start::
closeprocesses:
createrestorepoint:
C:\Users\MOMO MIMI\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlincbpgbkpbjepghokdnhnnpphmegig
C:\Users\MOMO MIMI\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jlincbpgbkpbjepghokdnhnnpphmegig
Deletekey: HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\OIShellExt
Deletekey: HKLM\Software\Classes\CLSID\{38FB5F89-9641-413E-86EA-2F804A88762C}
Deletekey: HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\OIShellExt
Deletekey: HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\OIShellExt
Deletekey: HKLM\Software\Classes\Drive\shellex\ContextMenuHandlers\OIShellExt
deletevalue: HKU\S-1-5-21-4045383170-1119813066-3777308495-1001\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings|jlincbpgbkpbjepghokdnhnnpphmegig
deletevalue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\AVAST Software\Avast\setup\instup.exe.FriendlyAppName
deletevalue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\AVAST Software\Avast\setup\instup.exe.ApplicationCompany
deletevalue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\TeamViewer\TeamViewer.exe.ApplicationCompany
deletevalue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe.ApplicationCompany
deletevalue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe.FriendlyAppName
deletevalue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe.ApplicationCompany
deletevalue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\MOMO MIMI\Desktop\Firefox Installer.exe.FriendlyAppName
deletevalue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\MOMO MIMI\Desktop\Firefox Installer.exe.ApplicationCompany
deletevalue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Windows Live\Mail\wlmail.exe.FriendlyAppName
deletevalue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Windows Live\Mail\wlmail.exe.ApplicationCompany
deletevalue: HKU\S-1-5-21-4045383170-1119813066-3777308495-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\AVAST Software\Avast\setup\instup.exe.FriendlyAppName
deletevalue: HKU\S-1-5-21-4045383170-1119813066-3777308495-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\AVAST Software\Avast\setup\instup.exe.ApplicationCompany
deletevalue: HKU\S-1-5-21-4045383170-1119813066-3777308495-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\TeamViewer\TeamViewer.exe.ApplicationCompany
deletevalue: HKU\S-1-5-21-4045383170-1119813066-3777308495-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe.ApplicationCompany
deletevalue: HKU\S-1-5-21-4045383170-1119813066-3777308495-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe.FriendlyAppName
deletevalue: HKU\S-1-5-21-4045383170-1119813066-3777308495-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe.ApplicationCompany
deletevalue: HKU\S-1-5-21-4045383170-1119813066-3777308495-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\MOMO MIMI\Desktop\Firefox Installer.exe.FriendlyAppName
deletevalue: HKU\S-1-5-21-4045383170-1119813066-3777308495-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\MOMO MIMI\Desktop\Firefox Installer.exe.ApplicationCompany
deletevalue: HKU\S-1-5-21-4045383170-1119813066-3777308495-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Windows Live\Mail\wlmail.exe.FriendlyAppName
deletevalue: HKU\S-1-5-21-4045383170-1119813066-3777308495-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Windows Live\Mail\wlmail.exe.ApplicationCompany
emptytemp:
end::