Additional scan result of Farbar Recovery Scan Tool (x64) Version:27-01-2016 Ran by NorthP (2016-01-30 14:44:55) Running from C:\Users\NorthP\Downloads Windows 7 Professional Service Pack 1 (X64) (2014-07-24 04:43:21) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= 547DC3925A4847FA9392 (S-1-5-21-2954068360-2895956722-819088778-1011 - Limited - Enabled) Administrator (S-1-5-21-2954068360-2895956722-819088778-500 - Administrator - Disabled) Guest (S-1-5-21-2954068360-2895956722-819088778-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-2954068360-2895956722-819088778-1002 - Limited - Enabled) NorthP (S-1-5-21-2954068360-2895956722-819088778-1000 - Administrator - Enabled) => C:\Users\NorthP ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-2954068360-2895956722-819088778-1000\...\uTorrent) (Version: 3.4.5.41372 - BitTorrent Inc.) 7-Zip 15.14 (x64) (HKLM\...\7-Zip) (Version: 15.14 - Igor Pavlov) 7-Zip 9.38 beta (HKLM-x32\...\7-Zip) (Version: - ) A.O.M. Audio Plug-ins VST 32bit 1.7.3 (HKLM-x32\...\{DE0C1E9D-D9EB-4253-91FF-406C591784D1}) (Version: 1.7.3 - A.O.M.) A.O.M. License Manager 1.1.1 (HKLM-x32\...\{351AC60C-4011-4BD8-8FF3-62964A49F2B8}) (Version: 1.1.1 - A.O.M.) AcusticaAudio Nebula3 (HKLM-x32\...\Nebula3) (Version: - ) Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated) Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated) Adobe Reader XI (11.0.14) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.14 - Adobe Systems Incorporated) Advance Software Package (HKLM-x32\...\{709039fd-7535-4305-b6d6-8b32bd7f702d}) (Version: 1.0.0.0 - Akai Professional) Advance Software Package Authorizer (HKLM-x32\...\{C956B788-F487-4678-A0FF-6DAC9B86B215}) (Version: 1.0.0.0 - Akai Professional) Akai Professional ADVANCE 1.0.5 (x64) (HKLM\...\{780B4127-9D50-4C85-87D1-BA4A6EC69819}) (Version: 1.0.5 - Akai Professional) Akai Trap Drums (HKLM-x32\...\Akai Trap Drums_is1) (Version: - ) AmpliTube 3 version 3.15.0 (HKLM\...\{DA5202AC-12BF-4330-B8EA-BC77F991FA1C}_is1) (Version: 3.15.0 - IK Multimedia) AmpliTube 4 version 4.0.1 (HKLM\...\{21B0C8E0-7EB7-4832-B764-20A7DAE86E02}_is1) (Version: 4.0.1 - IK Multimedia) Analog Factory 2.5 (HKLM-x32\...\Analog Factory_is1) (Version: - Arturia) Antares Autotune Evo VST RTAS v6.0.9 (HKLM-x32\...\Antares Autotune Evo VST RTAS_is1) (Version: - ) Apple Application Support (32-bit) (HKLM-x32\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.) Apple Application Support (64-bit) (HKLM\...\{B255D495-4734-4E9B-B4F5-96702FD4A7B9}) (Version: 3.2 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{5D61F006-168C-4B8B-B7FD-F113C10AE0E4}) (Version: 8.2.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.12 - Michael Tippach) Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team) AudioEase Altiverb VST RTAS v6.12 (HKLM-x32\...\AudioEase Altiverb VST RTAS_is1) (Version: - ) Avid Effects (HKLM-x32\...\{A86F1158-A7F7-4E8C-98E3-88F4996E85EB}) (Version: 10.3.9 - Avid Technology, Inc.) Avid HD Driver (x64) (HKLM\...\{658E112A-8776-4430-A275-D9248732DFB9}) (Version: 10.3.9 - Avid Technology, Inc.) Avid Pro Tools (HKLM-x32\...\{8E60BB71-7EF3-42ED-9F10-AA041F25841A}) (Version: 10.3.9 - Avid Technology, Inc.) Best Service Complete Classical Collection (HKLM-x32\...\Best Service Complete Classical Collection) (Version: - ) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Bonjour Print Services (HKLM\...\{0DA20600-6130-443B-9D4B-F30520315FA6}) (Version: 2.0.2.0 - Apple Inc.) Canon IJ Network Scan Utility (HKLM-x32\...\Canon_IJ_Network_Scan_UTILITY) (Version: - ) Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.1.1 - Canon Inc.) Canon MP Navigator EX 3.1 (HKLM-x32\...\MP Navigator EX 3.1) (Version: - ) Canon MX350 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX350_series) (Version: - Canon Inc.) Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.2.1 - Canon Inc.) Cardiak The Clinic Vol1 (HKLM-x32\...\Cardiak The Clinic Vol1) (Version: - ) Catanya 1.0.1 (HKLM-x32\...\{62F13B4D-FD48-4317-8E55-06DB7B397F49}_is1) (Version: - 7Aliens) Connect (HKLM-x32\...\Connect) (Version: 1.4.14232.0 - Cisco Consumer Products LLC) Contents64 (Version: 17.0.0.249 - Corel Corporation) Hidden Corel VideoStudio Pro X7 (HKLM-x32\...\_{77B3BEA9-835C-4DDF-BCE7-1510271E4E37}) (Version: 17.1.0.22 - Corel Corporation) Custom Shop version 1.7.0 (HKLM-x32\...\{21BAD046-50EC-49E2-BE7B-F9729704F2C3}_is1) (Version: 1.7.0 - IK Multimedia) CuteFTP 9 (HKLM-x32\...\{89B9E358-75C6-4C6B-BD38-803FF156CC4B}) (Version: 9.0.0 - Globalscape) Dell Custom Help (Version: 15.06.0000.0090 - Intel Corporation) Hidden Dropbox (HKU\S-1-5-21-2954068360-2895956722-819088778-1000\...\Dropbox) (Version: 3.12.5 - Dropbox, Inc.) East West Colossus (HKLM-x32\...\East West Colossus) (Version: - ) eLicenser Control (HKLM-x32\...\eLicenser Control) (Version: - Steinberg Media Technologies GmbH) f.lux (HKU\S-1-5-21-2954068360-2895956722-819088778-1000\...\Flux) (Version: - ) FL Studio 10 (HKLM-x32\...\FL Studio 10) (Version: - Image-Line) FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version: - Image-Line) FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version: - Image-Line) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 48.0.2564.97 - Google Inc.) Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Talk Plugin (HKLM-x32\...\{F9B579C2-D854-300A-BE62-A09EB9D722E4}) (Version: 5.41.3.0 - Google) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden Hybrid Content (HKLM-x32\...\{9E822C67-B1C4-4E85-870C-23ADE106BB4F}) (Version: 3.0.0.18468 - AIR Music Tech GmbH) ICA (x32 Version: 17.0.0.249 - Corel Corporation) Hidden IK Multimedia Authorization Manager version 1.0.15 (HKLM\...\{85BC0DCB-69E5-4279-AA25-F108EF896588}_is1) (Version: 1.0.15 - IK Multimedia) IL Download Manager (HKLM-x32\...\IL Download Manager) (Version: - Image-Line) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1310 - Intel Corporation) Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{DA2600C1-6BDF-4FD1-1212-148929CC1385}) (Version: 2.6.1212.0302 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.1.0.1058 - Intel Corporation) Intel(R) Update Manager (HKLM-x32\...\{B991A1BC-DE0F-41B3-9037-B2F948F706EC}) (Version: 3.1.1228 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.0.19 - Intel Corporation) Intel® PROSet/Wireless Software (HKLM-x32\...\{80074a53-9c74-49ed-bad4-0fb14b19a01d}) (Version: 15.6.0 - Intel Corporation) IPM_VS_Pro64 (Version: 17.0 - Corel Corporation) Hidden iTunes (HKLM\...\{6CF1A7E2-8001-4870-9F18-3C6CDD6FE9E3}) (Version: 12.2.1.16 - Apple Inc.) iZotope Iris (HKLM-x32\...\iZotope Iris_is1) (Version: 1.01 - iZotope, Inc.) iZotope Nectar 2 Production Suite (HKLM-x32\...\iZotope Nectar 2 Production Suite_is1) (Version: 2.02 - iZotope, Inc.) iZotope Ozone 5 Advanced (HKLM-x32\...\iZotope Ozone 5 Advanced_is1) (Version: 5.05 - iZotope, Inc.) License Support (HKLM-x32\...\InstallShield_{3165EA9B-36CC-499B-96FF-36FC30E10EF4}) (Version: 1.2.0.5555 - PACE Anti-Piracy, Inc.) License Support (Version: 1.2.0.5555 - PACE Anti-Piracy, Inc.) Hidden Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes) MediaHuman YouTube to MP3 Converter version 3.8.3 (HKLM-x32\...\MediaHuman YouTube to MP3 Converter_is1) (Version: 3.8.3 - ) Melodyne Runtime 4.1 (x64) (HKLM\...\{53EE2829-E9DB-4913-B3EA-96F10F84E98B}) (Version: 1.0.1 - Celemony Software GmbH) Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) MixMeister BPM Analyzer 1.0 (HKLM-x32\...\MixMeister BPM Analyzer_is1) (Version: - MixMeister Technology LLC) MOTU Hardware (HKLM\...\{E45DD703-F7E6-4C4E-85CB-42208A41E222}) (Version: 4.0.6.6814 - MOTU) MPC 1.0.0 (HKLM-x32\...\MPC_is1) (Version: 1.0.0 - Akai Professional) MPC 1.9.1 (HKLM\...\com.akaipro.mpc.standard_is1) (Version: 1.9.1 - Akai Professional) MPC Renaissance driver (HKLM\...\USB_AUDIO_DEusb-audio.deAkaiACV0) (Version: - ) Native Instruments Berlin Concert Grand (HKLM-x32\...\Native Instruments Berlin Concert Grand) (Version: - Native Instruments) Native Instruments Controller Editor (HKLM-x32\...\Native Instruments Controller Editor) (Version: - Native Instruments) Native Instruments FM8 (HKLM-x32\...\Native Instruments FM8) (Version: - Native Instruments) Native Instruments Guitar Rig 5 (HKLM-x32\...\Native Instruments Guitar Rig 5) (Version: - Native Instruments) Native Instruments Kontakt 5 (HKLM-x32\...\Native Instruments Kontakt 5) (Version: 5.5.1.451 - Native Instruments) Native Instruments Massive (HKLM-x32\...\Native Instruments Massive) (Version: 1.4.0.292 - Native Instruments) Native Instruments RC 24 (HKLM-x32\...\Native Instruments RC 24) (Version: 1.1.1.427 - Native Instruments) Native Instruments RC 48 (HKLM-x32\...\Native Instruments RC 48) (Version: 1.1.1.427 - Native Instruments) Native Instruments Reaktor 5 (HKLM-x32\...\Native Instruments Reaktor 5) (Version: 5.9.0.725 - Native Instruments) Native Instruments Rise and Hit (HKLM-x32\...\Native Instruments Rise and Hit) (Version: 1.2.0.10 - Native Instruments) Native Instruments Scarbee Funk Guitarist (HKLM-x32\...\Native Instruments Scarbee Funk Guitarist) (Version: - Native Instruments) Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: 2.4.4.1428 - Native Instruments) Native Instruments The Mouth (HKLM-x32\...\Native Instruments The Mouth) (Version: - Native Instruments) Native Instruments Una Corda (HKLM-x32\...\Native Instruments Una Corda) (Version: 1.0.0.13 - Native Instruments) Native Instruments VC 160 FX (HKLM-x32\...\Native Instruments VC 160 FX) (Version: 1.1.1.427 - Native Instruments) NinjaGram (HKLM-x32\...\NinjaGram_is1) (Version: - ) Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.4 - Notepad++ Team) NVIDIA 3D Vision Controller Driver 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 311.06 - NVIDIA Corporation) NVIDIA 3D Vision Driver 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 311.06 - NVIDIA Corporation) NVIDIA Graphics Driver 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 311.06 - NVIDIA Corporation) NVIDIA HD Audio Driver 1.3.18.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.18.0 - NVIDIA Corporation) NVIDIA PhysX System Software 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation) PACE License Support Win64 (HKLM-x32\...\InstallShield_{72ad9d51-0903-4fe7-af5d-33b3185fa6e9}) (Version: 2.4.7.0852 - PACE Anti-Piracy, Inc.) PACE License Support Win64 (Version: 2.4.7.0852 - PACE Anti-Piracy, Inc.) Hidden Patch Avid Pro Tools 10.3.4 To Audioz (HKLM-x32\...\Patch Avid Pro Tools 10.3.4 To Audioz) (Version: - ) PCM Native Reverb Bundle (HKLM-x32\...\PCM Native Reverb Bundle) (Version: - Lexicon) PCM Native Reverb Bundle (x32 Version: 1.1.3 - Lexicon) Hidden Playground (HKLM-x32\...\{5AECDA0F-BA8F-4C5A-91B7-F3B8908F61FB}) (Version: 2.2.2.209 - Playground Sessions) PreSonus Studio One version 2.6 (HKLM\...\PreSonus Studio One_is1) (Version: - Copyright (C) 2014 PreSonus Audio Electronics, Inc.) Prism Video File Converter (HKLM-x32\...\Prism) (Version: 2.18 - NCH Software) PSP VintageWarmer2 32bit (HKLM-x32\...\PSP VintageWarmer2 32bit) (Version: 2.5.2 32bit - PSPaudioware.com) QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.) Rapture Pro (HKLM-x32\...\RapturePro_is1) (Version: 2.0 - Cakewalk, Inc.) Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 7.67.1226.2012 - Realtek) ReCycle 2.2.4 (HKLM\...\ReCycle2.2_64_is1) (Version: 2.2.4 - Propellerhead Software AB) reFX Nexus 2.7.0 (32-bit) (HKLM-x32\...\{84D04D4F-2201-4AED-BE9A-FFA62069CA19}_is1) (Version: 2.7.0 - reFX Audio Software Inc.) reFX Vanguard VSTi RTAS v1.8.0 (HKLM-x32\...\reFX Vanguard_is1) (Version: - ) Reverberate 1.916 (HKLM-x32\...\Reverberate) (Version: 1.916 - LiquidSonics) rtpMIDI (HKLM-x32\...\{FD937297-84C3-41A5-B5DF-1FAEEE669D68}) (Version: 1.0.9.225 - Tobias Erichsen) Setup (x32 Version: 17.0.0.249 - Corel Corporation) Hidden Share64 (Version: 17.0.0.249 - Corel Corporation) Hidden Slate Digital FG-X Mastering Processor VST RTAS v1.1.2 (HKLM-x32\...\Slate Digital FG-X Mastering Processor_is1) (Version: - ) Spire Plug-In (x86) (HKLM-x32\...\{7E22E1BC-2B2A-4D70-BC5C-6E2285F3FC33}) (Version: 1.0.17.0 - Reveal Sound Ltd.) Spitfire Audio Library Manager (HKU\S-1-5-21-2954068360-2895956722-819088778-1000\...\c1cc23f14724b4e8) (Version: 1.0.4.25 - Spitfire Audio LLP) SPL Analog Code Bundle v1.1 (HKLM-x32\...\SPL Analog Code Bundle_is1) (Version: - ) Steinberg Hypersonic VSTi DXi v2.0 (HKLM-x32\...\Steinberg Hypersonic VSTi DXi_is1) (Version: - ) SuperWave Equinoxe (Poly 20) (HKLM-x32\...\{ACE79486-860F-4413-801C-CA0115FAE1E5}) (Version: 1.0 - SuperWave) SuperWave Equinoxe Extreme HD Edition (Poly 20) (HKLM-x32\...\{CE6B55F8-6BBE-4999-A050-E01EE5A595F7}) (Version: 1.0 - SuperWave) SuperWave Ultimate Bundle (HKLM-x32\...\{969CF678-4963-433F-A927-FDA400A6A68A}) (Version: 1.1 - SuperWave) Switch Sound File Converter (HKLM-x32\...\Switch) (Version: - NCH Software) TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.39052 - TeamViewer) Technitium MAC Address Changer v6.0.5 (HKLM-x32\...\TMACv6.0) (Version: 6.0.5 - Technitium) Tone2 Gladiator VSTi v2.2 (HKLM-x32\...\Tone2 Gladiator VSTi_is1) (Version: - ) Tony Hawk's Underground 2 (HKLM-x32\...\InstallShield_{EF1394D4-9FB6-4F1F-9A09-20FF3033AE14}) (Version: 1.00.0000 - Activision) Tony Hawk's Underground 2 (x32 Version: 1.00.0000 - Activision) Hidden T-RackS CS version 4.9.0 (HKLM\...\{E931EBCC-55F9-4D67-BA0E-D57C4A893A44}_is1) (Version: 4.9.0 - IK Multimedia) VIP (HKLM-x32\...\{B3FC246F-87F6-4476-9E79-F14FB5A1F773}_is1) (Version: 1.0 - Akai Professional) Virtual Tape Machines (HKLM\...\Slate Digital Virtual Tape Machines_is1) (Version: - Slate Digital) VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.4.7.0 - Elaborate Bytes) Visual C++ 64-bit Redistributables (HKLM-x32\...\InstallShield_{FB03650C-B373-4B20-ACA5-B7BA1A8EEE33}) (Version: 1.2.0.5555 - PACE Anti-Piracy, Inc.) Visual C++ Redistributables (HKLM-x32\...\InstallShield_{F03117FA-9270-46B0-9666-0B4BC2CDEBF5}) (Version: 1.2.0.5555 - PACE Anti-Piracy, Inc.) VMR Complete Bundle (HKLM\...\Slate Digital VMR Complete Bundle_is1) (Version: 1.1.0.4 - Slate Digital) VocALign Pro 4 VST (HKLM-x32\...\{EB77C666-B349-4046-8BD3-E4941119E1EF}) (Version: 4.00.0000 - Synchro Arts Ltd) Voxengo SPAN (HKLM\...\Voxengo SPAN_is1) (Version: 2.9 - Voxengo) VSClassic64 (Version: 17.0.0.249 - Corel Corporation) Hidden VSPro64 (Version: 17.0.0.249 - Corel Corporation) Hidden Vst To Rtas Adapter V2.11 (HKLM-x32\...\Vst To Rtas Adapter V2.11) (Version: "2.11" - "FXpansion") Waterfox 43.0.4 (x64 en-US) (HKLM\...\Waterfox 43.0.4 (x64 en-US)) (Version: 43.0.4 - Mozilla) Waves Complete V9r16 (HKLM-x32\...\{91000001-C561-4E32-99EB-3C5AD3683A70}) (Version: 9.1.16 - Waves) WinRAR 5.00 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH) WinRAR 5.10 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH) Winrar Activator version 1.2 (HKLM-x32\...\{AE0B3F2A-EB65-4D01-A3E1-6D879C6AAF2A}_is1) (Version: 1.2 - Rarlab) Xpand!2 (HKLM-x32\...\{64af9840-a991-4fd5-a976-21d7a1faaafc}) (Version: 2.2.5.18877 - AIR Music Tech GmbH) Xpand!2 Content (x32 Version: 2.2.5.18877 - AIR Music Tech GmbH) Hidden Xpand!2 Factory Content (x32 Version: 2.2.5.18874 - AIR Music Tech GmbH) Hidden Xpand!2 VST32 (x32 Version: 2.2.5.18877 - AIR Music Tech GmbH) Hidden ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-2954068360-2895956722-819088778-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\NorthP\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2954068360-2895956722-819088778-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\NorthP\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll => No File CustomCLSID: HKU\S-1-5-21-2954068360-2895956722-819088778-1000_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\NorthP\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll => No File CustomCLSID: HKU\S-1-5-21-2954068360-2895956722-819088778-1000_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\NorthP\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll => No File CustomCLSID: HKU\S-1-5-21-2954068360-2895956722-819088778-1000_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\NorthP\AppData\Local\Google\Update\1.3.28.13\psuser_64.dll => No File CustomCLSID: HKU\S-1-5-21-2954068360-2895956722-819088778-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\NorthP\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll => No File CustomCLSID: HKU\S-1-5-21-2954068360-2895956722-819088778-1000_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\NorthP\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll => No File CustomCLSID: HKU\S-1-5-21-2954068360-2895956722-819088778-1000_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32 -> C:\Users\NorthP\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-2954068360-2895956722-819088778-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\NorthP\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll => No File CustomCLSID: HKU\S-1-5-21-2954068360-2895956722-819088778-1000_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32 -> C:\Users\NorthP\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll => No File CustomCLSID: HKU\S-1-5-21-2954068360-2895956722-819088778-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\NorthP\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-2954068360-2895956722-819088778-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\NorthP\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2954068360-2895956722-819088778-1000_Classes\CLSID\{F6BF8414-962C-40FE-90F1-B80A7E72DB9A}\InprocServer32 -> C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8}\tsmf.dll => No File <==== ATTENTION CustomCLSID: HKU\S-1-5-21-2954068360-2895956722-819088778-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\NorthP\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2954068360-2895956722-819088778-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\NorthP\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2954068360-2895956722-819088778-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\NorthP\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2954068360-2895956722-819088778-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\NorthP\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2954068360-2895956722-819088778-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\NorthP\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2954068360-2895956722-819088778-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\NorthP\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2954068360-2895956722-819088778-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\NorthP\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2954068360-2895956722-819088778-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\NorthP\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2954068360-2895956722-819088778-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\NorthP\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {1206615B-AF30-44E1-8E3A-F389AF0BC4E7} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2954068360-2895956722-819088778-1000UA => C:\Users\NorthP\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-23] (Dropbox, Inc.) Task: {22905B34-FC31-460E-8E9B-5B3DCDD5D212} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25] (Intel Corporation) Task: {22A9BFB1-AD7E-4DF8-93AA-F2F741A86B94} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2954068360-2895956722-819088778-1000Core => C:\Users\NorthP\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.) Task: {3A92F94B-7A4B-49FE-9B73-7241175C5E01} - System32\Tasks\SpyHunter4Startup => C:\Users\NorthP\Desktop\SpyHunter 4.21.10.4585 Portable by wood\SpyHunter4.exe Task: {49F815C1-00C4-463D-ABBF-0A77E3EF62AE} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2954068360-2895956722-819088778-1000Core => C:\Users\NorthP\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-23] (Dropbox, Inc.) Task: {5A40E926-9E86-4B89-9CFD-B12311724371} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto Task: {64F70725-DE46-4E17-95AF-8C791AAA5CAD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.) Task: {7679E8F5-DA10-4071-95D3-789B3E11D50A} - System32\Tasks\{676A670A-C045-4280-9B86-C96A2985BD1E} => c:\program files\waterfox\waterfox.exe [2016-01-30] (Waterfox) Task: {9CC7D65E-59A7-4D05-B443-79BB68D95CFD} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25] (Intel Corporation) Task: {BBD77073-D68F-4C3D-8A55-0F6E8F4E7002} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.) Task: {BC78E8B0-22A0-485D-81CC-AE0643210B62} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2954068360-2895956722-819088778-1000UA => C:\Users\NorthP\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.) Task: {DD9F510C-95F4-499A-90C8-BAC5BC372FF4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask => start sppsvc Task: {FB5B1EAB-014E-4677-BDD3-0E048829BE02} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2954068360-2895956722-819088778-1000Core.job => C:\Users\NorthP\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2954068360-2895956722-819088778-1000UA.job => C:\Users\NorthP\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2954068360-2895956722-819088778-1000Core.job => C:\Users\NorthP\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2954068360-2895956722-819088778-1000UA.job => C:\Users\NorthP\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) ==================== Loaded Modules (Whitelisted) ============== 2014-07-23 21:37 - 2013-01-18 10:00 - 00087328 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2015-05-15 15:26 - 2015-05-15 15:26 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2015-05-15 15:26 - 2015-05-15 15:26 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2015-07-14 12:56 - 2015-07-14 12:56 - 01457968 _____ () C:\Program Files (x86)\MOTU\Audio\MFWAKeys.exe 2015-12-12 20:55 - 2015-10-30 19:59 - 00034768 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd 2015-12-12 20:55 - 2015-10-30 20:00 - 00019408 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\faulthandler.pyd 2015-12-12 20:55 - 2015-12-08 16:36 - 00022848 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\Crypto.Random.OSRNG.winrandom.pyd 2015-12-12 20:55 - 2015-12-08 16:36 - 00023352 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\Crypto.Util._counter.pyd 2015-12-12 20:55 - 2015-12-08 16:36 - 00042296 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\Crypto.Cipher._AES.pyd 2015-12-12 20:55 - 2015-10-30 19:59 - 00116688 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\pywintypes27.dll 2015-12-12 20:55 - 2015-10-30 19:59 - 00093640 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\_ctypes.pyd 2015-12-12 20:55 - 2015-10-30 19:59 - 00018376 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\select.pyd 2015-12-12 20:55 - 2015-12-08 16:36 - 00019760 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd 2015-12-12 20:55 - 2015-10-30 20:00 - 00105928 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\win32api.pyd 2015-12-12 20:55 - 2015-10-30 19:59 - 00392144 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\pythoncom27.dll 2015-12-12 20:55 - 2015-12-08 16:36 - 00381752 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd 2015-12-12 20:55 - 2015-10-30 19:59 - 00692688 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\unicodedata.pyd 2015-12-12 20:55 - 2015-12-08 16:36 - 00020816 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd 2015-12-12 20:55 - 2015-10-30 20:00 - 00109520 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd 2015-12-12 20:55 - 2015-12-08 16:36 - 01737032 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd 2015-12-12 20:55 - 2015-12-08 16:36 - 00020808 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd 2015-12-12 20:55 - 2015-12-08 16:36 - 00020800 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\_cffi_python_x66cf7a7cx17a72769.pyd 2015-12-12 20:55 - 2015-12-08 16:36 - 00021840 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\_cffi_unicode_environ_win32_x8bf8e68bx9968e850.pyd 2015-12-12 20:55 - 2015-12-08 16:36 - 00038696 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\fastpath.pyd 2015-12-12 20:55 - 2015-10-30 20:00 - 00024528 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\win32event.pyd 2015-12-12 20:55 - 2015-10-30 20:00 - 00020936 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\mmapfile.pyd 2015-12-12 20:55 - 2015-10-30 20:00 - 00114640 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\win32security.pyd 2015-12-12 20:55 - 2015-12-08 16:36 - 00021320 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\_cffi_pywin_kernel32_xde9e4433x360333f0.pyd 2015-12-12 20:55 - 2015-10-30 20:00 - 00124880 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\win32file.pyd 2015-12-12 20:55 - 2015-10-30 20:00 - 00030160 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\win32pipe.pyd 2015-12-12 20:55 - 2015-10-30 20:00 - 00043472 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\win32process.pyd 2015-12-12 20:55 - 2015-10-30 20:00 - 00175560 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\win32gui.pyd 2015-12-12 20:55 - 2015-10-30 20:00 - 00028616 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\win32ts.pyd 2015-12-12 20:55 - 2015-10-30 20:00 - 00024016 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\win32clipboard.pyd 2015-12-12 20:55 - 2015-10-30 20:00 - 00048592 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\win32service.pyd 2015-12-12 20:55 - 2015-12-08 16:36 - 00024392 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd 2015-12-12 20:55 - 2015-10-30 20:00 - 00036296 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\librsync.dll 2015-12-12 20:55 - 2015-10-30 20:00 - 00024016 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\win32profile.pyd 2015-12-12 20:55 - 2015-12-08 16:36 - 00117056 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\breakpad.client.windows.handler.pyd 2015-12-12 20:55 - 2015-12-08 16:36 - 00023376 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd 2015-12-12 20:55 - 2015-10-30 19:59 - 00134608 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\_elementtree.pyd 2015-12-12 20:55 - 2015-10-30 19:59 - 00134088 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\pyexpat.pyd 2015-12-12 20:55 - 2015-10-30 20:00 - 00240584 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\jpegtran.pyd 2015-12-12 20:55 - 2015-12-08 16:36 - 00020280 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd 2015-12-12 20:55 - 2015-12-08 16:36 - 00052024 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd 2015-12-12 20:55 - 2015-12-08 16:36 - 00021304 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\Crypto.Util.strxor.pyd 2015-12-12 20:55 - 2015-10-30 20:00 - 00350152 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\winxpgui.pyd 2015-12-12 20:55 - 2015-12-08 16:36 - 00084792 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL 2015-12-12 20:55 - 2015-12-08 16:36 - 01826608 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd 2015-12-12 20:55 - 2015-10-30 20:00 - 00083912 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\sip.pyd 2015-12-12 20:55 - 2015-12-08 16:36 - 03891504 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd 2015-12-12 20:55 - 2015-12-08 16:36 - 01950000 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd 2015-12-12 20:55 - 2015-12-08 16:36 - 00519984 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd 2015-12-12 20:55 - 2015-12-08 16:36 - 00133936 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd 2015-12-12 20:55 - 2015-12-08 16:36 - 00225080 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd 2015-12-12 20:55 - 2015-12-08 16:36 - 00207672 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd 2015-12-12 20:55 - 2015-12-08 16:36 - 00024904 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\_cffi_wpad_proxy_win_x752e3d61xdcfdcc84.pyd 2015-12-12 20:55 - 2015-12-08 16:36 - 00486704 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd 2015-12-12 20:55 - 2015-12-08 16:36 - 00357680 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd 2015-03-04 16:45 - 2015-10-30 20:01 - 00019920 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll 2015-03-04 16:45 - 2015-10-30 20:00 - 00786904 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll 2015-07-30 11:55 - 2015-10-30 20:00 - 00063448 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\QtQuick\Layouts\qquicklayoutsplugin.dll 2015-03-04 16:45 - 2015-10-30 20:00 - 00019408 _____ () C:\Users\NorthP\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll 2015-01-17 04:27 - 2015-01-17 04:27 - 26940728 _____ () C:\Program Files (x86)\Image-Line\Shared\dsp_ipp.dll 2015-03-18 11:18 - 2015-03-18 11:18 - 00534840 _____ () C:\Program Files (x86)\Image-Line\Shared\QuickFontCache.dll 2014-12-02 14:32 - 2014-12-02 14:32 - 00486712 _____ () C:\Program Files (x86)\Image-Line\Shared\freetype.dll 2015-08-11 04:41 - 2015-08-11 04:41 - 01609496 _____ () C:\Program Files (x86)\Image-Line\FL Studio 12\Plugins\Fruity\Effects\Fruity Limiter\Fruity Limiter.dll 2015-03-11 04:46 - 2015-03-11 04:46 - 00047928 _____ () C:\Program Files (x86)\Image-Line\FL Studio 12\Plugins\VST\Fruity Fast LP.dll 2011-11-15 10:00 - 2011-11-15 10:00 - 09682944 _____ () C:\Program Files (x86)\VstPlugins\BBE Sound\Stomp Ware\BBE Green Screamer.dll 2015-08-11 04:51 - 2015-08-11 04:51 - 01462040 _____ () C:\Program Files (x86)\Image-Line\FL Studio 12\Plugins\Fruity\Effects\Fruity Stereo Shaper\Fruity Stereo Shaper.dll 2014-07-24 00:02 - 2013-01-24 08:57 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\ProgramData:482EE99B1E21CE8C AlternateDataStreams: C:\Users\All Users:482EE99B1E21CE8C AlternateDataStreams: C:\ProgramData\Application Data:482EE99B1E21CE8C AlternateDataStreams: C:\ProgramData\Microsoft:7xcZvmHdFBJnUZimSwk0gtDC96 AlternateDataStreams: C:\ProgramData\Microsoft:gVfN0FPTVfOjPSFjHqANlWH AlternateDataStreams: C:\ProgramData\Microsoft:i2NGGFFAlczLYogETx7Q AlternateDataStreams: C:\ProgramData\Microsoft:ne5y7L4fHVZEgKaOGugDRO AlternateDataStreams: C:\ProgramData\Microsoft:PiFxbFf1UQbLYibTm AlternateDataStreams: C:\ProgramData\Microsoft:SBI6rIn2edCogjBSEO AlternateDataStreams: C:\ProgramData\Microsoft:sJhe70Itpv4JE0DaLZC90 AlternateDataStreams: C:\ProgramData\Microsoft:ZI8ZgrBvyMv5gGpVZ AlternateDataStreams: C:\Users\NorthP\Local Settings:4UNsWCrCgjU6aVv5jyIBgAvdS9ciU1 AlternateDataStreams: C:\Users\NorthP\AppData\Local:4UNsWCrCgjU6aVv5jyIBgAvdS9ciU1 AlternateDataStreams: C:\Users\NorthP\AppData\Local\0haexzEvrlru:loYhfQkyhruyVgOS6jOoJV87Hft4 AlternateDataStreams: C:\Users\NorthP\AppData\Local\Application Data:4UNsWCrCgjU6aVv5jyIBgAvdS9ciU1 AlternateDataStreams: C:\Users\NorthP\AppData\Local\Temp:APgmbFsNHUkqmmBCKq8U AlternateDataStreams: C:\Users\NorthP\AppData\Local\Temp:IkYXe9RayQEnEQVi6m AlternateDataStreams: C:\Users\NorthP\AppData\Local\Temporary Internet Files:ojPTaTF40NGo5ITIFS75BWvL12 ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) IE trusted site: HKU\S-1-5-21-2954068360-2895956722-819088778-1000\...\dell.com -> dell.com ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-13 21:34 - 2009-06-10 16:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-2954068360-2895956722-819088778-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\NorthP\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.0.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0) Windows Firewall is disabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) MSCONFIG\Services: MyWiFiDHCPDNS => 3 ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [{49EB17DD-9037-4EEE-A50C-E30030EABD65}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe FirewallRules: [TCP Query User{6D5105C7-1AF9-4993-8E08-FEB44EFB1DEE}C:\program files (x86)\motu\audio\cuemix fx.exe] => (Allow) C:\program files (x86)\motu\audio\cuemix fx.exe FirewallRules: [UDP Query User{AE726EB5-28F4-4BD1-8BC1-835E565DBF75}C:\program files (x86)\motu\audio\cuemix fx.exe] => (Allow) C:\program files (x86)\motu\audio\cuemix fx.exe FirewallRules: [{C219C125-FB36-4BE3-B0AB-69FE45093836}] => (Allow) C:\Users\NorthP\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{F4AEDB68-60B4-40BD-9C70-567A6D6F1A56}] => (Allow) C:\Users\NorthP\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{3E64C07F-2608-4262-825D-FDC33FD0EFC3}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{33CAD9B3-60A5-4054-82DA-62C72D4BC359}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{6569DCDE-7160-4EAC-95C3-2C9A16A8D5AC}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{8CE7FA2C-357B-4379-86EC-FF86C8B5506A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{6EA70960-D9F0-4C2B-A75D-D301DA4CC8C6}] => (Block) %ProgramFiles% (x86)\Avid\Pro Tools\ProTools.exe FirewallRules: [{626743F8-A3C6-4E7A-B003-B778E0DC1DFC}] => (Block) %ProgramFiles% (x86)\Image-Line\FL Studio 10\FL.exe FirewallRules: [{4C2A8E2B-CB9D-4F8F-A0F0-E8A3D5A8C260}] => (Block) %ProgramFiles% (x86)\FXpansion\Vst To Rtas Adapter V2.11\wrapperconfig2.exe FirewallRules: [{6574E4BE-B3E0-4C04-9E7B-AD312E65E203}] => (Allow) C:\Users\NorthP\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{C9908A67-A569-4243-889A-A3D9604EEC19}] => (Allow) C:\Users\NorthP\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{995D94A7-6296-4CD1-AEED-53594311DCD0}] => (Block) %ProgramFiles%\Corel\Corel VideoStudio Pro X7\vstudio.exe FirewallRules: [{25828A7A-FB24-4F3D-9A85-E50A42D2CE90}] => (Block) %ProgramFiles%\Corel\Corel VideoStudio Pro X7\VSSCap.exe FirewallRules: [{A05196D7-FAB5-4C24-BEF5-688CCC691335}] => (Block) %ProgramFiles%\Corel\Corel VideoStudio Pro X7\PUA.EXE FirewallRules: [{32FF060A-8438-4F75-A0C1-DC06818FA56B}] => (Block) %ProgramFiles%\Corel\Corel VideoStudio Pro X7\MWizard.exe FirewallRules: [{E9116AD0-2A0F-4ACE-8E1C-6E7EFB4E802B}] => (Block) %ProgramFiles%\Corel\Corel VideoStudio Pro X7\DIM.EXE FirewallRules: [{9829325D-EC90-45BA-9614-2B6805ABFFB4}] => (Block) %ProgramFiles%\Corel\Corel VideoStudio Pro X7\APLoading.exe FirewallRules: [{B1DC4EEC-0F66-4479-87B3-C003C8C4A5D3}] => (Block) %ProgramFiles% (x86)\NCH Software\Switch\switch.exe FirewallRules: [{F36AA9AA-FFDE-417D-BF42-332AD464134A}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{70A5D5AC-EFB3-4EB9-9402-1DF889AAD04C}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{77E26E1C-4405-45BB-AA73-025B1A51C0A0}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{7DC428CF-F7B0-4CA4-8370-70B59DE35D98}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{C8416721-66CF-4E53-9CA5-569DEEAD7F7C}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{983E74B9-34B6-4CCE-9D3D-F502BC36660D}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{3587A662-867D-4DCA-AAF4-E1347709928C}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{A44D81E9-DAA8-49B8-BA73-719644D32794}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{263CE094-9993-42BE-A926-13511ACACA63}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{8F79DC80-EDFC-4A93-818C-336603A2E926}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{41049997-DE1A-40F1-8353-F3B4DAA73CBF}] => (Block) %ProgramFiles% (x86)\Avid\Pro Tools\ProTools.exe FirewallRules: [{A273F67C-A729-461D-AEA7-44FDD432F38F}] => (Block) %ProgramFiles% (x86)\Avid\Pro Tools\SoftwareUpdater.exe FirewallRules: [{04351E99-28AA-4B9D-A320-3A1145420E61}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{97F13B6B-8F3D-45C4-8B50-3B7F24CEE440}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{3B4B8D9B-F934-4A43-8F63-4C20370D0310}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{ABE1A58D-8706-476F-AF86-CB08DF96959A}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{8C1A2F4B-CB5B-4B5D-A7A6-9E7676570617}] => (Allow) LPort=21 FirewallRules: [{0BE61AAB-4108-4926-AE8C-20153E9C78F4}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{9C292759-E81E-4B59-B126-362E2DD27C06}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{A49944AB-4443-4941-8275-C5D2EE211C94}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{86370F7A-781B-43F4-87A9-BA1353FFEC95}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{69A4CB10-F9B9-4D09-BB1A-5D8AD68B8864}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{6E4BCA6B-9EF9-46E6-B750-CF865D06ABCD}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{EF3F44A1-0114-4054-AC6A-0D55E53DF7E3}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{60FF89C5-D494-4B56-B8C9-BB0AA9AA3E17}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{17789EF9-BA43-416B-8359-DB78C18BFBE5}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{13F7BB0B-B466-4705-80E8-A5E5456F37B6}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{6A2CD435-87FA-4D0C-8F17-42856132BFFB}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{230EDD15-04E4-4BC4-B1E5-278E9090783A}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{1FFFA385-0830-42DD-AF91-31F1D90D02C5}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{CB31B6AB-BB42-4A2E-BCDB-03DB491ED5B4}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{CB041743-21E9-4C91-BD45-AE6050813195}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{1E412BD0-A08D-44ED-8813-243B06A427D8}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{B53EE6E5-D40F-4B3C-9EAD-7673343447F3}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{2ED75C96-72B3-40D2-B83F-F45828C31FEA}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{BDCF39A0-4821-42D9-BF69-F02E8DCF1331}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{B8BEF49C-DFC0-44F2-88E8-8F84A927E491}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{4FF5A66B-63D2-4535-9C06-BF5DEF8C4CFE}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{A5733666-8269-4719-B712-AF9331864C6D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{8D16F47E-C673-4CEB-B458-C9DD241BF492}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{59B1C2F6-341A-4DBC-BCDE-8B8114FE5F18}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{D6BA5565-B72B-4397-8AD2-EB0125E11FFB}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{AB48CCA0-CA46-4912-937E-7A204FAB3BF6}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{E26FB60D-29A8-4F75-AD8B-E41268CDB7AF}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{A54EF2BB-B43A-45BF-A4D8-19E0B72A191E}] => (Allow) C:\Program Files\iTunes\iTunes.exe FirewallRules: [{331DC4FE-37EE-489B-9476-C4CC6D775A26}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{2D07DFDE-2AC2-4D3D-B545-35AF6EB3471C}] => (Block) %ProgramFiles% (x86)\IK Multimedia\AmpliTube 3\AuthorizationManagerInstaller.exe FirewallRules: [{2F5F234A-750D-4DF9-B9B1-BA605EEE8E70}] => (Block) %ProgramFiles% (x86)\IK Multimedia\AmpliTube 3\CustomShopInstaller.exe FirewallRules: [{67CC9438-AB40-4B47-A675-966051CCDC22}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{E912A696-6A61-4476-BC11-F1BA79210285}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{AD11DB5B-CD19-4FA9-A4DE-53AE96BC250D}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{D033C81E-5203-49FA-BA14-AB4C1165FF05}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{94E0F86F-DF69-40DB-9E3F-01F37E815852}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{A42F5257-BB4A-40A1-9078-DAD33C463A8B}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{80214936-5DB3-4EDB-87BA-B60F2CD37D0D}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{DDBDBD1E-2856-46D2-8B88-B9F809114D02}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{B4FA1334-22F2-4FDF-AE06-510F7C1A60FE}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{795693DF-8820-4034-A077-4BA92AE3D6A0}] => (Allow) C:\Program Files (x86)\Tobias Erichsen\rtpMIDI\rtpMIDISvc.exe FirewallRules: [{6F34692A-D02D-426E-AB9F-551ED0F6E504}] => (Allow) C:\Program Files\Waterfox\waterfox.exe FirewallRules: [{BE0A8906-35F4-4DCC-AF14-D1EABC7CDCF1}] => (Allow) C:\Program Files\Waterfox\waterfox.exe ==================== Restore Points ========================= 29-01-2016 20:12:25 Installed ESET NOD32 Antivirus 30-01-2016 03:55:14 JRT Pre-Junkware Removal 30-01-2016 14:26:47 Removed MOTU Hardware 30-01-2016 14:28:11 Installed MOTU Hardware ==================== Faulty Device Manager Devices ============= Name: Intel(R) Centrino(R) Wireless Bluetooth(R) 4.0 + High Speed Adapter Description: Intel(R) Centrino(R) Wireless Bluetooth(R) 4.0 + High Speed Adapter Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974} Manufacturer: Intel Corporation Service: BTHUSB Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Realtek PCIe GBE Family Controller Description: Realtek PCIe GBE Family Controller Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Realtek Service: RTL8167 Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: High Definition Audio Device Description: High Definition Audio Device Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: HdAudAddService Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (01/30/2016 02:18:33 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program uTorrent.exe version 3.4.5.41372 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 13f4 Start Time: 01d15b92ec67bad5 Termination Time: 2 Application Path: C:\Users\NorthP\AppData\Roaming\uTorrent\uTorrent.exe Report Id: 3dd42a27-c786-11e5-b156-a9f8e233d4a1 Error: (01/30/2016 02:02:40 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: mDNSCoreReceiveResponse: Unexpected conflict discarding 19 1.5.4.1.C.6.1.0.8.7.1.9.3.9.5.7.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR NorthP-PC-2.local. Error: (01/30/2016 02:02:40 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: mDNSCoreReceiveResponse: Received from 192.168.0.13:5353 17 1.5.4.1.C.6.1.0.8.7.1.9.3.9.5.7.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR NorthP-PC.local. Error: (01/30/2016 02:02:40 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: mDNSCoreReceiveResponse: Unexpected conflict discarding 19 13.0.168.192.in-addr.arpa. PTR NorthP-PC-2.local. Error: (01/30/2016 02:02:40 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: mDNSCoreReceiveResponse: Received from 192.168.0.13:5353 17 13.0.168.192.in-addr.arpa. PTR NorthP-PC.local. Error: (01/30/2016 02:02:39 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Local Hostname NorthP-PC.local already in use; will try NorthP-PC-2.local instead Error: (01/30/2016 02:02:39 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: mDNSCoreReceiveResponse: ProbeCount 1; will deregister 16 NorthP-PC.local. AAAA FE80:0000:0000:0000:7593:9178:016C:1451 Error: (01/30/2016 02:02:39 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: mDNSCoreReceiveResponse: Received from 192.168.0.13:5353 16 NorthP-PC.local. AAAA FD00:BC4D:FB4C:C002:7593:9178:016C:1451 Error: (01/30/2016 02:02:39 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: mDNSCoreReceiveResponse: Ignoring response received before we even began probing: 4 NorthP-PC.local. Addr 192.168.0.13 Error: (01/30/2016 02:02:39 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: ResolveSimultaneousProbe: 000000000151F4E0 Our Record 2 won: 887D1E86 16 NorthP-PC.local. AAAA FE80:0000:0000:0000:7593:9178:016C:1451 System errors: ============= Error: (01/30/2016 02:38:09 PM) (Source: NetBT) (EventID: 4321) (User: ) Description: The name "NORTHP-PC :20" could not be registered on the interface with IP address 192.168.0.13. The computer with the IP address 192.168.0.11 did not allow the name to be claimed by this computer. Error: (01/30/2016 02:38:09 PM) (Source: Server) (EventID: 2505) (User: ) Description: The server could not bind to the transport \Device\NetBT_Tcpip_{DF6CBC8C-0C31-474F-A265-AFB5762A7CC7} because another computer on the network has the same name. The server could not start. Error: (01/30/2016 02:38:08 PM) (Source: NetBT) (EventID: 4321) (User: ) Description: The name "NORTHP-PC :0" could not be registered on the interface with IP address 192.168.0.13. The computer with the IP address 192.168.0.11 did not allow the name to be claimed by this computer. Error: (01/30/2016 02:33:48 PM) (Source: NetBT) (EventID: 4321) (User: ) Description: The name "NORTHP-PC :0" could not be registered on the interface with IP address 192.168.0.13. The computer with the IP address 192.168.0.11 did not allow the name to be claimed by this computer. Error: (01/30/2016 02:03:15 PM) (Source: WMPNetworkSvc) (EventID: 14332) (User: ) Description: WMPNetworkSvc0x80070420 Error: (01/30/2016 02:02:38 PM) (Source: NetBT) (EventID: 4321) (User: ) Description: The name "NORTHP-PC :20" could not be registered on the interface with IP address 192.168.0.13. The computer with the IP address 192.168.0.11 did not allow the name to be claimed by this computer. Error: (01/30/2016 02:02:38 PM) (Source: Server) (EventID: 2505) (User: ) Description: The server could not bind to the transport \Device\NetBT_Tcpip_{DF6CBC8C-0C31-474F-A265-AFB5762A7CC7} because another computer on the network has the same name. The server could not start. Error: (01/30/2016 02:02:33 PM) (Source: NetBT) (EventID: 4321) (User: ) Description: The name "NORTHP-PC :0" could not be registered on the interface with IP address 192.168.0.13. The computer with the IP address 192.168.0.11 did not allow the name to be claimed by this computer. Error: (01/30/2016 01:46:59 PM) (Source: NetBT) (EventID: 4321) (User: ) Description: The name "NORTHP-PC :20" could not be registered on the interface with IP address 192.168.0.13. The computer with the IP address 192.168.0.11 did not allow the name to be claimed by this computer. Error: (01/30/2016 01:46:59 PM) (Source: Server) (EventID: 2505) (User: ) Description: The server could not bind to the transport \Device\NetBT_Tcpip_{DF6CBC8C-0C31-474F-A265-AFB5762A7CC7} because another computer on the network has the same name. The server could not start. CodeIntegrity: =================================== Date: 2015-08-10 11:00:06.692 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2015-08-10 11:00:06.664 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-09-08 20:28:21.285 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\akaiacv0m.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-09-08 20:28:21.261 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\akaiacv0m.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-09-08 20:27:44.086 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\akaiacv0m.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2014-09-08 20:27:44.062 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\akaiacv0m.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i7-4770 CPU @ 3.40GHz Percentage of memory in use: 17% Total physical RAM: 32719.21 MB Available physical RAM: 27102.02 MB Total Virtual: 65436.61 MB Available Virtual: 59777.53 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:1862.79 GB) (Free:872.9 GB) NTFS Drive d: (New Volume) (Fixed) (Total:1862.89 GB) (Free:536.78 GB) NTFS Drive k: (Dell USB Portable HDD) (Fixed) (Total:931.51 GB) (Free:22.76 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 1863 GB) (Disk ID: 639B46A3) Partition: GPT. ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 00000000) Partition: GPT. ======================================================== Disk: 2 (MBR Code: Windows 7 or 8) (Size: 29.8 GB) (Disk ID: 92122F69) Partition 1: (Not Active) - (Size=29.8 GB) - (Type=84) ======================================================== Disk: 7 (Size: 931.5 GB) (Disk ID: E9E515C3) Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS) ==================== End of Addition.txt ============================