Start::
CreateRestorePoint
EmptyCLSID
EmptyFlash
EmptyTracing
EmptyPrefetch
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32  =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA}  =>.SUP.Orphan
HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32  =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32  =>.SUP.Orphan
HKCU\Software\undefined  =>.SUP.Downloader
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:E:\Toboclic.exe.FriendlyAppName  =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:E:\Toboclic.exe.ApplicationCompany  =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\Affixa-Setup-Full.exe.FriendlyAppName  =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\Affixa-Setup-Full.exe.ApplicationCompany  =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-2395733876-1681976071-1423841746-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:E:\Toboclic.exe.FriendlyAppName  =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-2395733876-1681976071-1423841746-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:E:\Toboclic.exe.ApplicationCompany  =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-2395733876-1681976071-1423841746-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\Affixa-Setup-Full.exe.FriendlyAppName  =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-2395733876-1681976071-1423841746-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\Affixa-Setup-Full.exe.ApplicationCompany  =>.SUP.Orphan.MUICache
C:\Users\Pouch\AppData\Local\AVAST Software  =>.AVAST Software
C:\ProgramData\AVAST Software  =>.AVAST Software
HKU\S-1-5-21-2395733876-1681976071-1423841746-1001\SOFTWARE\Browser Cleanup  =>.Avast Software s.r.o
HKCU\SOFTWARE\Browser Cleanup  =>.Avast Software s.r.o
HKLM\SOFTWARE\WOW6432Node\AVAST Software  =>.AVAST Software
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AvastUI.exe  =>.Avast Software s.r.o
G2 - GCE: Preference [Pouch][User Data\Default\Local Extension Settings] [gomekmidlodglbbmalcneegieacbdmki]   =>.Avast Software s.r.o
P2 - EXT FILE: (.Avast Software s.r.o.) -- C:\Users\Pouch\AppData\Roaming\Mozilla\Firefox\Profiles\9wcv7qy6.default\extensions\sp@avast.com.xpi [Unsigned]  =>.Avast Software s.r.o
P2 - EXT FILE: (.Avast Online Security - Avast Browser Security and Web Reputat.) -- C:\Users\Pouch\AppData\Roaming\Mozilla\Firefox\Profiles\9wcv7qy6.default\extensions\wrc@avast.com.xpi [Unsigned]  =>.Avast Online Security
G2 - GCE: Preference [Pouch][User Data\Default\Extensions] [gomekmidlodglbbmalcneegieacbdmki] Avast Online Security  =>.Avast Software s.r.o
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh advfirewall set allprofiles state on
WinsockFix
EmptyRecycle
EmptyTemp
End::