Additional scan result of Farbar Recovery Scan Tool (x64) Version:27-02-2016
Ran by [removed] (2016-02-28 09:33:54)
Running from C:\Users\[removed]\Downloads
Windows 10 Home (X64) (2016-01-05 03:30:58)
Boot Mode: Safe Mode (minimal)
==========================================================


==================== Accounts: =============================

05DDAB0C5A0C4D84BB4D (S-1-5-21-2948202854-996105189-3096935256-1002 - Limited - Enabled)
Administrator (S-1-5-21-2948202854-996105189-3096935256-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2948202854-996105189-3096935256-503 - Limited - Disabled)
Guest (S-1-5-21-2948202854-996105189-3096935256-501 - Limited - Disabled)
Mymla (S-1-5-21-2948202854-996105189-3096935256-1001 - Administrator - Enabled) => C:\Users\Mymla

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Out of date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Out of date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.010.20059 - Adobe Systems Incorporated)
AmpliTube 3 version 3.11.0 (HKLM\...\{DA5202AC-12BF-4330-B8EA-BC77F991FA1C}_is1) (Version: 3.11.0 - IK Multimedia)
Any Video Converter Ultimate 5.8.4 (HKLM-x32\...\Any Video Converter Ultimate_is1) (Version:  - Any-Video-Converter.com)
Apple Application Support (HKLM-x32\...\{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}) (Version: 2.1.7 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.12 - Michael Tippach)
Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)
AudioEase Altiverb VST RTAS v6.12 (HKLM-x32\...\AudioEase Altiverb VST RTAS_is1) (Version:  - )
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 11.1.2253 - AVAST Software)
Avid HD Driver (x64) (HKLM\...\{658E112A-8776-4430-A275-D9248732DFB9}) (Version: 10.3.7 - Avid Technology, Inc.)
BBE D82 Sonic Maximizer VST RTAS v2.0 (HKLM-x32\...\BBE D82 Sonic Maximizer VST RTAS_is1) (Version:  - )
BitTorrent (HKU\S-1-5-21-2948202854-996105189-3096935256-1001\...\BitTorrent) (Version: 7.9.5.41713 - BitTorrent Inc.)
Clickteam Fusion 2.5 Developer (HKLM-x32\...\Clickteam Fusion 2.5 Developer) (Version:  - )
Csound6 6.07.0beta2 (HKLM-x32\...\{4BCEDC5F-C6D2-4869-9097-3F1753739F35}_is1) (Version: 6 - Csound)
Custom Shop version 1.3.0 (HKLM-x32\...\{21BAD046-50EC-49E2-BE7B-F9729704F2C3}_is1) (Version: 1.3.0 - IK Multimedia)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
East West Colossus (HKLM-x32\...\East West Colossus) (Version:  - )
East West EWQLSO Gold Edition (HKLM-x32\...\East West EWQLSO Gold Edition) (Version:  - )
Eddie's Hair (HKU\S-1-5-21-2948202854-996105189-3096935256-1001\...\Eddie's Hair) (Version:  - )
FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version:  - Image-Line)
FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version:  - Image-Line)
GIMP 2.8.16 (HKLM\...\GIMP-2_is1) (Version: 2.8.16 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 48.0.2564.116 - Google Inc.)
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
IK Multimedia Authorization Manager version 1.0.9 (HKLM\...\{85BC0DCB-69E5-4279-AA25-F108EF896588}_is1) (Version: 1.0.9 - IK Multimedia)
IL Download Manager (HKLM-x32\...\IL Download Manager) (Version:  - Image-Line)
Java 8 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218071F0}) (Version: 8.0.710.15 - Oracle Corporation)
KMSpico (HKLM\...\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1) (Version:  - )
KNOCK DONAGH OFF! (HKU\S-1-5-21-2948202854-996105189-3096935256-1001\...\KNOCK DONAGH OFF!) (Version:  - )
Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Melodyne 3.1 (x32 Version: 3.1.0200 - Celemony Software GmbH) Hidden
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2016 - en-us (HKLM\...\ProplusRetail - en-us) (Version: 16.0.6568.2025 - Microsoft Corporation)
Microsoft Project Professional 2016 - en-us (HKLM\...\ProjectProRetail - en-us) (Version: 16.0.6568.2025 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visio Professional 2016 - en-us (HKLM\...\VisioProRetail - en-us) (Version: 16.0.6568.2025 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mitigation 112 (HKU\S-1-5-21-2948202854-996105189-3096935256-1001\...\Mitigation 112) (Version:  - )
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MusicLab RealLPC (HKLM\...\{38209080-8888-4418-8117-D190FC71BF58}) (Version: 3.0 - MusicLab, Inc.)
MusicLab RealRick (32-bit) (x32 Version: 1.0.1.7121 - MusicLab, Inc.) Hidden
MusicLab RealRick (64-bit) (Version: 1.0.1.7121 - MusicLab, Inc.) Hidden
MusicLab RealRick (HKLM-x32\...\{a9cfa59a-9581-4812-b2fe-a195dbbba1d6}) (Version: 1.0.1.7121 - MusicLab, Inc.)
MusicLab RealRick Sound Bank (x32 Version: 1.0.1.7121 - MusicLab, Inc.) Hidden
MusicLab RealStrat (HKLM\...\{58206080-8888-4418-8117-D190FC71BF58}) (Version: 3.0 - MusicLab, Inc.)
MusicLab Virtual MIDI Driver (HKLM\...\{A30B7FD7-04A1-46e1-ABDF-FD592C113253}) (Version: 2.0.2.0 - MusicLab, Inc.)
Native Instruments FM8 (HKLM-x32\...\Native Instruments FM8) (Version: 1.4.0.1498 - Native Instruments)
Native Instruments FM8 v1.0.1.002 VSTi DXi RTAS (HKLM-x32\...\Native Instruments FM8 v1.0.1.002 VSTi DXi RTAS) (Version:  - )
Native Instruments Kontakt 5 (HKLM-x32\...\Native Instruments Kontakt 5) (Version: 5.5.0.409 - Native Instruments)
Nomad Bundle VST (HKLM-x32\...\{C9722FA7-170E-42C6-876E-2D87AD93942C}) (Version: 2.00.0000 - Nomad Factory Inc)
Nomad Factory Liquid Bundle VST v1.6 (HKLM-x32\...\Nomad Factory Liquid Bundle VST v1.6) (Version:  - )
NomadFactory Analog Mastering Tools VST RTAS v1.0 (HKLM-x32\...\NomadFactory Analog Mastering Tools VST RTAS_is1) (Version:  - )
NomadFactory Blue Tubes Analog TrackBox VST RTAS v1.3 (HKLM-x32\...\NomadFactory Blue Tubes Analog TrackBox VST RTAS_is1) (Version:  - )
NomadFactory Blue Tubes Dynamics Pack VST RTAS v3.2 (HKLM-x32\...\NomadFactory Blue Tubes Dynamics Pack VST RTAS_is1) (Version:  - )
NomadFactory Blue Tubes Effects Pack VST RTAS v3.2 (HKLM-x32\...\NomadFactory Blue Tubes Effects Pack VST RTAS_is1) (Version:  - )
NomadFactory Blue Tubes Equalizers Pack VST RTAS v3.2 (HKLM-x32\...\NomadFactory Blue Tubes Equalizers Pack VST RTAS_is1) (Version:  - )
NomadFactory BlueVerb DRV-2080 VST RTAS v1.4 (HKLM-x32\...\NomadFactory BlueVerb DRV-2080 VST RTAS_is1) (Version:  - )
NomadFactory Essential Studio Suite VST RTAS v1.5 (HKLM-x32\...\NomadFactory Essential Studio Suite VST RTAS_is1) (Version:  - )
NomadFactory Limiting Amplifier LM-662 VST RTAS v1.3 (HKLM-x32\...\NomadFactory Limiting Amplifier LM-662 VST RTAS_is1) (Version:  - )
NomadFactory Liquid Bundle VST RTAS v2.4 (HKLM-x32\...\NomadFactory Liquid Bundle VST RTAS_is1) (Version:  - )
NomadFactory Program Equalizer EQP-4 VST RTAS v1.3 (HKLM-x32\...\NomadFactory Program Equalizer EQP-4 VST RTAS_is1) (Version:  - )
NomadFactory Retrology M-Tone EQ VST RTAS v1.0 (HKLM-x32\...\NomadFactory Retrology M-Tone EQ VST RTAS_is1) (Version:  - )
NomadFactory Rock Amp Legends VST RTAS v1.5 (HKLM-x32\...\NomadFactory Rock Amp Legends VST RTAS_is1) (Version:  - )
NomadFactory Studio Channel SC-226 VST RTAS v1.3 (HKLM-x32\...\NomadFactory Studio Channel SC-226 VST RTAS_is1) (Version:  - )
NVIDIA 3D Vision Controller Driver 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 341.92 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 341.92 - NVIDIA Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.5 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.2.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.2.2 - NVIDIA Corporation)
NVIDIA Graphics Driver 341.92 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 341.92 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (Version: 16.0.6528.1011 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.6528.1011 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (Version: 16.0.6528.1011 - Microsoft Corporation) Hidden
QuickTime (HKLM-x32\...\{0E64B098-8018-4256-BA23-C316A43AD9B0}) (Version: 7.72.80.56 - Apple Inc.)
RgcAudio z3ta Plus DXi VSTi  v1.41 (HKLM-x32\...\RgcAudio z3ta Plus DXi VSTi  v1.41) (Version:  - )
SHIELD Streaming (Version: 4.0.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 17.12.8 - NVIDIA Corporation) Hidden
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 6.0.1212 - SUPERAntiSpyware.com)
TubeScreamer (HKLM-x32\...\{1BCD3375-BF5A-439C-8803-F5DC4AFF7C2B}) (Version: 1.00.0000 - Nomad Factory)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
WinCDEmu (HKLM-x32\...\WinCDEmu) (Version: 4.1 - Sysprogs)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.30 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.30.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2948202854-996105189-3096935256-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Mymla\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2948202854-996105189-3096935256-1001_Classes\CLSID\{7FCED90B-DB46-3D46-367C-44205205FCC4}\InprocServer32 -> no filepath
CustomCLSID: HKU\S-1-5-21-2948202854-996105189-3096935256-1001_Classes\CLSID\{A2BF0F6E-3C7E-DEAE-4166-C94EDE356866}\InprocServer32 -> no filepath

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1ED6ABA4-6CBE-4085-9422-8F3E379EBC1F} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe
Task: {607F23F4-DDEA-4DD5-BE66-D3B455DA5D32} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2016-02-14] (Microsoft Corporation)
Task: {68C92234-C211-4F27-9501-0315399DDE9E} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-02-04] (Microsoft Corporation)
Task: {7C13987F-6033-4E6A-9754-51F700DEBA44} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2016-02-20] (Microsoft Corporation)
Task: {B4AF6061-A3DA-47EE-8511-7D6816D97353} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-02-26] (AVAST Software)
Task: {CD2EB418-9320-4FB7-9B85-B7124A3990C8} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-02-04] (Microsoft Corporation)
Task: {D1D3A573-D25A-4748-B41C-89548DE5A39E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2016-02-14] (Microsoft Corporation)
Task: {EC780723-D5D7-4E33-A025-9BBCB100191B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-02] (Apple Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2016-01-23 15:12 - 2015-07-15 02:04 - 00032768 _____ () C:\Windows\SYSTEM32\licensemanagerapi.dll
2016-01-23 15:12 - 2015-09-17 06:48 - 02494712 _____ () C:\Windows\system32\CoreUIComponents.dll
2016-01-23 15:12 - 2015-09-17 06:48 - 02494712 _____ () C:\Windows\System32\CoreUIComponents.dll
2016-01-23 15:11 - 2015-09-17 05:48 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mbamchameleon => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMSwissArmy => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mbamchameleon => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMSwissArmy => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="1"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2015-07-10 11:04 - 2015-07-10 11:02 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2948202854-996105189-3096935256-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img2.jpg
DNS Servers: Media is not connected to internet.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\Run32: => "APSDaemon"
HKU\S-1-5-21-2948202854-996105189-3096935256-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2948202854-996105189-3096935256-1001\...\StartupApproved\Run: => "CCleaner Monitoring"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{8C439C37-3864-4384-974B-078D4ABC9F98}] => (Allow) C:\Users\Mymla\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{EB64AE31-3E1F-4682-9101-06318C3A2845}] => (Allow) C:\Users\Mymla\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{BFFAA12F-3B1C-40B7-9713-EBA7688A2B37}] => (Allow) C:\Users\Mymla\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{FCA785BB-203C-4731-9000-BACD22859FE6}] => (Allow) C:\Users\Mymla\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{C30DDC8E-2D6D-4C3C-B0C6-78109CB7D871}] => (Allow) C:\Users\Mymla\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{8893331A-5456-4597-8E62-A1402D5FE885}] => (Allow) C:\Users\Mymla\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{324497B3-AD26-4E0A-A7D5-6685FCA174D5}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{866626E2-833B-4050-89A9-25C86DDEA334}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{1225A6A7-3893-4E74-A238-8DD426006E37}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{621EC895-4CD2-45C2-A544-EA439BA15F80}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{B82F0E55-955C-4E9E-B069-FBE5636076E8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{F024DBA7-1254-45B6-A203-F0E09C4C5312}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{8429E554-28CE-4D2A-A5FE-00BD8D54B62B}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{FF46F5A3-A4D5-46F4-AF65-46E71B7C1961}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{B790DEA4-72BC-4536-ACAE-837ACD3FC04A}] => (Allow) LPort=2869
FirewallRules: [{D1C830C4-8AD1-474F-9F5B-2718D41D0D95}] => (Allow) LPort=1900
FirewallRules: [TCP Query User{F3D44D03-1CE1-41EF-AA96-6DA1E43A86DE}C:\program files (x86)\clickteam fusion 2.5 developer\mmf2u.exe] => (Allow) C:\program files (x86)\clickteam fusion 2.5 developer\mmf2u.exe
FirewallRules: [UDP Query User{7D7D76CB-C470-46E8-AB47-C860A8987E7E}C:\program files (x86)\clickteam fusion 2.5 developer\mmf2u.exe] => (Allow) C:\program files (x86)\clickteam fusion 2.5 developer\mmf2u.exe
FirewallRules: [{449D2A03-B34D-465B-8D2C-074601D9CC44}] => (Block) C:\program files (x86)\clickteam fusion 2.5 developer\mmf2u.exe
FirewallRules: [{4D892D52-04BB-4511-ACA2-972842F478A5}] => (Block) C:\program files (x86)\clickteam fusion 2.5 developer\mmf2u.exe
FirewallRules: [TCP Query User{B70EA2B2-B059-42AE-BBEF-D32CE2802106}C:\users\mymla\appdata\local\mobione studio\mobione 2.3.0\mobione.exe] => (Allow) C:\users\mymla\appdata\local\mobione studio\mobione 2.3.0\mobione.exe
FirewallRules: [UDP Query User{F754734D-A0EA-40BF-BEBD-C3091803D6D2}C:\users\mymla\appdata\local\mobione studio\mobione 2.3.0\mobione.exe] => (Allow) C:\users\mymla\appdata\local\mobione studio\mobione 2.3.0\mobione.exe
FirewallRules: [{74B388EB-3FCE-4963-909F-C23013564B06}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{499FF69E-84AB-4403-8EFC-2FA40AD57E28}] => (Allow) E:\Windows 10 Activators\KMSpico.10.0.102040 Beta\KMSELDI.exe
FirewallRules: [{2B517D08-D836-4B40-8827-D40A37ED9FAB}] => (Allow) E:\Windows 10 Activators\KMSpico.10.0.102040 Beta\KMSELDI.exe

==================== Restore Points =========================

02-02-2016 17:50:31 Scheduled Checkpoint
15-02-2016 17:50:35 Scheduled Checkpoint
18-02-2016 23:03:07 SPTD setup V2.08
20-02-2016 12:57:19 Installed PACE License Support Win64.
21-02-2016 20:42:16 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
22-02-2016 21:53:41 Installed Melodyne 3.1
26-02-2016 15:39:47 Removed Melodyne 3.1

==================== Faulty Device Manager Devices =============

Name: Generic USB SD Reader USB Device
Description: Disk drive
Class Guid: {4d36e967-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standard disk drives)
Service: disk
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Generic USB CF Reader USB Device
Description: Disk drive
Class Guid: {4d36e967-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standard disk drives)
Service: disk
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Generic USB SM Reader USB Device
Description: Disk drive
Class Guid: {4d36e967-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standard disk drives)
Service: disk
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: PHILIPS SPD6005T ATA Device
Description: CD-ROM Drive
Class Guid: {4d36e965-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standard CD-ROM drives)
Service: cdrom
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Generic USB MS Reader USB Device
Description: Disk drive
Class Guid: {4d36e967-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standard disk drives)
Service: disk
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/28/2016 09:29:12 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: RD4000NX)
Description: Activation of app Microsoft.Getstarted_2.6.12.0_x64__8wekyb3d8bbwe:App.AppX7mv0s3r0wanj0n66dy6vax24ps6avzvz.mca failed with error: -2144927149 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (02/28/2016 09:29:11 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: SearchUI.exe, version: 10.0.10240.16603, time stamp: 0x5655390b
Faulting module name: CortanaApi.dll, version: 0.0.0.0, time stamp: 0x56553724
Exception code: 0x80000003
Fault offset: 0x0000000000151c4f
Faulting process id: 0x85c
Faulting application start time: 0xSearchUI.exe0
Faulting application path: SearchUI.exe1
Faulting module path: SearchUI.exe2
Report Id: SearchUI.exe3
Faulting package full name: SearchUI.exe4
Faulting package-relative application ID: SearchUI.exe5

Error: (02/28/2016 09:29:07 AM) (Source: SideBySide) (EventID: 59) (User: )
Description: Activation context generation failed for "1".Error in manifest or policy file "2" on line 3.
Invalid Xml syntax.

Error: (02/28/2016 09:29:06 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: RD4000NX)
Description: Activation of app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: -2147023170 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (02/28/2016 09:29:05 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: SearchUI.exe, version: 10.0.10240.16603, time stamp: 0x5655390b
Faulting module name: CortanaApi.dll, version: 0.0.0.0, time stamp: 0x56553724
Exception code: 0x80000003
Fault offset: 0x0000000000151c4f
Faulting process id: 0x778
Faulting application start time: 0xSearchUI.exe0
Faulting application path: SearchUI.exe1
Faulting module path: SearchUI.exe2
Report Id: SearchUI.exe3
Faulting package full name: SearchUI.exe4
Faulting package-relative application ID: SearchUI.exe5

Error: (02/28/2016 09:12:37 AM) (Source: SideBySide) (EventID: 59) (User: )
Description: Activation context generation failed for "1".Error in manifest or policy file "2" on line 3.
Invalid Xml syntax.

Error: (02/28/2016 09:12:35 AM) (Source: SideBySide) (EventID: 59) (User: )
Description: Activation context generation failed for "1".Error in manifest or policy file "2" on line 3.
Invalid Xml syntax.

Error: (02/28/2016 09:09:07 AM) (Source: SideBySide) (EventID: 59) (User: )
Description: Activation context generation failed for "1".Error in manifest or policy file "2" on line 3.
Invalid Xml syntax.

Error: (02/28/2016 09:08:43 AM) (Source: SideBySide) (EventID: 59) (User: )
Description: Activation context generation failed for "1".Error in manifest or policy file "2" on line 3.
Invalid Xml syntax.

Error: (02/28/2016 09:08:11 AM) (Source: SideBySide) (EventID: 59) (User: )
Description: Activation context generation failed for "1".Error in manifest or policy file "2" on line 3.
Invalid Xml syntax.


System errors:
=============
Error: (02/28/2016 09:33:52 AM) (Source: DCOM) (EventID: 10005) (User: RD4000NX)
Description: 1084WSearchUnavailable{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}

Error: (02/28/2016 09:33:52 AM) (Source: DCOM) (EventID: 10005) (User: RD4000NX)
Description: 1084WSearchUnavailable{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}

Error: (02/28/2016 09:33:51 AM) (Source: DCOM) (EventID: 10005) (User: RD4000NX)
Description: 1084ShellHWDetectionUnavailable{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (02/28/2016 09:33:41 AM) (Source: DCOM) (EventID: 10005) (User: RD4000NX)
Description: 1084ShellHWDetectionUnavailable{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (02/28/2016 09:33:36 AM) (Source: DCOM) (EventID: 10005) (User: RD4000NX)
Description: 1084WSearchUnavailable{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}

Error: (02/28/2016 09:33:36 AM) (Source: DCOM) (EventID: 10005) (User: RD4000NX)
Description: 1084WSearchUnavailable{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}

Error: (02/28/2016 09:33:36 AM) (Source: DCOM) (EventID: 10005) (User: RD4000NX)
Description: 1084WSearchUnavailable{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}

Error: (02/28/2016 09:33:36 AM) (Source: DCOM) (EventID: 10005) (User: RD4000NX)
Description: 1084WSearchUnavailable{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}

Error: (02/28/2016 09:33:36 AM) (Source: DCOM) (EventID: 10005) (User: RD4000NX)
Description: 1084WSearchUnavailable{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}

Error: (02/28/2016 09:33:36 AM) (Source: DCOM) (EventID: 10005) (User: RD4000NX)
Description: 1084WSearchUnavailable{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}


CodeIntegrity:
===================================
  Date: 2016-02-24 23:23:19.337
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\nvlddmkm.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-02-18 21:44:00.000
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\nvlddmkm.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info =========================== 

Processor: AMD Athlon(tm) 7750 Dual-Core Processor
Percentage of memory in use: 19%
Total physical RAM: 3839.3 MB
Available physical RAM: 3086.65 MB
Total Virtual: 7679.3 MB
Available Virtual: 7053.39 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:2047.51 GB) (Free:1738.95 GB) NTFS
Drive d: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive e: (My Book) (Fixed) (Total:930.86 GB) (Free:38.65 GB) NTFS
Drive f: (The Big One) (Fixed) (Total:232.88 GB) (Free:20.17 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive g: () (Fixed) (Total:465.22 GB) (Free:4.03 GB) NTFS
Drive i: (WD SmartWare) (CDROM) (Total:0.6 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 2794.5 GB) (Disk ID: 5A9BD708)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=2047.5 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 232.9 GB) (Disk ID: FAAFFAAF)
Partition 1: (Active) - (Size=232.9 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: CFF4E133)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)

========================================================
Disk: 3 (MBR Code: Windows XP) (Size: 930.9 GB) (Disk ID: 0002AE3F)
Partition 1: (Not Active) - (Size=930.9 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================