start
    CloseProcesses:
    HKU\S-1-5-21-2514298183-1620828669-1432711465-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-29] (Piriform Ltd)
    HKU\S-1-5-21-2514298183-1620828669-1432711465-1001\...\Run: [TomTomHOME.exe] => C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [248176 2014-12-19] (TomTom)
    HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
    HKU\S-1-5-21-2514298183-1620828669-1432711465-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
    SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    Task: {733E8E98-7079-479C-B106-16D482ACF0A8} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-03-11] (Microsoft Corporation)
    Task: {A9E06294-9668-45E8-BA1E-5CAF052BB58A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-10-29] (Piriform Ltd)
    AlternateDataStreams: C:\Users\charles\SkyDrive:ms-properties
    AlternateDataStreams: C:\Users\charles\SkyDrive (2).old:ms-properties
    AlternateDataStreams: C:\Users\charles\SkyDrive (3).old:ms-properties
    AlternateDataStreams: C:\Users\charles\SkyDrive (4).old:ms-properties
    AlternateDataStreams: C:\Users\charles\SkyDrive.old:ms-properties
    CMD: bitsadmin /reset /allusers
    CMD: ipconfig /flushdns
    CreateRestorePoint:
    end