start
CreateRestorePoint:
CloseProcesses:
RemoveProxy:

mp3Tag Pro 6.01 (HKLM-x32\...\mp3Tag Pro_is1) (Version: - Maniac Tools, Inc.)
HKU\S-1-5-21-503687441-1764982139-705192744-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/ar-eg/?ocid=iehp
URLSearchHook: [S-1-5-21-503687441-1764982139-705192744-1001] ATTENTION => Default URLSearchHook is missing
2016-12-09 21:29 - 2012-10-05 22:07 - 00405881 _____ C:\Windows\KJ.exe
2016-12-09 21:28 - 2016-12-09 21:33 - 00000000 ____D C:\Windows\KJ
Task: {29FAE787-8E6C-4199-97EB-DB03E2AC23CB} - System32\Tasks\{9B159BEF-E675-47D7-A94C-48B529CE4A82} => pcalua.exe -a "C:\Users\Yondaime\Desktop\PS3 U\PS3CoverUploader\msvbvm50.exe" -d "C:\Users\Yondaime\Desktop\PS3 U\PS3CoverUploader"
Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_24_0_0_186_pepper.exe
2010-01-02 14:42 - 2010-01-02 14:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
ShellIconOverlayIdentifiers-x32: [
MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\ProgramData\MEGAsync\ShellExtX32.dll -> No File
ShellIconOverlayIdentifiers-x32: [
MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\ProgramData\MEGAsync\ShellExtX32.dll -> No File
ShellIconOverlayIdentifiers-x32: [
MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\ProgramData\MEGAsync\ShellExtX32.dll -> No File
S3 catchme; \??\C:\Users\Yondaime\AppData\Local\Temp\catchme.sys [X]
2016-12-16 15:03 - 2016-12-16 15:03 - 00000480 _____ C:\Users\Yondaime\Downloads\4.81.1_REX.zip
2016-12-14 21:17 - 2016-12-14 21:17 - 00000000 ____D C:\Users\Yondaime\AppData\Local\bunkus.org
2016-12-14 19:40 - 2016-12-14 19:40 - 00694170 _____ C:\Users\Yondaime\Downloads\assassins_creed_brotherhood_4-wallpaper-1920x1080.jpg
2016-12-10 00:31 - 2016-06-04 23:54 - 00209459 _____ C:\Users\Yondaime\Downloads\tobi_war_arc_2_by_uchihaclanancestor-d5i8p89_zps93d390f8.png
2016-12-10 00:31 - 2015-07-26 19:52 - 00073606 _____ C:\Users\Yondaime\Downloads\Rayman-ready-for-battle.jpg
2016-12-10 00:31 - 2015-07-26 19:52 - 00024459 _____ C:\Users\Yondaime\Downloads\rayman_art.0.jpg
2016-12-10 00:31 - 2015-07-22 01:51 - 00006017 _____ C:\Users\Yondaime\Downloads\111.jpg
2016-12-10 00:31 - 2011-08-19 13:04 - 00267986 _____ C:\Users\Yondaime\Downloads\espace.jpg
2016-12-10 00:29 - 2011-08-19 13:04 - 00267986 _____ C:\Users\Yondaime\Desktop\espace.jpg
2016-12-09 21:04 - 2013-02-11 09:35 - 01178624 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\SysWOW64\libeay32.dll
2016-12-09 21:04 - 2013-02-11 09:35 - 00269824 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\SysWOW64\ssleay32.dll

CMD: netsh winsock reset all
CMD: ipconfig /flushdns
hosts:
EmptyTemp:
Reboot:
end