---------------
        Type : System.IO.IOException, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
        Message : The process cannot access the file 'C:\Documents and Settings\Tesla\Local Settings\Temp\twm2u3t7.dll' because it is being used by another process.
        Source : mscorlib
        Help link :
        Data : System.Collections.ListDictionaryInternal
        TargetSite : Void WinIOError(Int32, System.String)
        Stack Trace :    at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
           at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy)
           at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share)
           at Microsoft.CSharp.CSharpCodeGenerator.FromFileBatch(CompilerParameters options, String[] fileNames)
           at Microsoft.CSharp.CSharpCodeGenerator.FromSourceBatch(CompilerParameters options, String[] sources)
           at Microsoft.CSharp.CSharpCodeGenerator.System.CodeDom.Compiler.ICodeCompiler.CompileAssemblyFromSourceBatch(CompilerParameters options, String[] sources)
           at System.CodeDom.Compiler.CodeDomProvider.CompileAssemblyFromSource(CompilerParameters options, String[] sources)
           at System.Xml.Serialization.Compiler.Compile(Assembly parent, String ns, XmlSerializerCompilerParameters xmlParameters, Evidence evidence)
           at System.Xml.Serialization.TempAssembly.GenerateAssembly(XmlMapping[] xmlMappings, Type[] types, String defaultNamespace, Evidence evidence, XmlSerializerCompilerParameters parameters, Assembly assembly, Hashtable assemblies)
           at System.Xml.Serialization.TempAssembly..ctor(XmlMapping[] xmlMappings, Type[] types, String defaultNamespace, String location, Evidence evidence)
           at System.Xml.Serialization.XmlSerializer.GenerateTempAssembly(XmlMapping xmlMapping, Type type, String defaultNamespace)
           at System.Xml.Serialization.XmlSerializer..ctor(Type type, String defaultNamespace)
           at System.Xml.Serialization.XmlSerializer..ctor(Type type)
           at Microsoft.Practices.CompositeUI.Configuration.SolutionProfileReader.ReadProfile()


Category: General
Priority: 0
EventId: 100
Severity: Error
Title:Enterprise Library Exception Handling
Machine: DRAGAN
Application Domain: DefaultDomain
Process Id: 320
Process Name: C:\Documents and Settings\Tesla\Local Settings\Apps\2.0\261OQYVJ.3TW\NQCOPO7R.JB7\offi...app_96b22ef367b5b11d_0001.07df_cff14fe4892d7e99\Pexim.FxClient.UI.Shell.exe
Win32 Thread Id: 2284
Thread Name: FxClient Main Thread
Extended Properties:

Error: (01/28/2016 12:32:20 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: PDFCreator.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.Windows.Markup.XamlParseException
Stack:
   at System.Windows.Markup.XamlReader.RewrapException(System.Exception, System.Xaml.IXamlLineInfo, System.Uri)
   at System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)
   at System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)
   at System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)
   at System.Windows.Application.LoadComponent(System.Object, System.Uri)
   at pdfforge.PDFCreator.App.InitializeComponent()
   at pdfforge.PDFCreator.App.Main()

Error: (01/27/2016 02:16:03 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - 1>Failed to compile: System.EnterpriseServices, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80070020


System errors:
=============
Error: (02/22/2016 07:27:16 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
iSafeKrnlKit

Error: (02/22/2016 07:27:10 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The YAC Service service failed to start due to the following error:
%%1053

Error: (02/22/2016 07:27:10 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Timeout (30000 milliseconds) waiting for the YAC Service service to connect.

Error: (02/20/2016 08:17:42 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
iSafeKrnlKit

Error: (02/20/2016 08:17:29 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The YAC Service service failed to start due to the following error:
%%1053

Error: (02/20/2016 08:17:29 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Timeout (30000 milliseconds) waiting for the YAC Service service to connect.

Error: (02/19/2016 11:35:01 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: The ScRegSetValueExW call failed for Start with the following error:
%%5

Error: (02/19/2016 11:23:23 AM) (Source: 0) (EventID: 1) (User: )
Description: 0xC0000001HarddiskVolume1

Error: (02/18/2016 03:53:53 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Application Layer Gateway Service service terminated unexpectedly.  It has done this 1 time(s).

Error: (02/18/2016 03:53:53 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The PDF Architect 4 Manager service terminated unexpectedly.  It has done this 1 time(s).


==================== Memory info ===========================

Processor: Intel® Core™2 Duo CPU E8500 @ 3.16GHz
Percentage of memory in use: 40%
Total physical RAM: 1964.22 MB
Available physical RAM: 1159.97 MB
Total Virtual: 3857.62 MB
Available Virtual: 3148.89 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:73.24 GB) (Free:53.68 GB) NTFS ==>[drive with boot components (Windows XP)]
Drive d: (DATA) (Fixed) (Total:75.8 GB) (Free:63.77 GB) NTFS
Drive z: () (Network) (Total:74.52 GB) (Free:66.02 GB)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows XP) (Size: 149.1 GB) (Disk ID: CBFF53B8)
Partition 1: (Active) - (Size=73.2 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=75.8 GB) - (Type=OF Extended)

==================== End of Addition.txt ============================

 

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:21-02-2016 01
Ran by Tesla (administrator) on DRAGAN (22-02-2016 12:38:41)
Running from C:\Documents and Settings\Tesla\My Documents\Downloads
Loaded Profiles: Tesla (Available Profiles: Tesla)
Platform: Microsoft Windows XP Professional Service Pack 3 (X86) Language: English (United States)
Internet Explorer Version 6 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\WINDOWS\system32\scardsvr.exe
() C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
(pdfforge GmbH) C:\Program Files\PDF Architect 4\creator-ws.exe
(© pdfforge GmbH.) C:\Documents and Settings\All Users\Application Data\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(Intel Corporation) C:\WINDOWS\system32\hkcmd.exe
(A.E.T. Europe B.V.) C:\WINDOWS\system32\aetcrss1.exe
(Technology Nexus AB) C:\Program Files\Personal\bin\Personal.exe
(Alternet software) C:\Program Files\DOSPrinter\DOSPrinter.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
(Halcom d.d.) C:\Program Files\Halcom\Personal E-Bank\PersonalEBankMain.exe
(Microsoft Corporation) C:\WINDOWS\system32\cmd.exe
(Microsoft Corporation) C:\WINDOWS\system32\ntvdm.exe
(Microsoft Corporation) C:\Program Files\Outlook Express\msimn.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [20145368 2015-04-01] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
HKLM\...\Run: [CertificateRegistration] => C:\WINDOWS\system32\aetcrss1.exe [151552 2011-11-10] (A.E.T. Europe B.V.)
HKU\S-1-5-21-1177238915-651377827-1801674531-1003\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-1177238915-651377827-1801674531-1003\...\MountPoints2: ##Prodaja#_Servis#!Install NETPOINT 11.02.2015#Driver Solution Pack 15.8 - Z:\DriverPackSolution.exe
HKU\S-1-5-21-1177238915-651377827-1801674531-1003\...\MountPoints2: {01967eee-c32f-11e5-a40d-00199960457c} - F:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-1177238915-651377827-1801674531-1003\...\MountPoints2: {0fa400c3-bf73-11e5-a3f8-ecff27c600b6} - F:\sources\SetupError.exe x64
HKU\S-1-5-21-1177238915-651377827-1801674531-1003\...\MountPoints2: {5045fad6-c1d6-11e5-a40b-00199960457c} - sources\SetupError.exe x64
HKU\S-1-5-21-1177238915-651377827-1801674531-1003\...\MountPoints2: {5045faec-c1d6-11e5-a40b-00199960457c} - F:\setup.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2016-02-10] (AVAST Software)
Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Personal.lnk [2016-01-23]
ShortcutTarget: Personal.lnk -> C:\Program Files\Personal\bin\Personal.exe (Technology Nexus AB)
Startup: C:\Documents and Settings\Tesla\Start Menu\Programs\Startup\DOSPrinter.lnk [2016-01-23]
ShortcutTarget: DOSPrinter.lnk -> C:\Program Files\DOSPrinter\DOSPrinter.exe (Alternet software)
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.31.1
Tcpip\..\Interfaces\{7BB256B3-21E2-499D-84B6-1DCD283BFCEA}: [DhcpNameServer] 192.168.31.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=hitachixhdt721016sla380_sta1l5ma1d99lb1d99lbx
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com/search?q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=hitachixhdt721016sla380_sta1l5ma1d99lb1d99lbx
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/search?q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=hitachixhdt721016sla380_sta1l5ma1d99lb1d99lbx
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=hitachixhdt721016sla380_sta1l5ma1d99lb1d99lbx
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/search?q={searchTerms}
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com/search?q={searchTerms}
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=hitachixhdt721016sla380_sta1l5ma1d99lb1d99lbx
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=hitachixhdt721016sla380_sta1l5ma1d99lb1d99lbx
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/search?q={searchTerms}
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com/search?q={searchTerms}
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=hitachixhdt721016sla380_sta1l5ma1d99lb1d99lbx
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=hitachixhdt721016sla380_sta1l5ma1d99lb1d99lbx
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/search?q={searchTerms}
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com/search?q={searchTerms}
HKU\S-1-5-21-1177238915-651377827-1801674531-1003\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=hitachixhdt721016sla380_sta1l5ma1d99lb1d99lbx
HKU\S-1-5-21-1177238915-651377827-1801674531-1003\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com/search?q={searchTerms}
HKU\S-1-5-21-1177238915-651377827-1801674531-1003\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/search?q={searchTerms}
HKU\S-1-5-21-1177238915-651377827-1801674531-1003\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=hitachixhdt721016sla380_sta1l5ma1d99lb1d99lbx
URLSearchHook: [S-1-5-21-1177238915-651377827-1801674531-1003] ATTENTION => Default URLSearchHook is missing
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "" <======= ATTENTION
SearchScopes: HKLM -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKLM -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\.DEFAULT -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-19 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-20 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1177238915-651377827-1801674531-1003 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1177238915-651377827-1801674531-1003 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: PDF Architect 4 Helper -> {38279E1A-7019-40C1-B579-E99DFB3312E8} -> C:\Program Files\PDF Architect 4\creator-ie-helper.dll [2016-01-15] (pdfforge GmbH)
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_71\bin\ssv.dll [2016-01-26] (Oracle Corporation)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_71\bin\jp2ssv.dll [2016-01-26] (Oracle Corporation)
Toolbar: HKLM - PDF Architect 4 Toolbar - {23FD9C33-A9E1-48A1-8404-E5925CF1C8E1} - C:\Program Files\PDF Architect 4\creator-ie-plugin.dll [2016-01-15] (pdfforge GmbH)

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Tesla\Application Data\Mozilla\Firefox\Profiles\oo256zgv.default
FF NewTab: hxxp://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=hitachixhdt721016sla380_sta1l5ma1d99lb1d99lbx
FF Homepage: hxxp://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=hitachixhdt721016sla380_sta1l5ma1d99lb1d99lbx
FF Plugin: @adobe.com/AuthorwarePlayer -> C:\WINDOWS\system32\Macromed\AUTHORWA\np32asw.dll [2004-07-02] (Macromedia, Inc.)
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_18_0_0_209.dll [2016-01-20] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\WINDOWS\system32\Adobe\Director\np32dsw_1219160.dll [2015-07-23] (Adobe Systems, Inc.)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.71.2 -> C:\Program Files\Java\jre1.8.0_71\bin\dtplugin\npDeployJava1.dll [2016-01-26] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.71.2 -> C:\Program Files\Java\jre1.8.0_71\bin\plugin2\npjp2.dll [2016-01-26] (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @se.nexus/Personal -> C:\Program Files\Personal\bin\np_prsnl.dll [2016-01-23] (Technology Nexus AB)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-18] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-18] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin: PDF Architect 4 -> C:\Program Files\PDF Architect 4\np-previewer.dll [2016-01-15] (pdfforge GmbH)
FF Extension: xRocket Toolbar - C:\Documents and Settings\Tesla\Application Data\Mozilla\Firefox\Profiles\oo256zgv.default\Extensions\[email protected] [2016-02-19] [not signed]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2016-01-23] [not signed]
FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension
FF Extension: PDF Architect 4 Creator - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension [2016-01-28] [not signed]
FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Documents and Settings\Tesla\Application Data\Mozilla\Firefox\Profiles\oo256zgv.default\extensions\[email protected]

Chrome:
=======
CHR HomePage: Profile 2 -> hxxp://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=hitachixhdt721016sla380_sta1l5ma1d99lb1d99lbx
CHR StartupUrls: Profile 2 -> "hxxp://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=hitachixhdt721016sla380_sta1l5ma1d99lb1d99lbx"
CHR Profile: C:\Documents and Settings\Tesla\Local Settings\Application Data\Google\Chrome\User Data\Default
CHR Profile: C:\Documents and Settings\Tesla\Local Settings\Application Data\Google\Chrome\User Data\Profile 2
CHR Extension: (Google презентације) - C:\Documents and Settings\Tesla\Local Settings\Application Data\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-02-18]
CHR Extension: (Google документи) - C:\Documents and Settings\Tesla\Local Settings\Application Data\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2016-02-18]
CHR Extension: (Google диск) - C:\Documents and Settings\Tesla\Local Settings\Application Data\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-18]
CHR Extension: (YouTube) - C:\Documents and Settings\Tesla\Local Settings\Application Data\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-18]
CHR Extension: (Google Search) - C:\Documents and Settings\Tesla\Local Settings\Application Data\Google\Chrome\User Data\Profile 2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-18]
CHR Extension: (Google табеле) - C:\Documents and Settings\Tesla\Local Settings\Application Data\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-02-18]
CHR Extension: (Google документи офлајн) - C:\Documents and Settings\Tesla\Local Settings\Application Data\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-02-18]
CHR Extension: (Плаћања у Chrome веб-продавници) - C:\Documents and Settings\Tesla\Local Settings\Application Data\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-02-18]
CHR Extension: (Gmail) - C:\Documents and Settings\Tesla\Local Settings\Application Data\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-02-18]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [237096 2016-02-10] (AVAST Software)
S2 iSafeService; C:\Program Files\Elex-tech\YAC\iSafeSvc.exe [118048 2015-04-16] (Elex do Brasil Participações Ltda)
R2 PassThru Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] () [File not signed]
S3 PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2220768 2016-01-15] (pdfforge GmbH)
R2 PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [772832 2016-01-15] (pdfforge GmbH)
R2 PDF Architect 4 Manager; C:\Documents and Settings\All Users\Application Data\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe [959248 2015-10-05] (© pdfforge GmbH.)
S4 UNS; C:\Program Files\Common Files\Intel\Privacy Icon\UNS\UNS.exe [2054680 2008-07-21] (Intel Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative)
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [32792 2016-02-10] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [91168 2016-02-10] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [64272 2016-02-10] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [58776 2016-02-10] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [812720 2016-02-10] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [447848 2016-02-10] (AVAST Software)
R3 aswStmXP; C:\WINDOWS\system32\drivers\aswStmXP.sys [171608 2016-02-10] (AVAST Software)
S3 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [67088 2016-02-10] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [221240 2016-02-10] (AVAST Software)
S3 atmeltpm; C:\WINDOWS\System32\DRIVERS\atmeltpm.sys [15360 2011-08-05] (Atmel, Inc.)
S2 DgiVecp; C:\WINDOWS\System32\Drivers\DgiVecp.sys [41984 2004-05-17] (DeviceGuys, Inc.) [File not signed]
R3 e1kexpress; C:\WINDOWS\System32\DRIVERS\e1k5132.sys [237224 2012-02-02] (Intel Corporation)
R3 GemCCID; C:\WINDOWS\System32\DRIVERS\GemCCID.sys [99968 2014-10-28] (Gemalto)
R3 int0800; C:\WINDOWS\System32\DRIVERS\flashud.sys [42496 2009-09-09] (Intel Corporation) [File not signed]
R1 iSafeKrnl; C:\Program Files\Elex-tech\YAC\iSafeKrnl.sys [225896 2015-05-14] (Elex do Brasil Participações Ltda)
S3 iSafeKrnlBoot; C:\WINDOWS\System32\DRIVERS\iSafeKrnlBoot.sys [48784 2015-04-16] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlMon; C:\Program Files\Elex-tech\YAC\iSafeKrnlMon.sys [52712 2015-08-20] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlR3; C:\Program Files\Elex-tech\YAC\iSafeKrnlR3.sys [73232 2015-11-27] (Elex do Brasil Participações Ltda)
R1 iSafeNetFilter; C:\WINDOWS\System32\DRIVERS\iSafeNetFilter.sys [67288 2015-09-10] (Elex do Brasil Participações Ltda)
S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.)
R3 tpm; C:\WINDOWS\System32\DRIVERS\tpm.sys [13824 2008-06-19] (Intel Corporation) [File not signed]
R3 vscombus; C:\WINDOWS\System32\DRIVERS\vsc2k.sys [155712 2009-01-07] (Vision Systems GmbH) [File not signed]
R3 vspcipar; C:\WINDOWS\System32\DRIVERS\vsp2k.sys [48128 2007-06-21] (Vision Systems GmbH)
U2 CertPropSvc; no ImagePath
S4 IntelIde; no ImagePath
S1 iSafeKrnlKit; no ImagePath
S3 MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [X]
U1 WS2IFSL; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-02-22 12:38 - 2016-02-22 12:38 - 00000000 ____D C:\FRST
2016-02-19 14:46 - 2016-02-19 14:46 - 00000923 _____ C:\Documents and Settings\Tesla\Desktop\Revo Uninstaller.lnk
2016-02-19 14:46 - 2016-02-19 14:46 - 00000000 ____D C:\Program Files\VS Revo Group
2016-02-19 14:46 - 2016-02-19 14:46 - 00000000 ____D C:\Documents and Settings\Tesla\Start Menu\Programs\Revo Uninstaller
2016-02-19 12:32 - 2016-02-19 12:32 - 00000664 _____ C:\WINDOWS\system32\d3d9caps.dat
2016-02-19 11:29 - 2016-02-19 11:29 - 00001561 _____ C:\Documents and Settings\All Users\Desktop\YAC.lnk
2016-02-19 11:29 - 2016-02-19 11:29 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\YAC
2016-02-19 11:29 - 2015-09-10 02:57 - 00067288 _____ (Elex do Brasil Participações Ltda) C:\WINDOWS\system32\Drivers\iSafeNetFilter.sys
2016-02-19 11:29 - 2015-04-16 09:55 - 00048784 _____ (Elex do Brasil Participações Ltda) C:\WINDOWS\system32\Drivers\iSafeKrnlBoot.sys
2016-02-19 11:28 - 2016-02-19 11:28 - 00000000 ____D C:\Program Files\Elex-tech
2016-02-19 11:28 - 2016-02-19 11:28 - 00000000 ____D C:\Documents and Settings\Tesla\Application Data\Elex-tech
2016-02-19 10:31 - 2016-02-19 10:31 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Malwarebytes
2016-02-19 10:10 - 2016-02-22 07:33 - 00000354 _____ C:\WINDOWS\Tasks\Chrome Cleanup Tool logs upload retry.job
2016-02-18 15:40 - 2016-02-18 15:53 - 00000000 ____D C:\AdwCleaner
2016-02-18 15:00 - 2016-02-22 08:02 - 00001827 _____ C:\Documents and Settings\All Users\Start Menu\Programs\Google Chrome.lnk
2016-02-18 15:00 - 2016-02-22 08:02 - 00001821 _____ C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk
2016-02-18 14:56 - 2016-02-22 12:01 - 00000884 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-02-18 14:56 - 2016-02-22 07:27 - 00000880 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-02-18 14:34 - 2016-02-18 14:34 - 00290304 _____ (Microsoft Corporation) C:\WINDOWS\system32\subinacl.exe
2016-02-18 14:34 - 2016-02-18 14:34 - 00000000 ____D C:\Program Files\Adware Removal Tool by TSA
2016-02-18 13:33 - 2016-02-20 13:37 - 00000008 __RSH C:\Documents and Settings\All Users\ntuser.pol
2016-02-18 13:33 - 2016-02-18 13:33 - 00000008 __RSH C:\Documents and Settings\Tesla\ntuser.pol
2016-02-17 12:56 - 2016-02-17 12:56 - 00000000 ____D C:\WINDOWS\system32\CatRoot_bak
2016-02-17 12:42 - 2016-02-17 12:42 - 00651600 _____ C:\Documents and Settings\Tesla\Desktop\Picasa.pdf
2016-02-17 08:28 - 2016-02-17 08:28 - 00000000 ____D C:\WINDOWS\system32\appmgmt
2016-02-16 15:33 - 2016-02-18 13:35 - 00000000 ____D C:\Documents and Settings\Tesla\Application Data\Skype
2016-02-15 13:47 - 2016-02-16 10:51 - 00000000 ____D C:\Documents and Settings\Tesla\Desktop\PDV2016
2016-02-11 12:48 - 2016-02-18 13:29 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Skype
2016-02-10 14:46 - 2016-02-10 14:46 - 00064916 _____ C:\Documents and Settings\Tesla\Desktop\015 Predracun za APA za butan, deterdzent 10.02.2016..pdf
2016-02-10 14:30 - 2016-02-10 14:30 - 00334280 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2016-02-10 14:30 - 2016-02-10 14:30 - 00052184 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2016-02-10 12:58 - 2016-02-10 12:58 - 00065963 _____ C:\Documents and Settings\Tesla\Desktop\014 Predracun za APA za ubruse, pasta 10.02.2016..pdf
2016-02-04 09:58 - 2016-02-04 09:58 - 00000000 ____D C:\Documents and Settings\Tesla\Local Settings\Application Data\IsolatedStorage
2016-02-04 09:54 - 2016-02-04 09:54 - 00000000 ____D C:\Documents and Settings\Tesla\Local Settings\Application Data\A.E.T. Europe B.V
2016-02-04 09:53 - 2016-02-04 09:53 - 00000000 ____D C:\Program Files\A.E.T. Europe B.V
2016-02-04 09:53 - 2016-02-04 09:53 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\SafeSign Standard
2016-02-04 09:53 - 2016-02-04 09:53 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\A.E.T. Europe B.V
2016-01-29 11:50 - 2016-01-29 11:50 - 00000000 ____D C:\Documents and Settings\Tesla\Application Data\PDF Producer
2016-01-28 12:48 - 2016-01-29 11:36 - 00000000 ____D C:\Documents and Settings\Tesla\Local Settings\Application Data\PDFCreator
2016-01-28 12:48 - 2016-01-28 12:48 - 00000676 _____ C:\Documents and Settings\All Users\Desktop\PDF Architect 4.lnk
2016-01-28 12:47 - 2016-01-28 12:49 - 00000000 ____D C:\Documents and Settings\Tesla\Application Data\PDF Architect 4
2016-01-28 12:47 - 2016-01-28 12:47 - 00101256 _____ (pdfforge GmbH) C:\WINDOWS\system32\pdfcmon.dll
2016-01-28 12:47 - 2016-01-28 12:47 - 00000712 _____ C:\Documents and Settings\All Users\Desktop\PDFCreator.lnk
2016-01-28 12:47 - 2016-01-28 12:47 - 00000000 ____D C:\Program Files\PDF Architect 4
2016-01-28 12:47 - 2016-01-28 12:47 - 00000000 ____D C:\Program Files\Common Files\PDF Software
2016-01-28 12:47 - 2016-01-28 12:47 - 00000000 ____D C:\Documents and Settings\Tesla\My Documents\PDF Architect
2016-01-28 12:47 - 2016-01-28 12:47 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\PDFCreator
2016-01-28 12:47 - 2016-01-28 12:47 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\PDF Architect 4
2016-01-28 12:46 - 2016-01-28 12:48 - 00000000 ____D C:\Program Files\PDFCreator
2016-01-27 14:05 - 2016-01-27 14:05 - 00000000 ____D C:\Documents and Settings\Tesla\Local Settings\Application Data\Help
2016-01-27 14:05 - 2016-01-27 14:05 - 00000000 ____D C:\Documents and Settings\Tesla\Application Data\Help
2016-01-27 13:43 - 2016-01-27 13:43 - 00000000 ____D C:\Documents and Settings\Tesla\Local Settings\Application Data\PCHealth
2016-01-27 13:37 - 2016-02-05 20:00 - 00426268 _____ C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-1177238915-651377827-1801674531-1003-0.dat
2016-01-27 13:37 - 2016-02-05 20:00 - 00190950 _____ C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-System.dat
2016-01-27 11:56 - 2016-01-27 11:56 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\pdfforge
2016-01-27 11:54 - 2016-01-28 12:49 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\PDF Architect 4
2016-01-26 14:41 - 2009-01-07 00:03 - 00155712 _____ (Vision Systems GmbH) C:\WINDOWS\system32\Drivers\vsc2k.sys
2016-01-26 14:41 - 2009-01-07 00:03 - 00069632 _____ (Vision Systems GmbH) C:\WINDOWS\system32\vsc2kui.dll
2016-01-26 14:39 - 2016-01-26 14:39 - 00000000 ____D C:\Program Files\Common Files\Java
2016-01-26 14:37 - 2004-12-09 16:49 - 00045056 ____N C:\WINDOWS\system32\scanx.dll
2016-01-26 14:36 - 2016-01-26 14:37 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Samsung MFP 750 Series
2016-01-26 14:36 - 2016-01-26 14:36 - 00000000 ____D C:\WINDOWS\Samsung
2016-01-26 14:36 - 2004-05-17 22:04 - 00041984 ____N (DeviceGuys, Inc.) C:\WINDOWS\system32\Drivers\DGIVECP.SYS
2016-01-26 14:36 - 2003-11-17 20:24 - 00208896 ____N (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\SSRemove.exe
2016-01-26 12:41 - 2016-01-26 12:41 - 00000476 _____ C:\Documents and Settings\Tesla\Desktop\Prečica do PREDRACUNI I PONUDE.lnk
2016-01-26 10:24 - 2016-01-26 10:24 - 01453056 _____ C:\Documents and Settings\Tesla\Desktop\cenovnik_08.05.2014..xls
2016-01-26 08:52 - 2016-01-26 08:52 - 00000765 _____ C:\Documents and Settings\All Users\Desktop\Picasa 3.lnk
2016-01-26 08:51 - 2016-01-26 08:51 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Picasa 3
2016-01-26 08:28 - 2016-02-15 13:49 - 00000000 ____D C:\Documents and Settings\Tesla\Desktop\PDV 2015
2016-01-26 08:28 - 2016-01-27 13:27 - 00000000 ____D C:\Documents and Settings\Tesla\Desktop\PDV 01-07.2015
2016-01-26 08:28 - 2016-01-26 08:28 - 00000000 ____D C:\Documents and Settings\Tesla\Desktop\PDV 2014
2016-01-26 08:28 - 2016-01-26 08:28 - 00000000 ____D C:\Documents and Settings\Tesla\Desktop\PDV
2016-01-25 13:04 - 2016-01-25 13:04 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_ANDROIDUSB_01007.Wdf
2016-01-25 13:03 - 2016-01-25 13:03 - 00000000 ____D C:\Temp
2016-01-25 13:03 - 2016-01-25 13:03 - 00000000 ____D C:\Program Files\HTC
2016-01-25 13:03 - 2009-06-10 08:49 - 00024576 _____ (HTC, Corporation) C:\WINDOWS\system32\Drivers\ANDROIDUSB.sys
2016-01-25 13:03 - 2009-06-09 06:41 - 01122664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01007.dll
2016-01-25 08:33 - 2016-01-25 08:33 - 00000000 ____D C:\Documents and Settings\Tesla\Application Data\Macromedia
2016-01-25 07:43 - 2008-04-14 05:42 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ptpusd.dll
2016-01-25 07:43 - 2008-04-14 00:15 - 00032128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbccgp.sys
2016-01-25 07:43 - 2008-04-14 00:15 - 00032128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2016-01-25 07:43 - 2008-04-14 00:15 - 00015104 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbscan.sys
2016-01-25 07:43 - 2008-04-14 00:15 - 00015104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbscan.sys
2016-01-25 07:43 - 2001-08-17 22:36 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ptpusb.dll
2016-01-23 15:27 - 2016-01-23 15:32 - 00000760 _____ C:\Documents and Settings\Tesla\Desktop\DOSPrinter.lnk
2016-01-23 15:26 - 2016-02-22 11:29 - 00000000 ____D C:\Program Files\DOSPrinter
2016-01-23 15:20 - 2016-02-04 09:53 - 00000000 ____D C:\Documents and Settings\Tesla\Application Data\Pexim Solutions
2016-01-23 15:20 - 2016-01-23 15:20 - 00000221 _____ C:\Documents and Settings\All Users\Application Data\Microsoft.SqlServer.Compact.351.32.bc
2016-01-23 15:15 - 2016-01-23 15:15 - 00000354 _____ C:\Documents and Settings\Tesla\Desktop\OfficeBanking Desktop.appref-ms
2016-01-23 15:15 - 2016-01-23 15:15 - 00000000 ____D C:\Documents and Settings\Tesla\Start Menu\Programs\Asseco SEE
2016-01-23 15:14 - 2016-02-08 10:26 - 00000000 ____D C:\Documents and Settings\Tesla\Local Settings\Application Data\Deployment
2016-01-23 15:10 - 2016-01-26 14:33 - 00000000 ___RD C:\Documents and Settings\All Users\Start Menu\Programs\Samsung Printers
2016-01-23 15:10 - 2016-01-26 14:33 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Samsung
2016-01-23 15:09 - 2012-05-25 09:26 - 01558432 ____N C:\WINDOWS\TotalUninstaller.exe
2016-01-23 15:09 - 2012-04-06 00:46 - 00310272 _____ C:\WINDOWS\system32\UPDIO2.dll
2016-01-23 15:09 - 2012-04-06 00:46 - 00254464 _____ C:\WINDOWS\system32\SUPDRun.exe
2016-01-23 15:09 - 2012-04-06 00:45 - 00135168 _____ (Samsung Electronics) C:\WINDOWS\system32\SUPDSvcA2.dll
2016-01-23 15:09 - 2012-04-06 00:45 - 00129536 _____ (Samsung Electronics) C:\WINDOWS\system32\SUPDSvc2.exe
2016-01-23 15:09 - 2011-04-11 06:26 - 00024064 _____ () C:\WINDOWS\system32\spd__l.dll
2016-01-23 15:09 - 2010-10-20 09:49 - 00065536 _____ (SS) C:\WINDOWS\system32\spd__ci.dll
2016-01-23 15:09 - 2010-05-11 06:28 - 00151552 _____ C:\WINDOWS\system32\spd__ci.exe
2016-01-23 15:09 - 2010-02-11 07:45 - 00000363 _____ C:\WINDOWS\system32\spd__l.smt
2016-01-23 15:09 - 2009-03-12 02:54 - 01724416 ____N (Microsoft Corporation) C:\WINDOWS\gdiplus.dll
2016-01-23 14:55 - 2016-01-23 15:10 - 00002267 _____ C:\Documents and Settings\All Users\Desktop\CitacSaobracajne.lnk
2016-01-23 14:55 - 2016-01-23 14:55 - 00000000 ____D C:\MUPRS
2016-01-23 14:50 - 2016-01-23 14:52 - 00000000 ____D C:\Documents and Settings\Tesla\Application Data\Personal
2016-01-23 14:49 - 2016-01-23 14:49 - 00001754 _____ C:\Documents and Settings\All Users\Desktop\Personal E-Bank.lnk
2016-01-23 14:49 - 2016-01-23 14:49 - 00000310 _____ C:\WINDOWS\ODBC.INI
2016-01-23 14:49 - 2016-01-23 14:49 - 00000000 ____D C:\Program Files\Personal
2016-01-23 14:49 - 2016-01-23 14:49 - 00000000 ____D C:\Program Files\MSECache
2016-01-23 14:49 - 2016-01-23 14:49 - 00000000 ____D C:\Program Files\Microsoft Office
2016-01-23 14:49 - 2016-01-23 14:49 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Personal
2016-01-23 14:49 - 2016-01-23 14:49 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Hal E-bank
2016-01-23 14:49 - 1998-06-18 01:00 - 00089360 _____ (Microsoft Corporation) C:\WINDOWS\system32\VB5DB.DLL
2016-01-23 14:48 - 2016-01-26 14:37 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2016-01-23 14:48 - 2016-01-23 14:48 - 00000000 ____D C:\Program Files\Halcom
2016-01-23 14:46 - 2016-01-23 14:46 - 00084704 _____ C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2016-01-23 14:46 - 2016-01-23 14:46 - 00000811 _____ C:\Documents and Settings\Tesla\Desktop\Čitač elektronske lične karte.lnk
2016-01-23 14:46 - 2016-01-23 14:46 - 00000000 __HDC C:\WINDOWS\$NtUninstallbasecsp$
2016-01-23 14:46 - 2016-01-23 14:46 - 00000000 ____D C:\WINDOWS\system32\XPSViewer
2016-01-23 14:46 - 2016-01-23 14:46 - 00000000 ____D C:\Program Files\Reference Assemblies
2016-01-23 14:46 - 2016-01-23 14:46 - 00000000 ____D C:\Program Files\MSBuild
2016-01-23 14:45 - 2008-07-06 13:06 - 01676288 ____N (Microsoft Corporation) C:\WINDOWS\system32\xpssvcs.dll
2016-01-23 14:45 - 2008-07-06 13:06 - 01676288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpssvcs.dll
2016-01-23 14:45 - 2008-07-06 13:06 - 00575488 ____N (Microsoft Corporation) C:\WINDOWS\system32\xpsshhdr.dll
2016-01-23 14:45 - 2008-07-06 13:06 - 00575488 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpsshhdr.dll
2016-01-23 14:45 - 2008-07-06 13:06 - 00117760 ____N (Microsoft Corporation) C:\WINDOWS\system32\prntvpt.dll
2016-01-23 14:45 - 2008-07-06 13:06 - 00089088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\filterpipelineprintproc.dll
2016-01-23 14:45 - 2008-07-06 11:50 - 00597504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\printfilterpipelinesvc.exe
2016-01-23 14:45 - 2007-11-30 13:39 - 00017272 ____N (Microsoft Corporation) C:\WINDOWS\system32\spmsg.dll
2016-01-23 14:44 - 2016-01-23 14:44 - 00000000 ____D C:\Program Files\MUP RS
2016-01-23 14:44 - 2016-01-23 14:44 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\MUP RS
2016-01-23 14:39 - 2016-01-23 14:39 - 00000000 ____D C:\Program Files\Gemalto
2016-01-23 14:39 - 2014-10-28 15:56 - 00099968 _____ (Gemalto) C:\WINDOWS\system32\Drivers\GemCCID.sys
2016-01-23 14:32 - 2008-04-14 00:17 - 00025856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbprint.sys
2016-01-23 14:32 - 2008-04-14 00:17 - 00025856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbprint.sys
2016-01-23 13:55 - 2016-01-23 13:56 - 00000000 ____D C:\Documents and Settings\Tesla\My Documents\radnja
2016-01-23 13:55 - 2016-01-23 13:55 - 00000000 ____D C:\Documents and Settings\Tesla\My Documents\pretvaraci
2016-01-23 13:54 - 2016-01-23 13:55 - 00000000 ____D C:\Documents and Settings\Tesla\My Documents\PREDRACUNI I PONUDE
2016-01-23 13:54 - 2016-01-23 13:54 - 00000000 ____D C:\Documents and Settings\Tesla\My Documents\plafonjere lumen
2016-01-23 13:49 - 2016-01-23 13:49 - 00000000 ____D C:\Documents and Settings\Tesla\My Documents\Libela Kraljevo
2016-01-23 13:48 - 2015-07-15 13:49 - 00015396 _____ C:\Documents and Settings\Tesla\My Documents\Odluka-blagajnicki maksimum 2007.odt
2016-01-23 13:48 - 2015-07-10 11:50 - 00014356 _____ C:\Documents and Settings\Tesla\My Documents\rdno vreme.odt
2016-01-23 13:48 - 2015-05-12 09:11 - 00067140 _____ C:\Documents and Settings\Tesla\My Documents\Ugovor o radu - Natasa Jakovljević.pdf
2016-01-23 13:48 - 2015-05-12 09:07 - 00632774 _____ C:\Documents and Settings\Tesla\My Documents\radna knjizica natasa.pdf
2016-01-23 13:48 - 2015-05-12 07:52 - 00026125 _____ C:\Documents and Settings\Tesla\My Documents\Podaci iz lične karte osobe_ NATAŠA KALINIĆ.pdf
2016-01-23 13:48 - 2015-05-08 09:22 - 00194287 _____ C:\Documents and Settings\Tesla\My Documents\Trojna-kompenzacija.pdf
2016-01-23 13:48 - 2015-04-06 12:22 - 00020560 _____ C:\Documents and Settings\Tesla\My Documents\Ugovor o zakupu.odt
2016-01-23 13:48 - 2015-03-19 10:27 - 00012811 _____ C:\Documents and Settings\Tesla\My Documents\Zahtev za  otpis DV LPA.odt
2016-01-23 13:48 - 2015-02-05 11:08 - 00016902 _____ C:\Documents and Settings\Tesla\My Documents\Odluka o licu za bezbednost.odt
2016-01-23 13:48 - 2015-02-03 13:04 - 00030913 _____ C:\Documents and Settings\Tesla\My Documents\Obrazac_6_-_Evidencija_o_zaposlenima_osposobljenim_za_bezbedan_i_zdrav_rad.pdf
2016-01-23 13:48 - 2014-09-19 09:00 - 00024355 _____ C:\Documents and Settings\Tesla\My Documents\Zahtev za uverenje, lokalni jav.prihodi.odt
2016-01-23 13:48 - 2014-09-09 08:55 - 00000891 _____ C:\Documents and Settings\Tesla\My Documents\PDFCreator_ErrorLog.txt
2016-01-23 13:48 - 2014-08-25 09:58 - 00019379 _____ C:\Documents and Settings\Tesla\My Documents\Odluka-tehnoloski visak.odt
2016-01-23 13:48 - 2014-06-25 06:56 - 00021811 _____ C:\Documents and Settings\Tesla\My Documents\ovlascenje registracija.odt
2016-01-23 13:48 - 2014-06-23 11:07 - 00012619 _____ C:\Documents and Settings\Tesla\My Documents\odluka o razvrstavanju.odt
2016-01-23 13:48 - 2014-04-22 10:16 - 00022571 _____ C:\Documents and Settings\Tesla\My Documents\potvrda revizoru.odt
2016-01-23 13:48 - 2014-03-21 13:37 - 00025529 _____ C:\Documents and Settings\Tesla\My Documents\PROSEK PLATE- Stevan 2014.odt
2016-01-23 13:48 - 2014-02-05 10:57 - 00024499 _____ C:\Documents and Settings\Tesla\My Documents\izjava poreskoj upr.Apatin.odt
2016-01-23 13:48 - 2014-01-15 13:49 - 17309696 _____ C:\Documents and Settings\Tesla\My Documents\presek za qa14 stari na novi.mdb
2016-01-23 13:48 - 2013-12-25 13:58 - 00023373 _____ C:\Documents and Settings\Tesla\My Documents\Dopis Biljemerkant.odt
2016-01-23 13:48 - 2013-11-13 11:21 - 00026785 _____ C:\Documents and Settings\Tesla\My Documents\DUZNICI KOJI SE FINANSIRAJU IZ BUDZETA 2013.odt
2016-01-23 13:48 - 2013-07-13 12:59 - 00027081 _____ C:\Documents and Settings\Tesla\My Documents\potvrda Lederflex.odt
2016-01-23 13:48 - 2013-07-03 13:09 - 01046614 _____ C:\Documents and Settings\Tesla\My Documents\put.pdf
2016-01-23 13:48 - 2013-05-21 19:11 - 00019843 _____ C:\Documents and Settings\Tesla\My Documents\memorandum 2.odt
2016-01-23 13:48 - 2013-05-21 19:06 - 00020546 _____ C:\Documents and Settings\Tesla\My Documents\memorandum.odt
2016-01-23 13:48 - 2013-05-16 11:57 - 00024402 _____ C:\Documents and Settings\Tesla\My Documents\Zahtev za uverenje, Prekrsajni sud.odt
2016-01-23 13:48 - 2013-04-26 11:01 - 00024579 _____ C:\Documents and Settings\Tesla\My Documents\pio izjava.odt
2016-01-23 13:48 - 2012-10-23 07:26 - 00020888 _____ C:\Documents and Settings\Tesla\My Documents\Banca Intesa-potvrda o statutu.odt
2016-01-23 13:48 - 2012-10-23 07:24 - 00020744 _____ C:\Documents and Settings\Tesla\My Documents\Banca Intesa-potvrda za izvod APR.odt
2016-01-23 13:48 - 2012-10-23 07:24 - 00020455 _____ C:\Documents and Settings\Tesla\My Documents\Banca Intesa-potvrda o verodostojnosti pecata.odt
2016-01-23 13:48 - 2012-09-03 08:39 - 00023731 _____ C:\Documents and Settings\Tesla\My Documents\Zahtev za potvrdu, Prinudna naplata.odt
2016-01-23 13:48 - 2012-08-13 11:14 - 00014037 _____ C:\Documents and Settings\Tesla\My Documents\potvrda o izvrsenom ugovoru o asignaciji.odt
2016-01-23 13:48 - 2012-06-30 08:39 - 00018896 _____ C:\Documents and Settings\Tesla\My Documents\ZAHTEV ZA IZDAVANJE MARKICA RZZO.odt
2016-01-23 13:48 - 2012-03-19 12:17 - 00331761 _____ C:\Documents and Settings\Tesla\My Documents\skica ventila.pdf
2016-01-23 13:48 - 2012-01-18 12:36 - 00022605 _____ C:\Documents and Settings\Tesla\My Documents\OTPIS OSNOVNIH SREDSTAVA 2011.odt
2016-01-23 13:48 - 2012-01-16 09:53 - 00023832 _____ C:\Documents and Settings\Tesla\My Documents\PROSEK PLATE-jovo 10.odt
2016-01-23 13:48 - 2011-07-07 07:50 - 00026112 _____ C:\Documents and Settings\Tesla\My Documents\Telenor analiza novemar - juni.xls
2016-01-23 13:48 - 2011-07-07 07:49 - 00083813 _____ C:\Documents and Settings\Tesla\My Documents\Telenor analiza novemar-juni.pdf
2016-01-23 13:48 - 2011-06-24 12:30 - 00020193 _____ C:\Documents and Settings\Tesla\My Documents\potvrda o ostvarenom prometu-tenderi.odt
2016-01-23 13:48 - 2011-03-30 08:24 - 00011402 _____ C:\Documents and Settings\Tesla\My Documents\punomoc kanada.odt
2016-01-23 13:48 - 2011-03-19 13:18 - 00020505 _____ C:\Documents and Settings\Tesla\My Documents\Zahtev Banca Intesa.odt
2016-01-23 13:48 - 2011-01-14 09:07 - 00014839 _____ C:\Documents and Settings\Tesla\My Documents\resenje o prekidu radnog odnosa ćopić.odt
2016-01-23 13:48 - 2011-01-12 11:51 - 00017737 _____ C:\Documents and Settings\Tesla\My Documents\Zapisnik o pogresnom PDV.odt
2016-01-23 13:48 - 2010-09-28 12:28 - 00017238 _____ C:\Documents and Settings\Tesla\My Documents\potvrda o stalnom zaposlenju.odt
2016-01-23 13:48 - 2010-07-29 10:44 - 00013902 _____ C:\Documents and Settings\Tesla\My Documents\založna izjava.odt
2016-01-23 13:48 - 2010-07-05 12:14 - 00017607 _____ C:\Documents and Settings\Tesla\My Documents\račun za Continental ban. 2010- JOVANKA.odt
2016-01-23 13:48 - 2010-06-18 12:29 - 00013457 _____ C:\Documents and Settings\Tesla\My Documents\PODACI ZA EVIDENTIRANJE POSLOVNIH PARTNERA.odt
2016-01-23 13:48 - 2010-06-14 18:07 - 00013003 _____ C:\Documents and Settings\Tesla\My Documents\ovlascenje sud.odt
2016-01-23 13:48 - 2010-05-07 12:01 - 00020102 _____ C:\Documents and Settings\Tesla\My Documents\ZAHTEV ZA PONUDU POSLOVNOST MZ.odt
2016-01-23 13:48 - 2010-04-16 09:45 - 00015208 _____ C:\Documents and Settings\Tesla\My Documents\PRAVILNIK O SISTEMATIZACIJI RM.odt
2016-01-23 13:48 - 2010-04-16 09:30 - 00029243 _____ C:\Documents and Settings\Tesla\My Documents\pravilnik o bezbednosti.odt
2016-01-23 13:48 - 2010-03-29 11:09 - 00020782 _____ C:\Documents and Settings\Tesla\My Documents\potvrda O PROMETU TR.odt
2016-01-23 13:48 - 2010-02-01 12:28 - 00014957 _____ C:\Documents and Settings\Tesla\My Documents\račun za Continental ban. 2010.odt
2016-01-23 13:48 - 2010-01-27 09:54 - 00022807 _____ C:\Documents and Settings\Tesla\My Documents\PROSEK PLATE-jovo 07.odt
2016-01-23 13:48 - 2009-11-14 10:46 - 00022057 _____ C:\Documents and Settings\Tesla\My Documents\PONUDA ZA NAPREDAK ZA KISNA ODELA.odt
2016-01-23 13:48 - 2009-09-03 08:32 - 00019490 _____ C:\Documents and Settings\Tesla\My Documents\ponuda za APA.odt
2016-01-23 13:48 - 2009-08-27 10:34 - 00021873 _____ C:\Documents and Settings\Tesla\My Documents\potvrda O solventnosti.odt
2016-01-23 13:48 - 2009-06-22 16:33 - 00020423 _____ C:\Documents and Settings\Tesla\My Documents\UGOVOR O RADU NOVI.odt
2016-01-23 13:48 - 2009-04-24 14:09 - 00019811 _____ C:\Documents and Settings\Tesla\My Documents\potvrda O PROMETu intesa.odt
2016-01-23 13:48 - 2009-02-24 11:46 - 00016356 _____ C:\Documents and Settings\Tesla\My Documents\Odluka o promeni pecata.odt
2016-01-23 13:48 - 2009-01-14 12:10 - 00017310 _____ C:\Documents and Settings\Tesla\My Documents\dragan-povrda.odt
2016-01-23 13:48 - 2008-12-27 11:17 - 00018803 _____ C:\Documents and Settings\Tesla\My Documents\ugovor o preuz.duga GRMEC.odt
2016-01-23 13:48 - 2008-12-12 09:52 - 00015259 _____ C:\Documents and Settings\Tesla\My Documents\Ugovor o asignaciji tesla sombor.odt
2016-01-23 13:48 - 2008-09-19 10:59 - 00014505 _____ C:\Documents and Settings\Tesla\My Documents\PONUDA SMILJANIC.odt
2016-01-23 13:48 - 2008-07-07 12:44 - 00025266 _____ C:\Documents and Settings\Tesla\My Documents\tehnicka op.-tenderi.odt
2016-01-23 13:48 - 2008-06-10 11:56 - 00015910 _____ C:\Documents and Settings\Tesla\My Documents\odluka o direktoru.odt
2016-01-23 13:48 - 2008-05-29 08:44 - 00015179 _____ C:\Documents and Settings\Tesla\My Documents\urgencija trgovinskom sudu.odt
2016-01-23 13:48 - 2008-01-29 11:29 - 00009587 _____ C:\Documents and Settings\Tesla\My Documents\ZAPISNIK AUTO VRBAS.odt
2016-01-23 13:48 - 2008-01-24 12:23 - 00011022 _____ C:\Documents and Settings\Tesla\My Documents\ANEKS UG.O RADU 2007.odt
2016-01-23 13:48 - 2008-01-23 12:27 - 00011947 _____ C:\Documents and Settings\Tesla\My Documents\DUNAV AD.odt
2016-01-23 13:48 - 2008-01-19 13:38 - 00011783 _____ C:\Documents and Settings\Tesla\My Documents\yapisnik o otp.osn.sredstava.odt
2016-01-23 13:48 - 2007-04-07 19:35 - 00020508 _____ C:\Documents and Settings\Tesla\My Documents\zapisnik o steti.odt
2016-01-23 13:48 - 2007-03-01 10:59 - 00013969 _____ C:\Documents and Settings\Tesla\My Documents\UGOVOR O POVREM.I PRIVR.RADU
2016-01-23 13:48 - 2007-02-27 11:31 - 00012108 _____ C:\Documents and Settings\Tesla\My Documents\resenje o isplati otpremnine.odt
2016-01-23 13:48 - 2007-02-20 19:44 - 00014349 _____ C:\Documents and Settings\Tesla\My Documents\otkaz ugovora o radu.odt
2016-01-23 13:48 - 2007-02-20 18:38 - 00014193 _____ C:\Documents and Settings\Tesla\My Documents\UGOVOR O RADU  2007.odt
2016-01-23 13:48 - 2007-01-13 11:17 - 00013251 _____ C:\Documents and Settings\Tesla\My Documents\odluka o kalu rasturu lomu 2007.odt
2016-01-23 13:48 - 2006-11-16 09:10 - 00111913 _____ C:\Documents and Settings\Tesla\My Documents\PODACI ZA PROMENU.pdf
2016-01-23 13:48 - 2006-02-22 11:07 - 00091764 _____ C:\Documents and Settings\Tesla\My Documents\PDP.pdf
2016-01-23 13:43 - 2006-08-29 13:25 - 02855080 _____ C:\Documents and Settings\Tesla\My Documents\aawsepersonal.exe
2016-01-23 13:42 - 2012-06-18 08:07 - 00018219 _____ C:\Documents and Settings\Tesla\My Documents\trgovinski sud uverenje
2016-01-23 13:42 - 2010-11-02 19:54 - 00010399 _____ C:\Documents and Settings\Tesla\My Documents\uknjižba hipoteke
2016-01-23 13:42 - 2010-09-08 18:57 - 00018600 _____ C:\Documents and Settings\Tesla\My Documents\PRIJAVA POTRAZIVANJA FISH APETIT
2016-01-23 13:42 - 2008-02-09 09:00 - 00011577 _____ C:\Documents and Settings\Tesla\My Documents\ugovor sa aquticom
2016-01-23 13:42 - 2007-11-20 09:13 - 00010400 _____ C:\Documents and Settings\Tesla\My Documents\procena rizika
2016-01-23 13:42 - 2007-07-04 09:34 - 00011383 _____ C:\Documents and Settings\Tesla\My Documents\Ugovor o asignaciji CESMA
2016-01-23 13:42 - 2007-03-22 14:21 - 00011029 _____ C:\Documents and Settings\Tesla\My Documents\ugovor o kupoprodaji
2016-01-23 13:39 - 2016-01-23 14:39 - 00000650 _____ C:\Documents and Settings\Tesla\Desktop\AB Soft.lnk
2016-01-23 13:39 - 2013-12-31 15:50 - 00000690 _____ C:\Documents and Settings\Tesla\Desktop\Prečica do ver2.lnk
2016-01-23 13:38 - 2016-02-11 09:58 - 00000000 ____D C:\Documents and Settings\Tesla\Desktop\TUZBE
2016-01-23 13:38 - 2016-02-05 10:35 - 00000000 ____D C:\Documents and Settings\Tesla\Desktop\Lične Karte
2016-01-23 13:38 - 2016-02-04 10:03 - 00000000 ____D C:\Documents and Settings\Tesla\Desktop\PODACI ZA EVIDENTIRANJE POSLOVNIH PARTNERA

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-02-22 12:39 - 2016-01-20 13:40 - 00000000 ____D C:\Documents and Settings\Tesla\Local Settings\Temp
2016-02-22 11:48 - 2016-01-21 17:03 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-02-22 07:27 - 2016-01-20 19:05 - 00000364 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2016-02-22 07:26 - 2016-01-20 13:39 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-02-22 07:26 - 2008-04-14 13:00 - 00012984 _____ C:\WINDOWS\system32\wpa.dbl
2016-02-20 13:51 - 2016-01-20 13:41 - 00000178 ___SH C:\Documents and Settings\Tesla\ntuser.ini
2016-02-20 13:51 - 2016-01-20 13:39 - 00032498 _____ C:\WINDOWS\SchedLgU.Txt
2016-02-20 13:37 - 2016-01-20 13:54 - 00000000 ____D C:\Documents and Settings\All Users
2016-02-19 14:53 - 2016-01-20 13:40 - 00000000 ____D C:\Documents and Settings\Tesla
2016-02-19 12:24 - 2016-01-20 13:54 - 00163528 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-02-19 11:29 - 2016-01-20 18:55 - 00028408 _____ C:\Documents and Settings\Tesla\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2016-02-19 11:22 - 2016-01-20 13:49 - 00000000 ____D C:\WINDOWS\Connection Wizard
2016-02-18 15:00 - 2016-01-20 18:53 - 00000000 ____D C:\Program Files\Google
2016-02-18 14:49 - 2016-01-20 13:55 - 00557860 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-02-18 14:07 - 2016-01-20 13:40 - 00000000 ___RD C:\Documents and Settings\Tesla\My Documents
2016-02-18 13:42 - 2016-01-20 18:53 - 00000578 _____ C:\Documents and Settings\Tesla\Desktop\Total Commander.lnk
2016-02-17 12:41 - 2016-01-20 13:41 - 00000000 ___RD C:\Documents and Settings\Tesla\My Documents\My Pictures
2016-02-10 14:31 - 2016-01-20 19:04 - 00221240 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys
2016-02-10 14:31 - 2016-01-20 13:49 - 00000000 ___HD C:\WINDOWS\inf
2016-02-10 14:30 - 2016-01-20 19:17 - 00171608 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStmXP.sys
2016-02-10 14:30 - 2016-01-20 19:04 - 00812720 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2016-02-10 14:30 - 2016-01-20 19:04 - 00447848 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2016-02-10 14:30 - 2016-01-20 19:04 - 00091168 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2016-02-10 14:30 - 2016-01-20 19:04 - 00067088 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2016-02-10 14:30 - 2016-01-20 19:04 - 00064272 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys
2016-02-10 14:30 - 2016-01-20 19:04 - 00058776 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2016-02-10 14:30 - 2016-01-20 19:04 - 00032792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2016-01-29 08:46 - 2016-01-20 19:00 - 00000000 ____D C:\Documents and Settings\Tesla\Local Settings\Application Data\Adobe
2016-01-29 08:44 - 2016-01-21 17:03 - 00000736 _____ C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox.lnk
2016-01-29 08:44 - 2016-01-21 17:03 - 00000730 _____ C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
2016-01-26 14:39 - 2016-01-20 19:00 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Java
2016-01-26 14:39 - 2016-01-20 18:59 - 00000000 ____D C:\Program Files\Java
2016-01-26 14:39 - 2016-01-20 18:59 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Oracle
2016-01-26 14:38 - 2016-01-20 19:00 - 00146432 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2016-01-26 14:38 - 2016-01-20 19:00 - 00095840 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2016-01-26 14:38 - 2016-01-20 19:00 - 00000000 ____D C:\Documents and Settings\Tesla\.oracle_jre_usage
2016-01-26 14:37 - 2016-01-20 13:49 - 00000000 RSHDC C:\WINDOWS\system32\dllcache
2016-01-26 14:24 - 2016-01-20 18:53 - 00000000 ____D C:\Documents and Settings\Tesla\Local Settings\Application Data\Google
2016-01-23 15:33 - 2016-01-20 13:49 - 00000000 ____D C:\WINDOWS\security
2016-01-23 14:54 - 2016-01-20 13:55 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-01-23 14:46 - 2016-01-20 13:55 - 00001374 _____ C:\WINDOWS\imsins.BAK
2016-01-23 14:45 - 2016-01-20 13:49 - 00000000 ____D C:\WINDOWS\system32\spool
2016-01-23 14:44 - 2016-01-20 13:49 - 00000000 ____D C:\WINDOWS\system32\mui
2016-01-23 14:44 - 2016-01-20 13:49 - 00000000 ____D C:\WINDOWS\pchealth
2016-01-23 13:55 - 2016-01-20 13:41 - 00000000 ___RD C:\Documents and Settings\Tesla\My Documents\My Music

==================== Files in the root of some directories =======

2016-01-23 15:20 - 2016-01-23 15:20 - 0000221 _____ () C:\Documents and Settings\All Users\Application Data\Microsoft.SqlServer.Compact.351.32.bc

Some files in TEMP:
====================
C:\Documents and Settings\Tesla\Local Settings\Temp\jre-8u71-windows-au.exe
C:\Documents and Settings\Tesla\Local Settings\Temp\NexusPersonal.exe
C:\Documents and Settings\Tesla\Local Settings\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End of FRST.txt ============================


  • 0

Advertisements


#2
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Please uninstall the following programme :

YAC(Yet Another Cleaner!)

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 

CreateRestorePoint:
HKU\S-1-5-21-1177238915-651377827-1801674531-1003\...\MountPoints2: ##Prodaja#_Servis#!Install NETPOINT 11.02.2015#Driver Solution Pack 15.8 - Z:\DriverPackSolution.exe
HKU\S-1-5-21-1177238915-651377827-1801674531-1003\...\MountPoints2: {01967eee-c32f-11e5-a40d-00199960457c} - F:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-1177238915-651377827-1801674531-1003\...\MountPoints2: {0fa400c3-bf73-11e5-a3f8-ecff27c600b6} - F:\sources\SetupError.exe x64
HKU\S-1-5-21-1177238915-651377827-1801674531-1003\...\MountPoints2: {5045fad6-c1d6-11e5-a40b-00199960457c} - sources\SetupError.exe x64
HKU\S-1-5-21-1177238915-651377827-1801674531-1003\...\MountPoints2: {5045faec-c1d6-11e5-a40b-00199960457c} - F:\setup.exe
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=hitachixhdt721016sla380_sta1l5ma1d99lb1d99lbx
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=hitachixhdt721016sla380_sta1l5ma1d99lb1d99lbx
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=hitachixhdt721016sla380_sta1l5ma1d99lb1d99lbx HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=hitachixhdt721016sla380_sta1l5ma1d99lb1d99lbx
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=hitachixhdt721016sla380_sta1l5ma1d99lb1d99lbx
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=hitachixhdt721016sla380_sta1l5ma1d99lb1d99lbx
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=hitachixhdt721016sla380_sta1l5ma1d99lb1d99lbx
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=hitachixhdt721016sla380_sta1l5ma1d99lb1d99lbx
HKU\S-1-5-21-1177238915-651377827-1801674531-1003\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=hitachixhdt721016sla380_sta1l5ma1d99lb1d99lbx
HKU\S-1-5-21-1177238915-651377827-1801674531-1003\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=hitachixhdt721016sla380_sta1l5ma1d99lb1d99lbx
URLSearchHook: [S-1-5-21-1177238915-651377827-1801674531-1003] ATTENTION => Default URLSearchHook is missing
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "" <======= ATTENTION
FF NewTab: hxxp://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=hitachixhdt721016sla380_sta1l5ma1d99lb1d99lbx
FF Homepage: hxxp://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=hitachixhdt721016sla380_sta1l5ma1d99lb1d99lbx
FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Documents and Settings\Tesla\Application Data\Mozilla\Firefox\Profiles\oo256zgv.default\extensions\[email protected]
CHR HomePage: Profile 2 -> hxxp://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=hitachixhdt721016sla380_sta1l5ma1d99lb1d99lbx
CHR StartupUrls: Profile 2 -> "hxxp://search.yac.mx/?utm_source=b&utm_medium=iSafe&from=iSafe&uid=hitachixhdt721016sla380_sta1l5ma1d99lb1d99lbx"
S2 iSafeService; C:\Program Files\Elex-tech\YAC\iSafeSvc.exe [118048 2015-04-16] (Elex do Brasil Participações Ltda)
R1 iSafeKrnl; C:\Program Files\Elex-tech\YAC\iSafeKrnl.sys [225896 2015-05-14] (Elex do Brasil Participações Ltda)
S3 iSafeKrnlBoot; C:\WINDOWS\System32\DRIVERS\iSafeKrnlBoot.sys [48784 2015-04-16] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlMon; C:\Program Files\Elex-tech\YAC\iSafeKrnlMon.sys [52712 2015-08-20] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlR3; C:\Program Files\Elex-tech\YAC\iSafeKrnlR3.sys [73232 2015-11-27] (Elex do Brasil Participações Ltda)
R1 iSafeNetFilter; C:\WINDOWS\System32\DRIVERS\iSafeNetFilter.sys [67288 2015-09-10] (Elex do Brasil Participações Ltda)
S1 iSafeKrnlKit; no ImagePath
2016-02-19 11:29 - 2016-02-19 11:29 - 00001561 _____ C:\Documents and Settings\All Users\Desktop\YAC.lnk
2016-02-19 11:29 - 2016-02-19 11:29 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\YAC
2016-02-19 11:29 - 2015-09-10 02:57 - 00067288 _____ (Elex do Brasil Participações Ltda) C:\WINDOWS\system32\Drivers\iSafeNetFilter.sys
2016-02-19 11:29 - 2015-04-16 09:55 - 00048784 _____ (Elex do Brasil Participações Ltda) C:\WINDOWS\system32\Drivers\iSafeKrnlBoot.sys
2016-02-19 11:28 - 2016-02-19 11:28 - 00000000 ____D C:\Program Files\Elex-tech
2016-02-19 11:28 - 2016-02-19 11:28 - 00000000 ____D C:\Documents and Settings\Tesla\Application Data\Elex-tech
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: ipconfig /flushdns
CMD: netsh winsock reset catalog
CMD: netsh int ip reset c:\resetlog.txt
CMD: ipconfig /release
CMD: ipconfig /renew
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
EmptyTemp:
CMD: bitsadmin /reset /allusers


Save this as fixlist.txt, in the same location as FRST.exe
FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click on Scan.
  • After the scan is complete click on "Clean"
  • Confirm each time with Ok.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the content of that logfile with your next answer.
  • You can find the logfile at C:\AdwCleaner[S0].txt as well.

  • 0

#3
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP