Премини към съдържанието

    Препоръчан отговор


    Същото нещо и при нас. Файловете в целия сървър са недостъпни. Преди около час се появи. 

    Редактирано от juslen (преглед на промените)

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Същото нещо и при нас. Файловете в целия сървър са недостъпни. Преди около час се появи. 

    Прочетете тази тема и следвайте препоръките: https://www.kaldata.com/forums/topic/132819-системата-ми-е-инфектирана-какво-да-правя-сега/

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:04-10-2015
    Ran by Malin Tsenov (administrator) on DESKTOP-BQQU233 (04-10-2015 21:36:27)
    Running from C:\Users\Malin Tsenov\Downloads
    Loaded Profiles: Malin Tsenov (Available Profiles: Malin Tsenov)
    Platform: Windows 10 Enterprise 2015 LTSB Evaluation (X64) Language: English (United States)
    Internet Explorer Version 11 (Default browser: IE)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (Intel Corporation) C:\Windows\System32\igfxCUIService.exe
    (Garmin Ltd. or its subsidiaries) C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe
    (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
    (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
    (Microsoft Corporation) C:\Windows\System32\wlms\wlms.exe
    (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
    (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
    (Intel Corporation) C:\Windows\System32\igfxEM.exe
    (Intel Corporation) C:\Windows\System32\igfxHK.exe
    (Intel Corporation) C:\Windows\System32\igfxTray.exe
    (Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe
    (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
    (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
    (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
    (Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
    (Microsoft Corporation) C:\Windows\System32\dllhost.exe
    (Microsoft Corporation) C:\Windows\System32\dllhost.exe


    ==================== Registry (Whitelisted) ===========================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech Inc.)
    HKU\S-1-5-21-3804347911-1195208747-610712264-1001\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1403192 2015-09-11] (Garmin Ltd. or its subsidiaries)
    HKU\S-1-5-21-3804347911-1195208747-610712264-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53729824 2015-08-07] (Skype Technologies S.A.)
    HKU\S-1-5-21-3804347911-1195208747-610712264-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673728 2012-11-06] (DT Soft Ltd)
    HKU\S-1-5-21-3804347911-1195208747-610712264-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8455960 2015-08-20] (Piriform Ltd)
    HKU\S-1-5-21-3804347911-1195208747-610712264-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2899136 2015-08-19] (Valve Corporation)
    HKU\S-1-5-21-3804347911-1195208747-610712264-1001\...\RunOnce: [Uninstall C:\Users\Malin Tsenov\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Malin Tsenov\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64"
    HKU\S-1-5-21-3804347911-1195208747-610712264-1001\...\MountPoints2: {169186be-4c97-11e5-9bcd-d4bed93f6bf1} - "D:\AutoRun.exe"
    HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1403192 2015-09-11] (Garmin Ltd. or its subsidiaries)

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
    Tcpip\..\Interfaces\{42195e47-d75f-487b-b6b0-a4e49ee3aa1e}: [DhcpNameServer] 192.168.0.1
    Tcpip\..\Interfaces\{ac14e142-03f1-4654-82ae-39279a68cff4}: [DhcpNameServer] 89.106.106.2 89.106.106.8

    Internet Explorer:
    ==================
    HKU\S-1-5-21-3804347911-1195208747-610712264-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp

    FireFox:
    ========
    FF ProfilePath: C:\Users\Malin Tsenov\AppData\Roaming\Mozilla\Firefox\Profiles\4t945632.default
    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)

    ==================== Services (Whitelisted) ========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    R2 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [762272 2015-09-11] (Garmin Ltd. or its subsidiaries)
    R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319888 2015-07-30] (Intel Corporation)
    R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5611280 2015-08-07] (TeamViewer GmbH)
    R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
    R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
    R2 WLMS; C:\Windows\system32\wlms\wlms.exe [23552 2015-07-10] (Microsoft Corporation)

    ===================== Drivers (Whitelisted) ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [237568 2015-07-10] (Microsoft Corporation)
    R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2015-09-09] (DT Soft Ltd)
    R3 NETwNe64; C:\Windows\System32\drivers\NETwew01.sys [3354384 2015-07-10] (Intel Corporation)
    R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek                                            )
    R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [402960 2015-07-30] (Realsil Semiconductor Corporation)
    S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
    S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
    R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
    R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
    S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

    ==================== NetSvcs (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    ==================== One Month Created files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2015-10-04 21:36 - 2015-10-04 21:36 - 00006804 _____ C:\Users\Malin Tsenov\Downloads\FRST.txt
    2015-10-04 21:35 - 2015-10-04 21:36 - 02193920 _____ (Farbar) C:\Users\Malin Tsenov\Downloads\FRST64.exe
    2015-10-04 21:28 - 2015-10-04 21:36 - 00000000 ____D C:\FRST
    2015-10-04 21:19 - 2015-10-04 21:19 - 00016148 _____ C:\Windows\system32\DESKTOP-BQQU233_Malin Tsenov_HistoryPrediction.bin
    2015-10-02 19:49 - 2015-09-15 19:12 - 00812008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
    2015-10-02 19:49 - 2015-09-15 19:12 - 00178152 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
    2015-10-01 20:08 - 2015-09-25 03:13 - 01276416 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll
    2015-10-01 20:08 - 2015-09-25 02:24 - 00796160 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
    2015-10-01 20:08 - 2015-09-25 02:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
    2015-10-01 20:08 - 2015-09-25 02:23 - 00579072 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
    2015-10-01 20:08 - 2015-09-25 02:17 - 02178560 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
    2015-10-01 20:08 - 2015-09-25 02:08 - 03586560 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
    2015-10-01 20:08 - 2015-09-25 02:07 - 01382400 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
    2015-10-01 20:08 - 2015-09-25 02:06 - 01423872 _____ (Microsoft Corporation) C:\Windows\system32\UserDataService.dll
    2015-10-01 20:08 - 2015-09-25 02:05 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\PimIndexMaintenance.dll
    2015-10-01 20:08 - 2015-09-25 02:01 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\ContactApis.dll
    2015-10-01 20:08 - 2015-09-25 02:00 - 01205248 _____ (Microsoft Corporation) C:\Windows\system32\Unistore.dll
    2015-10-01 20:08 - 2015-09-25 02:00 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\ChatApis.dll
    2015-10-01 20:08 - 2015-09-25 01:53 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\MessagingDataModel2.dll
    2015-10-01 20:08 - 2015-09-25 01:43 - 00613376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
    2015-10-01 20:08 - 2015-09-25 01:42 - 01795072 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
    2015-10-01 20:08 - 2015-09-25 01:25 - 00928256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Unistore.dll
    2015-10-01 20:08 - 2015-09-25 01:25 - 00625152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ContactApis.dll
    2015-10-01 20:08 - 2015-09-25 01:25 - 00579584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppointmentApis.dll
    2015-10-01 20:08 - 2015-09-25 01:25 - 00557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ChatApis.dll
    2015-10-01 20:08 - 2015-09-25 01:19 - 00466432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MessagingDataModel2.dll
    2015-10-01 20:08 - 2015-09-17 09:50 - 02464216 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
    2015-10-01 20:08 - 2015-09-17 09:50 - 01563392 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
    2015-10-01 20:08 - 2015-09-17 09:50 - 00099664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
    2015-10-01 20:08 - 2015-09-17 09:50 - 00088384 _____ (Microsoft Corporation) C:\Windows\system32\remoteaudioendpoint.dll
    2015-10-01 20:08 - 2015-09-17 09:49 - 08020816 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
    2015-10-01 20:08 - 2015-09-17 09:49 - 06487248 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
    2015-10-01 20:08 - 2015-09-17 09:49 - 01563472 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
    2015-10-01 20:08 - 2015-09-17 09:49 - 00894256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
    2015-10-01 20:08 - 2015-09-17 09:49 - 00553808 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
    2015-10-01 20:08 - 2015-09-17 09:48 - 02824248 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
    2015-10-01 20:08 - 2015-09-17 09:48 - 02494712 _____ C:\Windows\system32\CoreUIComponents.dll
    2015-10-01 20:08 - 2015-09-17 09:48 - 02432336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
    2015-10-01 20:08 - 2015-09-17 09:48 - 02156400 _____ (Microsoft Corporation) C:\Windows\system32\hevcdecoder.dll
    2015-10-01 20:08 - 2015-09-17 09:48 - 01983824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
    2015-10-01 20:08 - 2015-09-17 09:48 - 00809352 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
    2015-10-01 20:08 - 2015-09-17 09:48 - 00784136 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
    2015-10-01 20:08 - 2015-09-17 09:48 - 00584656 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
    2015-10-01 20:08 - 2015-09-17 09:48 - 00555768 _____ (Microsoft Corporation) C:\Windows\system32\directmanipulation.dll
    2015-10-01 20:08 - 2015-09-17 09:48 - 00537080 _____ (Microsoft Corporation) C:\Windows\system32\WWanAPI.dll
    2015-10-01 20:08 - 2015-09-17 09:48 - 00516448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
    2015-10-01 20:08 - 2015-09-17 09:48 - 00505696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
    2015-10-01 20:08 - 2015-09-17 09:48 - 00476760 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
    2015-10-01 20:08 - 2015-09-17 09:48 - 00395088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
    2015-10-01 20:08 - 2015-09-17 09:48 - 00332624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
    2015-10-01 20:08 - 2015-09-17 09:48 - 00243760 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
    2015-10-01 20:08 - 2015-09-17 09:47 - 01397088 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
    2015-10-01 20:08 - 2015-09-17 09:44 - 00781976 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
    2015-10-01 20:08 - 2015-09-17 09:43 - 00966416 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
    2015-10-01 20:08 - 2015-09-17 09:39 - 00081488 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
    2015-10-01 20:08 - 2015-09-17 09:37 - 01295712 _____ (Microsoft Corporation) C:\Windows\system32\wpx.dll
    2015-10-01 20:08 - 2015-09-17 09:28 - 05120056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
    2015-10-01 20:08 - 2015-09-17 09:28 - 02154808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
    2015-10-01 20:08 - 2015-09-17 09:28 - 01357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
    2015-10-01 20:08 - 2015-09-17 09:28 - 00441168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
    2015-10-01 20:08 - 2015-09-17 09:28 - 00074880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\remoteaudioendpoint.dll
    2015-10-01 20:08 - 2015-09-17 09:27 - 01766952 _____ C:\Windows\SysWOW64\CoreUIComponents.dll
    2015-10-01 20:08 - 2015-09-17 09:27 - 00454512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\directmanipulation.dll
    2015-10-01 20:08 - 2015-09-17 09:26 - 02446648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
    2015-10-01 20:08 - 2015-09-17 09:26 - 01895568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hevcdecoder.dll
    2015-10-01 20:08 - 2015-09-17 09:26 - 00646672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
    2015-10-01 20:08 - 2015-09-17 09:26 - 00508248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
    2015-10-01 20:08 - 2015-09-17 09:26 - 00434376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll
    2015-10-01 20:08 - 2015-09-17 09:26 - 00428128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWanAPI.dll
    2015-10-01 20:08 - 2015-09-17 09:25 - 00962400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
    2015-10-01 20:08 - 2015-09-17 09:21 - 00658528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
    2015-10-01 20:08 - 2015-09-17 09:20 - 00764416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
    2015-10-01 20:08 - 2015-09-17 09:12 - 16708608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
    2015-10-01 20:08 - 2015-09-17 09:09 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
    2015-10-01 20:08 - 2015-09-17 09:08 - 00494592 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
    2015-10-01 20:08 - 2015-09-17 09:07 - 21875712 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
    2015-10-01 20:08 - 2015-09-17 09:06 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\CellularAPI.dll
    2015-10-01 20:08 - 2015-09-17 09:06 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\MBMediaManager.dll
    2015-10-01 20:08 - 2015-09-17 09:06 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\tetheringservice.dll
    2015-10-01 20:08 - 2015-09-17 09:05 - 02226688 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
    2015-10-01 20:08 - 2015-09-17 09:05 - 00483328 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll
    2015-10-01 20:08 - 2015-09-17 09:04 - 07569408 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
    2015-10-01 20:08 - 2015-09-17 09:04 - 00910848 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll
    2015-10-01 20:08 - 2015-09-17 09:03 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\ngckeyenum.dll
    2015-10-01 20:08 - 2015-09-17 09:03 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe
    2015-10-01 20:08 - 2015-09-17 09:00 - 24595456 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
    2015-10-01 20:08 - 2015-09-17 09:00 - 03248640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
    2015-10-01 20:08 - 2015-09-17 09:00 - 02417664 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
    2015-10-01 20:08 - 2015-09-17 09:00 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll
    2015-10-01 20:08 - 2015-09-17 09:00 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\KeywordDetectorMsftSidAdapter.dll
    2015-10-01 20:08 - 2015-09-17 08:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\tileobjserver.dll
    2015-10-01 20:08 - 2015-09-17 08:57 - 02228736 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
    2015-10-01 20:08 - 2015-09-17 08:57 - 00403456 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll
    2015-10-01 20:08 - 2015-09-17 08:57 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\VEEventDispatcher.dll
    2015-10-01 20:08 - 2015-09-17 08:57 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll
    2015-10-01 20:08 - 2015-09-17 08:56 - 00859136 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
    2015-10-01 20:08 - 2015-09-17 08:56 - 00521728 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll
    2015-10-01 20:08 - 2015-09-17 08:55 - 02236416 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
    2015-10-01 20:08 - 2015-09-17 08:55 - 01601536 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
    2015-10-01 20:08 - 2015-09-17 08:55 - 00671232 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx02000.dll
    2015-10-01 20:08 - 2015-09-17 08:55 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
    2015-10-01 20:08 - 2015-09-17 08:55 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\ngccredprov.dll
    2015-10-01 20:08 - 2015-09-17 08:55 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\omadmclient.exe
    2015-10-01 20:08 - 2015-09-17 08:54 - 03781120 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
    2015-10-01 20:08 - 2015-09-17 08:54 - 00780288 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
    2015-10-01 20:08 - 2015-09-17 08:53 - 07055872 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
    2015-10-01 20:08 - 2015-09-17 08:52 - 06572032 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
    2015-10-01 20:08 - 2015-09-17 08:52 - 01181696 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
    2015-10-01 20:08 - 2015-09-17 08:52 - 00591360 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
    2015-10-01 20:08 - 2015-09-17 08:52 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApi.dll
    2015-10-01 20:08 - 2015-09-17 08:52 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
    2015-10-01 20:08 - 2015-09-17 08:52 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
    2015-10-01 20:08 - 2015-09-17 08:52 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\SubscriptionMgr.dll
    2015-10-01 20:08 - 2015-09-17 08:51 - 13027840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
    2015-10-01 20:08 - 2015-09-17 08:51 - 02660864 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
    2015-10-01 20:08 - 2015-09-17 08:51 - 01812480 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
    2015-10-01 20:08 - 2015-09-17 08:51 - 01203712 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
    2015-10-01 20:08 - 2015-09-17 08:51 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
    2015-10-01 20:08 - 2015-09-17 08:51 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
    2015-10-01 20:08 - 2015-09-17 08:50 - 00929280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
    2015-10-01 20:08 - 2015-09-17 08:50 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
    2015-10-01 20:08 - 2015-09-17 08:50 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\SensorsApi.dll
    2015-10-01 20:08 - 2015-09-17 08:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\buttonconverter.sys
    2015-10-01 20:08 - 2015-09-17 08:49 - 02740224 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
    2015-10-01 20:08 - 2015-09-17 08:49 - 01290240 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll
    2015-10-01 20:08 - 2015-09-17 08:49 - 01010176 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
    2015-10-01 20:08 - 2015-09-17 08:49 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\LocationWiFiAdapter.dll
    2015-10-01 20:08 - 2015-09-17 08:48 - 02093056 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
    2015-10-01 20:08 - 2015-09-17 08:48 - 00517632 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
    2015-10-01 20:08 - 2015-09-17 08:48 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\CredProvDataModel.dll
    2015-10-01 20:08 - 2015-09-17 08:48 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\LockAppBroker.dll
    2015-10-01 20:08 - 2015-09-17 08:48 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\ncryptprov.dll
    2015-10-01 20:08 - 2015-09-17 08:48 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
    2015-10-01 20:08 - 2015-09-17 08:47 - 07523328 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
    2015-10-01 20:08 - 2015-09-17 08:47 - 00513536 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll
    2015-10-01 20:08 - 2015-09-17 08:47 - 00371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll
    2015-10-01 20:08 - 2015-09-17 08:47 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\cloudAP.dll
    2015-10-01 20:08 - 2015-09-17 08:46 - 00928256 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll
    2015-10-01 20:08 - 2015-09-17 08:46 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
    2015-10-01 20:08 - 2015-09-17 08:46 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCore.dll
    2015-10-01 20:08 - 2015-09-17 08:46 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCsp.dll
    2015-10-01 20:08 - 2015-09-17 08:46 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\MDMAppInstaller.exe
    2015-10-01 20:08 - 2015-09-17 08:46 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\HttpsDataSource.dll
    2015-10-01 20:08 - 2015-09-17 08:45 - 19325440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
    2015-10-01 20:08 - 2015-09-17 08:45 - 04791296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
    2015-10-01 20:08 - 2015-09-17 08:45 - 01331200 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
    2015-10-01 20:08 - 2015-09-17 08:45 - 00869376 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll
    2015-10-01 20:08 - 2015-09-17 08:45 - 00832512 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
    2015-10-01 20:08 - 2015-09-17 08:45 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
    2015-10-01 20:08 - 2015-09-17 08:44 - 01844736 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
    2015-10-01 20:08 - 2015-09-17 08:44 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
    2015-10-01 20:08 - 2015-09-17 08:43 - 01213440 _____ (Microsoft Corporation) C:\Windows\system32\RemoteNaturalLanguage.dll
    2015-10-01 20:08 - 2015-09-17 08:43 - 00378368 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
    2015-10-01 20:08 - 2015-09-17 08:43 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
    2015-10-01 20:08 - 2015-09-17 08:42 - 02646528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
    2015-10-01 20:08 - 2015-09-17 08:41 - 00217088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEEventDispatcher.dll
    2015-10-01 20:08 - 2015-09-17 08:40 - 06101504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll
    2015-10-01 20:08 - 2015-09-17 08:40 - 01918464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
    2015-10-01 20:08 - 2015-09-17 08:40 - 01162240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll
    2015-10-01 20:08 - 2015-09-17 08:39 - 00587264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
    2015-10-01 20:08 - 2015-09-17 08:38 - 00058368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usoapi.dll
    2015-10-01 20:08 - 2015-09-17 08:37 - 18806272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
    2015-10-01 20:08 - 2015-09-17 08:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApi.dll
    2015-10-01 20:08 - 2015-09-17 08:35 - 05079552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll
    2015-10-01 20:08 - 2015-09-17 08:35 - 02207232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
    2015-10-01 20:08 - 2015-09-17 08:35 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll
    2015-10-01 20:08 - 2015-09-17 08:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
    2015-10-01 20:08 - 2015-09-17 08:34 - 00253440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsApi.dll
    2015-10-01 20:08 - 2015-09-17 08:32 - 03579904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
    2015-10-01 20:08 - 2015-09-17 08:32 - 00336384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredProvDataModel.dll
    2015-10-01 20:08 - 2015-09-17 08:32 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppBroker.dll
    2015-10-01 20:08 - 2015-09-17 08:32 - 00195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll
    2015-10-01 20:08 - 2015-09-17 08:31 - 05454848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
    2015-10-01 20:08 - 2015-09-17 08:31 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptprov.dll
    2015-10-01 20:08 - 2015-09-17 08:30 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
    2015-10-01 20:08 - 2015-09-17 08:29 - 01104384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
    2015-10-01 20:08 - 2015-09-17 08:29 - 00701952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JpMapControl.dll
    2015-10-01 20:08 - 2015-09-17 08:29 - 00677888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlCore.dll
    2015-10-01 20:08 - 2015-09-17 08:29 - 00464896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll
    2015-10-01 20:08 - 2015-09-17 08:26 - 00899584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RemoteNaturalLanguage.dll
    2015-10-01 20:08 - 2015-09-17 08:16 - 00512000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
    2015-10-01 20:08 - 2015-09-13 05:05 - 02987520 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
    2015-10-01 20:08 - 2015-09-13 04:41 - 02639872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
    2015-10-01 20:07 - 2015-09-25 03:35 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\UserDataAccountApis.dll
    2015-10-01 20:07 - 2015-09-25 03:34 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\PhoneCallHistoryApis.dll
    2015-10-01 20:07 - 2015-09-25 02:34 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataAccountApis.dll
    2015-10-01 20:07 - 2015-09-25 02:34 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhoneCallHistoryApis.dll
    2015-10-01 20:07 - 2015-09-25 02:01 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentApis.dll
    2015-10-01 20:07 - 2015-09-25 02:00 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\EmailApis.dll
    2015-10-01 20:07 - 2015-09-25 02:00 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\CallHistoryClient.dll
    2015-10-01 20:07 - 2015-09-25 01:43 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll
    2015-10-01 20:07 - 2015-09-25 01:25 - 00525312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EmailApis.dll
    2015-10-01 20:07 - 2015-09-25 01:24 - 00131072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CallHistoryClient.dll
    2015-10-01 20:07 - 2015-09-19 08:14 - 00102304 _____ (Microsoft Corporation) C:\Windows\system32\omadmapi.dll
    2015-10-01 20:07 - 2015-09-17 09:49 - 00501008 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
    2015-10-01 20:07 - 2015-09-17 09:48 - 00406864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
    2015-10-01 20:07 - 2015-09-17 09:48 - 00278352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
    2015-10-01 20:07 - 2015-09-17 09:37 - 01168736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
    2015-10-01 20:07 - 2015-09-17 09:28 - 00407608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
    2015-10-01 20:07 - 2015-09-17 09:11 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll
    2015-10-01 20:07 - 2015-09-17 09:10 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
    2015-10-01 20:07 - 2015-09-17 09:09 - 00143360 _____ (Microsoft Corporation) C:\Windows\system32\provops.dll
    2015-10-01 20:07 - 2015-09-17 09:08 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Speech.Pal.dll
    2015-10-01 20:07 - 2015-09-17 09:08 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManagerShellext.exe
    2015-10-01 20:07 - 2015-09-17 09:04 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll
    2015-10-01 20:07 - 2015-09-17 09:03 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
    2015-10-01 20:07 - 2015-09-17 09:03 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\provisioningcsp.dll
    2015-10-01 20:07 - 2015-09-17 09:03 - 00154624 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe
    2015-10-01 20:07 - 2015-09-17 09:02 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\mdmmigrator.dll
    2015-10-01 20:07 - 2015-09-17 09:02 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseDesktopAppMgmtCSP.dll
    2015-10-01 20:07 - 2015-09-17 08:56 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\configmanager2.dll
    2015-10-01 20:07 - 2015-09-17 08:55 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\accountaccessor.dll
    2015-10-01 20:07 - 2015-09-17 08:55 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\dmcsps.dll
    2015-10-01 20:07 - 2015-09-17 08:55 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\wwancfg.dll
    2015-10-01 20:07 - 2015-09-17 08:54 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
    2015-10-01 20:07 - 2015-09-17 08:52 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll
    2015-10-01 20:07 - 2015-09-17 08:52 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
    2015-10-01 20:07 - 2015-09-17 08:52 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
    2015-10-01 20:07 - 2015-09-17 08:51 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
    2015-10-01 20:07 - 2015-09-17 08:50 - 00421888 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Bluetooth.dll
    2015-10-01 20:07 - 2015-09-17 08:50 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\LocationPeWiFi.dll
    2015-10-01 20:07 - 2015-09-17 08:50 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\LocationPeCell.dll
    2015-10-01 20:07 - 2015-09-17 08:49 - 00771072 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
    2015-10-01 20:07 - 2015-09-17 08:49 - 00439296 _____ (Microsoft Corporation) C:\Windows\system32\LocationWebproxy.dll
    2015-10-01 20:07 - 2015-09-17 08:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\LocationGeofences.dll
    2015-10-01 20:07 - 2015-09-17 08:49 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\LocationFramework.dll
    2015-10-01 20:07 - 2015-09-17 08:49 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\LocationCrowdsource.dll
    2015-10-01 20:07 - 2015-09-17 08:49 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\LocationPeIP.dll
    2015-10-01 20:07 - 2015-09-17 08:49 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Speech.Pal.dll
    2015-10-01 20:07 - 2015-09-17 08:46 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
    2015-10-01 20:07 - 2015-09-17 08:46 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\syncmlhook.dll
    2015-10-01 20:07 - 2015-09-17 08:45 - 00193024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
    2015-10-01 20:07 - 2015-09-17 08:44 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll
    2015-10-01 20:07 - 2015-09-17 08:44 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\syncutil.dll
    2015-10-01 20:07 - 2015-09-17 08:43 - 00328704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapConfiguration.dll
    2015-10-01 20:07 - 2015-09-17 08:39 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
    2015-10-01 20:07 - 2015-09-17 08:36 - 01171456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcenter.dll
    2015-10-01 20:07 - 2015-09-17 08:33 - 00574464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
    2015-10-01 20:07 - 2015-09-17 08:28 - 00473088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnapps.dll
    2015-09-30 19:31 - 2015-09-30 19:31 - 00000103 _____ C:\Windows\setupact.log
    2015-09-30 19:31 - 2015-09-30 19:31 - 00000000 _____ C:\Windows\setuperr.log
    2015-09-30 02:34 - 2015-09-30 02:34 - 00000000 ____D C:\Users\Malin Tsenov\Downloads\MMI-Basic-Plus
    2015-09-30 02:15 - 2015-09-30 02:15 - 00000000 ____D C:\Users\Malin Tsenov\Downloads\MMI-5570-4L0.998.961-cd2-3
    2015-09-30 02:14 - 2015-09-30 02:14 - 00000000 ____D C:\Users\Malin Tsenov\Downloads\MMI-5570-4L0.998.961-cd3-3
    2015-09-30 02:14 - 2015-09-30 02:14 - 00000000 ____D C:\Users\Malin Tsenov\Downloads\MMI-5570-4L0.998.961-cd1-3
    2015-09-30 02:11 - 2015-09-30 02:34 - 451863396 _____ C:\Users\Malin Tsenov\Downloads\MMI-Basic-Plus.zip
    2015-09-30 02:11 - 2015-09-30 02:14 - 194539520 _____ C:\Users\Malin Tsenov\Downloads\MMI-5570-4L0.998.961-cd3-3.iso
    2015-09-30 02:11 - 2015-09-30 02:13 - 98762752 _____ C:\Users\Malin Tsenov\Downloads\MMI-5570-4L0.998.961-cd2-3.iso
    2015-09-30 02:11 - 2015-09-30 02:13 - 150089728 _____ C:\Users\Malin Tsenov\Downloads\MMI-5570-4L0.998.961-cd1-3.iso
    2015-09-29 13:21 - 2015-09-29 13:21 - 00000000 ____D C:\Users\Malin Tsenov\Downloads\iGO 8.xx Europe MAPS HERE Q1 2015
    2015-09-29 13:20 - 2015-09-29 13:20 - 00000000 ____D C:\Users\Malin Tsenov\AppData\LocalLow\uTorrent
    2015-09-29 13:13 - 2015-10-02 20:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
    2015-09-29 13:13 - 2015-09-29 13:13 - 00001188 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
    2015-09-29 13:13 - 2015-09-29 13:13 - 00001176 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
    2015-09-29 13:13 - 2015-09-29 13:13 - 00000000 ____D C:\Users\Malin Tsenov\AppData\Local\Mozilla
    2015-09-29 13:13 - 2015-09-29 13:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
    2015-09-28 23:10 - 2015-09-28 23:10 - 00001880 _____ C:\Users\Malin Tsenov\AppData\Roaming\Microsoft\Windows\Start Menu\Poker at bet365.lnk
    2015-09-28 23:10 - 2015-09-28 23:10 - 00001878 _____ C:\Users\Malin Tsenov\Desktop\Poker at bet365.lnk
    2015-09-28 23:09 - 2015-10-03 23:47 - 00000000 ____D C:\Users\Malin Tsenov\AppData\Local\Poker at bet365
    2015-09-28 16:42 - 2015-10-04 21:22 - 00000275 _____ C:\Windows\WindowsUpdate.log
    2015-09-28 16:42 - 2015-09-28 16:42 - 00000000 ____D C:\Users\Malin Tsenov\Documents\Ghost Games
    2015-09-21 01:25 - 2015-09-21 01:25 - 00000000 ____D C:\Users\Malin Tsenov\Downloads\Best Hits Vol. 25 - Summer (2015)
    2015-09-21 01:23 - 2015-09-21 01:23 - 00000000 ____D C:\Users\Malin Tsenov\Downloads\Forever Balads
    2015-09-20 15:54 - 2015-09-20 15:54 - 00001739 _____ C:\Users\Malin Tsenov\Desktop\Counter-Strike WaRzOnE.lnk
    2015-09-20 15:54 - 2015-09-20 15:54 - 00000000 ____D C:\Users\Malin Tsenov\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HLDS
    2015-09-20 15:54 - 2015-09-20 15:54 - 00000000 ____D C:\Users\Malin Tsenov\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Half-Life
    2015-09-20 15:54 - 2015-09-20 15:54 - 00000000 ____D C:\Users\Malin Tsenov\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counter-Strike
    2015-09-20 15:53 - 2015-09-28 16:27 - 00000000 ____D C:\Games
    2015-09-19 14:24 - 2015-09-19 14:24 - 00000219 _____ C:\Users\Malin Tsenov\Desktop\Counter-Strike Global Offensive.url
    2015-09-19 14:24 - 2015-09-19 14:24 - 00000000 ____D C:\Users\Malin Tsenov\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
    2015-09-16 20:49 - 2015-09-16 20:49 - 00000000 ____D C:\Users\Malin Tsenov\AppData\Local\Steam
    2015-09-16 20:46 - 2015-10-04 21:20 - 00000000 ____D C:\Program Files (x86)\Steam
    2015-09-16 20:46 - 2015-09-16 20:46 - 00000992 _____ C:\Users\Public\Desktop\Steam.lnk
    2015-09-16 20:46 - 2015-09-16 20:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
    2015-09-15 21:36 - 2015-09-15 21:36 - 00000000 ____D C:\wow
    2015-09-15 20:36 - 2015-09-15 20:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
    2015-09-13 23:51 - 2015-09-28 16:41 - 00000000 ____D C:\Users\Malin Tsenov\AppData\Roaming\TeamViewer
    2015-09-13 23:50 - 2015-09-13 23:50 - 00001072 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
    2015-09-13 23:50 - 2015-09-13 23:50 - 00001060 _____ C:\Users\Public\Desktop\TeamViewer 10.lnk
    2015-09-13 23:50 - 2015-09-13 23:50 - 00000000 ____D C:\Program Files (x86)\TeamViewer
    2015-09-11 01:14 - 2015-09-11 01:14 - 00000000 ____D C:\Users\Malin Tsenov\Documents\My Games
    2015-09-11 01:14 - 2015-09-11 01:14 - 00000000 ____D C:\Users\Malin Tsenov\AppData\Roaming\Steam
    2015-09-11 01:14 - 2015-09-11 01:14 - 00000000 ____D C:\ProgramData\Codemasters
    2015-09-11 01:12 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
    2015-09-11 01:12 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
    2015-09-11 01:12 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
    2015-09-11 01:12 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
    2015-09-11 01:12 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
    2015-09-11 01:12 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
    2015-09-11 01:12 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
    2015-09-11 01:12 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
    2015-09-11 01:12 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
    2015-09-11 01:12 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
    2015-09-11 01:12 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
    2015-09-11 01:12 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
    2015-09-11 01:12 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
    2015-09-11 01:12 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
    2015-09-11 01:12 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
    2015-09-11 01:12 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
    2015-09-11 01:12 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
    2015-09-11 01:12 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
    2015-09-11 01:12 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
    2015-09-11 01:12 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
    2015-09-11 01:12 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
    2015-09-11 01:12 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
    2015-09-11 01:12 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
    2015-09-11 01:12 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
    2015-09-11 01:11 - 2015-09-11 01:12 - 00000000 ____D C:\Windows\SysWOW64\directx
    2015-09-11 01:11 - 2015-09-11 01:11 - 00000000 ___HD C:\Windows\msdownld.tmp
    2015-09-10 21:00 - 2015-09-11 01:09 - 00001019 _____ C:\Users\Public\Desktop\DiRT Rally.lnk
    2015-09-10 21:00 - 2015-09-10 21:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DiRT Rally
    2015-09-10 20:37 - 2015-09-11 01:09 - 00000000 ____D C:\Program Files (x86)\DiRT Rally
    2015-09-10 20:35 - 2015-09-10 20:35 - 00002884 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
    2015-09-10 20:35 - 2015-09-10 20:35 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
    2015-09-10 20:35 - 2015-09-10 20:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
    2015-09-10 20:35 - 2015-09-10 20:35 - 00000000 ____D C:\Program Files\CCleaner
    2015-09-09 23:15 - 2015-08-27 09:36 - 03620736 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
    2015-09-09 23:15 - 2015-08-27 09:32 - 00608936 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
    2015-09-09 23:15 - 2015-08-27 08:59 - 02880032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
    2015-09-09 23:15 - 2015-08-27 08:54 - 00541248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
    2015-09-09 23:15 - 2015-08-27 08:54 - 00365568 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
    2015-09-09 23:15 - 2015-08-27 08:51 - 02350592 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
    2015-09-09 23:15 - 2015-08-27 08:51 - 01774592 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
    2015-09-09 23:15 - 2015-08-27 08:49 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
    2015-09-09 23:15 - 2015-08-27 08:47 - 12503552 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
    2015-09-09 23:15 - 2015-08-27 08:43 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
    2015-09-09 23:15 - 2015-08-27 08:43 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
    2015-09-09 23:15 - 2015-08-27 08:42 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
    2015-09-09 23:15 - 2015-08-27 08:42 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.PicturePassword.dll
    2015-09-09 23:15 - 2015-08-27 08:42 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll
    2015-09-09 23:15 - 2015-08-27 08:39 - 00045568 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
    2015-09-09 23:15 - 2015-08-27 08:23 - 00303104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
    2015-09-09 23:15 - 2015-08-27 08:16 - 02153472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
    2015-09-09 23:15 - 2015-08-27 08:16 - 01612288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
    2015-09-09 23:15 - 2015-08-27 08:12 - 00650752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
    2015-09-09 23:15 - 2015-08-27 08:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
    2015-09-09 23:15 - 2015-08-27 08:11 - 00484352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
    2015-09-09 23:15 - 2015-08-27 08:11 - 00139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shacct.dll
    2015-09-09 23:15 - 2015-08-27 08:09 - 11262464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
    2015-09-09 23:15 - 2015-08-27 08:08 - 00037376 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
    2015-09-09 21:06 - 2015-09-09 21:06 - 00000000 ____D C:\Users\Malin Tsenov\AppData\Local\Logitech
    2015-09-09 21:04 - 2015-09-09 21:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
    2015-09-09 21:04 - 2015-09-09 21:04 - 00000000 ____D C:\Program Files\Logitech
    2015-09-09 21:04 - 2015-09-09 21:04 - 00000000 ____D C:\Program Files\Common Files\Logitech
    2015-09-09 18:49 - 2003-04-15 20:27 - 00793536 _____ (Microsoft Corporation) C:\Program Files (x86)\wmpcdcs8.exe
    2015-09-09 18:49 - 2002-12-11 23:11 - 04085904 _____ (Microsoft Corporation) C:\Program Files (x86)\wmfdist.exe
    2015-09-09 16:54 - 2015-09-09 16:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
    2015-09-09 01:15 - 2015-09-09 01:15 - 00000000 ____D C:\Users\Malin Tsenov\Downloads\xlive
    2015-09-09 01:08 - 2015-09-09 01:08 - 00466520 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
    2015-09-09 01:08 - 2015-09-09 01:08 - 00445016 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
    2015-09-09 01:08 - 2015-09-09 01:08 - 00122968 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
    2015-09-09 01:08 - 2015-09-09 01:08 - 00109144 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
    2015-09-09 01:08 - 2015-09-09 01:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blue Ripple Sound
    2015-09-09 01:08 - 2015-09-09 01:08 - 00000000 ____D C:\Program Files (x86)\OpenAL
    2015-09-09 01:08 - 2015-09-09 01:08 - 00000000 ____D C:\Program Files (x86)\BRS
    2015-09-09 01:08 - 2009-10-16 11:19 - 00872448 _____ (Blue Ripple Sound Limited) C:\Windows\SysWOW64\rapture3d_oal.dll
    2015-09-09 01:08 - 2009-10-15 12:44 - 00809560 ____R (Creative Labs Inc.) C:\Windows\SysWOW64\tmp16F8.tmp
    2015-09-09 01:08 - 2009-10-15 12:44 - 00809560 ____R (Creative Labs Inc.) C:\Windows\SysWOW64\tmp16E8.tmp
    2015-09-09 01:08 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
    2015-09-09 01:08 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
    2015-09-09 01:08 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
    2015-09-09 01:08 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
    2015-09-09 01:08 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
    2015-09-09 01:08 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
    2015-09-09 01:08 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
    2015-09-09 01:08 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
    2015-09-09 01:08 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
    2015-09-09 01:08 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
    2015-09-09 01:08 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
    2015-09-09 01:08 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
    2015-09-09 01:08 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
    2015-09-09 01:08 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
    2015-09-09 01:08 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
    2015-09-09 01:08 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
    2015-09-09 01:08 - 2009-07-13 19:04 - 03485696 _____ (Intel Corporation) C:\Windows\SysWOW64\mkl_p4.dll
    2015-09-09 01:08 - 2009-07-13 19:04 - 02793472 _____ (Intel Corporation) C:\Windows\SysWOW64\mkl_p3.dll
    2015-09-09 01:08 - 2009-07-13 19:04 - 02441216 _____ (Intel Corporation) C:\Windows\SysWOW64\mkl_def.dll
    2015-09-09 01:08 - 2009-07-13 19:04 - 02174976 _____ (Intel Corporation) C:\Windows\SysWOW64\mkl_lapack32.dll
    2015-09-09 01:08 - 2009-07-13 19:04 - 02125824 _____ (Intel Corporation) C:\Windows\SysWOW64\mkl_lapack64.dll
    2015-09-09 01:08 - 2009-07-13 19:04 - 00839680 _____ (Intel Corporation) C:\Windows\SysWOW64\mkl_vml_p4.dll
    2015-09-09 01:08 - 2009-07-13 19:04 - 00532480 _____ (Intel Corporation) C:\Windows\SysWOW64\mkl_vml_p3.dll
    2015-09-09 01:08 - 2009-07-13 19:04 - 00512000 _____ (Intel Corporation) C:\Windows\SysWOW64\mkl_vml_def.dll
    2015-09-09 01:08 - 2009-07-13 19:04 - 00184320 _____ (Intel Corporation) C:\Windows\SysWOW64\libguide40.dll
    2015-09-09 01:08 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
    2015-09-09 01:08 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
    2015-09-09 01:08 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
    2015-09-09 01:08 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
    2015-09-09 01:08 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
    2015-09-09 01:08 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
    2015-09-09 01:08 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
    2015-09-09 01:08 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
    2015-09-09 01:08 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
    2015-09-09 01:08 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
    2015-09-09 01:08 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
    2015-09-09 01:08 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
    2015-09-09 01:08 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
    2015-09-09 01:08 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
    2015-09-09 01:08 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
    2015-09-09 01:08 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
    2015-09-09 01:08 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
    2015-09-09 01:08 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
    2015-09-09 01:08 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
    2015-09-09 01:08 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
    2015-09-09 01:08 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
    2015-09-09 01:08 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
    2015-09-09 01:08 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
    2015-09-09 01:08 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
    2015-09-09 01:08 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
    2015-09-09 01:08 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
    2015-09-09 01:08 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
    2015-09-09 01:08 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
    2015-09-09 01:08 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
    2015-09-09 01:08 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
    2015-09-09 01:08 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
    2015-09-09 01:08 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
    2015-09-09 01:08 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
    2015-09-09 01:08 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
    2015-09-09 01:08 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
    2015-09-09 01:08 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
    2015-09-09 01:08 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
    2015-09-09 01:08 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
    2015-09-09 01:08 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
    2015-09-09 01:08 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
    2015-09-09 01:08 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
    2015-09-09 01:08 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
    2015-09-09 01:08 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
    2015-09-09 01:08 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
    2015-09-09 01:08 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
    2015-09-09 01:08 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
    2015-09-09 01:08 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
    2015-09-09 01:08 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
    2015-09-09 01:08 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
    2015-09-09 01:08 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
    2015-09-09 01:08 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
    2015-09-09 01:08 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
    2015-09-09 01:08 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
    2015-09-09 01:08 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
    2015-09-09 01:08 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
    2015-09-09 01:08 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
    2015-09-09 01:08 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
    2015-09-09 01:08 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
    2015-09-09 01:08 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
    2015-09-09 01:08 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
    2015-09-09 01:08 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
    2015-09-09 01:08 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
    2015-09-09 01:08 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
    2015-09-09 01:08 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
    2015-09-09 01:08 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
    2015-09-09 01:08 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
    2015-09-09 01:08 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
    2015-09-09 01:08 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
    2015-09-09 01:08 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
    2015-09-09 01:08 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
    2015-09-09 01:08 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
    2015-09-09 01:08 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
    2015-09-09 01:08 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
    2015-09-09 01:08 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
    2015-09-09 01:08 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
    2015-09-09 01:08 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
    2015-09-09 01:08 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
    2015-09-09 01:08 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
    2015-09-09 01:08 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
    2015-09-09 01:08 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
    2015-09-09 01:08 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
    2015-09-09 01:08 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
    2015-09-09 01:08 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
    2015-09-09 01:08 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
    2015-09-09 01:08 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
    2015-09-09 01:08 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
    2015-09-09 01:08 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
    2015-09-09 01:08 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
    2015-09-09 01:08 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
    2015-09-09 01:08 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
    2015-09-09 01:08 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
    2015-09-09 01:08 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
    2015-09-09 01:08 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
    2015-09-09 01:08 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
    2015-09-09 01:08 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
    2015-09-09 01:08 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
    2015-09-09 01:08 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
    2015-09-09 01:08 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
    2015-09-09 01:08 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
    2015-09-09 01:08 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
    2015-09-09 01:08 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
    2015-09-09 01:08 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
    2015-09-09 01:08 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
    2015-09-09 01:08 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
    2015-09-09 01:08 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
    2015-09-09 01:08 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
    2015-09-09 01:08 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
    2015-09-09 01:08 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
    2015-09-09 01:08 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
    2015-09-09 01:08 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
    2015-09-09 01:08 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
    2015-09-09 01:08 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
    2015-09-09 01:08 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
    2015-09-09 01:08 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
    2015-09-09 01:08 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
    2015-09-09 01:08 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
    2015-09-09 01:08 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
    2015-09-09 01:08 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
    2015-09-09 01:08 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
    2015-09-09 01:08 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
    2015-09-09 01:08 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
    2015-09-09 01:08 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
    2015-09-09 01:08 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
    2015-09-09 01:08 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
    2015-09-09 01:08 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
    2015-09-09 01:08 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
    2015-09-09 01:08 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
    2015-09-09 01:08 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
    2015-09-09 01:08 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
    2015-09-09 01:08 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
    2015-09-09 01:08 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
    2015-09-09 01:08 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
    2015-09-09 01:08 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
    2015-09-09 01:08 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
    2015-09-09 01:08 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
    2015-09-09 01:08 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
    2015-09-09 01:08 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
    2015-09-09 00:47 - 2015-09-09 00:47 - 00000000 ____D C:\Program Files (x86)\Codemasters
    2015-09-09 00:46 - 2015-09-28 16:41 - 00000000 ____D C:\Users\Malin Tsenov\AppData\Roaming\DAEMON Tools Lite
    2015-09-09 00:46 - 2015-09-09 00:46 - 00283200 _____ (DT Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
    2015-09-09 00:46 - 2015-09-09 00:46 - 00001979 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
    2015-09-09 00:46 - 2015-09-09 00:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
    2015-09-09 00:46 - 2015-09-09 00:46 - 00000000 ____D C:\Program Files (x86)\DAEMON Tools Lite
    2015-09-09 00:45 - 2015-09-09 00:47 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
    2015-09-09 00:45 - 2015-09-09 00:45 - 00000000 ____D C:\Users\Malin Tsenov\Downloads\Core.i3
    2015-09-06 02:32 - 2015-09-06 02:32 - 00000000 ___RD C:\Program Files (x86)\Skype
    2015-09-06 02:32 - 2015-09-06 02:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
    2015-09-06 00:25 - 2015-09-06 00:25 - 00000000 ____D C:\Users\Malin Tsenov\Tracing
    2015-09-04 13:13 - 2015-09-04 13:13 - 00000000 ____D C:\Users\Malin Tsenov\Downloads\Garmin_Nuvi_24x24
    2015-09-04 13:10 - 2015-09-04 13:10 - 00000000 ____D C:\Users\Malin Tsenov\Downloads\Garmin_Nuvi_48x48
    2015-09-04 12:30 - 2015-09-04 13:00 - 00000000 ____D C:\Users\Malin Tsenov\Downloads\Garmin Cyclops 2015-08-20 Unlocked (1)
    2015-09-04 12:30 - 2015-08-22 11:25 - 00000000 ____D C:\Users\Malin Tsenov\Downloads\Garmin Cyclops 2015-08-20 Unlocked

    ==================== One Month Modified files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2015-10-04 21:23 - 2015-07-30 15:51 - 00004180 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{142CC1CC-4550-4323-850E-DCF4D8EFF5B0}
    2015-10-04 21:22 - 2015-07-10 14:04 - 00000000 ____D C:\Windows\system32\sru
    2015-10-04 21:21 - 2015-07-30 13:05 - 00875126 _____ C:\Windows\system32\PerfStringBackup.INI
    2015-10-03 21:12 - 2015-07-10 14:04 - 00000000 ____D C:\Windows\rescache
    2015-10-03 20:13 - 2015-07-10 15:21 - 00000006 ____H C:\Windows\Tasks\SA.DAT
    2015-10-02 19:49 - 2015-07-30 13:14 - 00000000 ____D C:\Users\Malin Tsenov
    2015-10-02 19:49 - 2015-07-10 12:05 - 00032768 ___SH C:\Windows\system32\config\BBI
    2015-10-02 19:48 - 2015-07-10 14:04 - 00000000 ___SD C:\Windows\SysWOW64\F12
    2015-10-02 19:48 - 2015-07-10 14:04 - 00000000 ___SD C:\Windows\system32\F12
    2015-10-02 19:48 - 2015-07-10 14:04 - 00000000 ___RD C:\Windows\PurchaseDialog
    2015-10-02 19:48 - 2015-07-10 14:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
    2015-10-02 19:48 - 2015-07-10 14:04 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
    2015-10-02 19:48 - 2015-07-10 14:04 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
    2015-10-02 19:48 - 2015-07-10 14:04 - 00000000 ____D C:\Windows\system32\appraiser
    2015-10-02 19:48 - 2015-07-10 14:04 - 00000000 ____D C:\Windows\Provisioning
    2015-10-02 19:48 - 2015-07-10 14:04 - 00000000 ____D C:\Windows\L2Schemas
    2015-10-01 20:47 - 2015-08-04 18:04 - 00000000 ____D C:\Users\Malin Tsenov\AppData\Roaming\LolClient
    2015-10-01 20:41 - 2015-07-10 13:55 - 00000000 ____D C:\Windows\CbsTemp
    2015-09-30 19:55 - 2015-08-06 11:23 - 00000000 ____D C:\Users\Malin Tsenov\AppData\Roaming\Skype
    2015-09-29 14:13 - 2015-08-05 14:20 - 00000000 ____D C:\Users\Malin Tsenov\AppData\Roaming\uTorrent
    2015-09-29 13:13 - 2015-07-31 15:09 - 00000000 ____D C:\Users\Malin Tsenov\AppData\Roaming\Mozilla
    2015-09-28 16:40 - 2015-08-18 15:45 - 00000000 ____D C:\ProgramData\Package Cache
    2015-09-26 00:07 - 2015-07-10 15:20 - 00189264 _____ C:\Windows\system32\FNTCACHE.DAT
    2015-09-21 21:42 - 2015-08-07 23:49 - 00000000 ____D C:\The KMPlayer
    2015-09-15 20:36 - 2015-08-18 15:46 - 00001923 _____ C:\Users\Public\Desktop\Garmin Express.lnk
    2015-09-15 20:36 - 2015-08-18 15:45 - 00003624 _____ C:\Windows\System32\Tasks\GarminUpdaterTask
    2015-09-15 20:36 - 2015-08-18 15:45 - 00000000 ____D C:\Program Files (x86)\Garmin
    2015-09-13 19:00 - 2015-07-10 16:15 - 00000000 ____D C:\Program Files\Windows Journal
    2015-09-11 01:14 - 2015-07-10 14:04 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
    2015-09-10 20:35 - 2015-07-30 13:46 - 00000000 ____D C:\Windows\Panther
    2015-09-10 00:47 - 2015-08-13 09:37 - 00000000 ____D C:\Windows\system32\MRT
    2015-09-10 00:17 - 2015-07-10 14:04 - 00000000 ____D C:\Windows\system32\WinBioDatabase
    2015-09-09 18:27 - 2015-07-30 13:14 - 00000000 ____D C:\Users\Malin Tsenov\AppData\Local\VirtualStore
    2015-09-06 02:32 - 2015-08-06 11:23 - 00002640 _____ C:\Users\Public\Desktop\Skype.lnk
    2015-09-06 02:32 - 2015-08-06 11:23 - 00000000 ____D C:\ProgramData\Skype

    ==================== Files in the root of some directories =======

    2015-09-09 18:49 - 2002-12-11 23:11 - 4085904 _____ (Microsoft Corporation) C:\Program Files (x86)\wmfdist.exe
    2015-09-09 18:49 - 2003-04-15 20:27 - 0793536 _____ (Microsoft Corporation) C:\Program Files (x86)\wmpcdcs8.exe

    ==================== Bamital & volsnap =================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\system32\winlogon.exe => File is digitally signed
    C:\Windows\system32\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\system32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\system32\services.exe => File is digitally signed
    C:\Windows\system32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\system32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\system32\rpcss.dll => File is digitally signed
    C:\Windows\system32\dnsapi.dll => File is digitally signed
    C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
    C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2015-09-24 21:17

    ==================== End of FRST.txt ============================

    Addition.txt

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    За съжаление още чакаме отговор относно анализа на тази зараза. Екипа прави всичко по силите си, но в момента довършват анализа на 0x0 разширението на криптиращ вирус и след това ще дойде и реда на този вариант. Бтв варианта на 0x0 е доста сходен с този, само че e-mail-a е file1@openmailbox.org, а не file2, както е във вашия случай.

    https://forums.malwarebytes.org/index.php?/topic/173292-laptop-infected-with-some-ransomeware-all-files-now-with-ext-0x0/

    Редактирано от B-boy/StyLe/ (преглед на промените)

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Регистрирайте се или влезете в профила си за да коментирате

    Трябва да имате регистрация за да може да коментирате това

    Регистрирайте се

    Създайте нова регистрация в нашия форум. Лесно е!

    Нова регистрация

    Вход

    Имате регистрация? Влезте от тук.

    Вход


    ×

    Информация

    Този сайт използва бисквитки (cookies), за най-доброто потребителско изживяване. С използването му, вие приемате нашите Условия за ползване.