Start::
CreateRestorePoint
EmptyCLSID
EmptyFlash
EmptyTracing
EmptyPrefetch
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>.SUP.Orphan
HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKCU\Software\undefined =>.SUP.Downloader
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:E:\Toboclic.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:E:\Toboclic.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\Affixa-Setup-Full.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\Affixa-Setup-Full.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-2395733876-1681976071-1423841746-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:E:\Toboclic.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-2395733876-1681976071-1423841746-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:E:\Toboclic.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-2395733876-1681976071-1423841746-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\Affixa-Setup-Full.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-2395733876-1681976071-1423841746-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\Affixa-Setup-Full.exe.ApplicationCompany =>.SUP.Orphan.MUICache
C:\Users\Pouch\AppData\Local\AVAST Software =>.AVAST Software
C:\ProgramData\AVAST Software =>.AVAST Software
HKU\S-1-5-21-2395733876-1681976071-1423841746-1001\SOFTWARE\Browser Cleanup =>.Avast Software s.r.o
HKCU\SOFTWARE\Browser Cleanup =>.Avast Software s.r.o
HKLM\SOFTWARE\WOW6432Node\AVAST Software =>.AVAST Software
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AvastUI.exe =>.Avast Software s.r.o
G2 - GCE: Preference [Pouch][User Data\Default\Local Extension Settings] [gomekmidlodglbbmalcneegieacbdmki] =>.Avast Software s.r.o
P2 - EXT FILE: (.Avast Software s.r.o.) -- C:\Users\Pouch\AppData\Roaming\Mozilla\Firefox\Profiles\9wcv7qy6.default\extensions\sp@avast.com.xpi [Unsigned] =>.Avast Software s.r.o
P2 - EXT FILE: (.Avast Online Security - Avast Browser Security and Web Reputat.) -- C:\Users\Pouch\AppData\Roaming\Mozilla\Firefox\Profiles\9wcv7qy6.default\extensions\wrc@avast.com.xpi [Unsigned] =>.Avast Online Security
G2 - GCE: Preference [Pouch][User Data\Default\Extensions] [gomekmidlodglbbmalcneegieacbdmki] Avast Online Security =>.Avast Software s.r.o
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh advfirewall set allprofiles state on
WinsockFix
EmptyRecycle
EmptyTemp
End::