Start::
CreateRestorePoint
EmptyCLSID
EmptyFlash
EmptyTracing
EmptyPrefetch
EmptyProxy
WinsockFix
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
HKLM\SOFTWARE\AVAST Software
HKLM\SOFTWARE\WOW6432Node\Avast
HKLM\SOFTWARE\WOW6432Node\AVAST Software
HKCU\SOFTWARE\AVAST Software
HKCU\SOFTWARE\Browser Cleanup
HKU\.DEFAULT\SOFTWARE\Avast Software
HKU\S-1-5-21-4075499106-13515364-3866925429-1000\SOFTWARE\AVAST Software
HKU\S-1-5-21-4075499106-13515364-3866925429-1000\SOFTWARE\Browser Cleanup
C:\ProgramData\AVAST Software
C:\Program Files (x86)\Common Files\AV
C:\Windows\Installer\427219.msi
HKLM\Software\Classes\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E
HKLM\Software\Classes\Installer\Features\93BAD29AC2E44034A96BCB446EB8552E
HKCU\Software\Microsoft\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E
HKCU\Software\Microsoft\Installer\Features\93BAD29AC2E44034A96BCB446EB8552E
HKLM\Software\Wow6432Node\Classes\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E
HKLM\Software\Wow6432Node\Classes\Installer\Features\93BAD29AC2E44034A96BCB446EB8552E
C:\Windows\Installer\427219.msi
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Windows\avastSS.scr
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh advfirewall set allprofiles state on
EmptyRecycle
EmptyTemp
End::