start::
CreateRestorePoint:
CloseProcesses:
RemoveProxy:
C:\ProgramData\AVAST Software
DeleteKey: HKU\S-1-5-21-3187888543-3938743963-1644968334-1001\SOFTWARE\AVAST Software 
DeleteKey: HKU\S-1-5-21-3187888543-3938743963-1644968334-1001\SOFTWARE\AvastAdSDK 
DeleteKey: HKU\S-1-5-21-3187888543-3938743963-1644968334-1001\SOFTWARE\AVG 
DeleteValue: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32|AVGUI.exe 
DeleteKey: HKU\S-1-5-21-3187888543-3938743963-1644968334-1001\SOFTWARE\Browser Cleanup 
DeleteKey: HKU\.DEFAULT\SOFTWARE\AVAST Software 
DeleteKey: HKU\.DEFAULT\SOFTWARE\Browser Cleanup 
DeleteKey: HKCU\SOFTWARE\AVAST Software 
DeleteKey: HKCU\SOFTWARE\AvastAdSDK 
DeleteKey: HKCU\SOFTWARE\AVG 
DeleteKey: HKCU\SOFTWARE\Blizzard Entertainment 
DeleteKey: HKCU\SOFTWARE\Browser Cleanup 
DeleteKey: HKLM\SOFTWARE\WOW6432Node\AVAST Software 
DeleteValue: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|AvastUI.exe 
C:\Program Files\AVAST Software
DeleteValue: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|AVGUI.exe 
DeleteKey: HKLM\SOFTWARE\AVG 
C:\ProgramData\AVG
C:\Users\djdad\AppData\Local\AVG
DeleteKey: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 
DeleteKey: HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA}
SearchScopes: HKU\S-1-5-21-3187888543-3938743963-1644968334-1001 -> DefaultScope {677B8C15-5CD5-4623-B79B-C0F6580BF17D} URL = 
SearchScopes: HKU\S-1-5-21-3187888543-3938743963-1644968334-1001 -> {677B8C15-5CD5-4623-B79B-C0F6580BF17D} URL = 
Lenovo App Explorer (HKU\S-1-5-19\...\Host App Service) (Version: 0.273.2.343 - SweetLabs for Lenovo) <==== ATTENTION
Lenovo App Explorer (HKU\S-1-5-20\...\Host App Service) (Version: 0.273.2.343 - SweetLabs for Lenovo) <==== ATTENTION
cmd: ipconfig /flushdns
cmd: netsh winsock reset
EmptyTemp:
end::