Start::
CreateRestorePoint
EmptyCLSID
EmptyTracing
EmptyPrefetch
C:\ProgramData\AVAST Software
HKLM\SYSTEM\CurrentControlSet\Services\McAfee WebAdvisor
HKLM\SYSTEM\CurrentControlSet\Services\mccspsvc
C:\Users\\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\McAfee WebAdvisor.lnk
[HKLM\SOFTWARE\Wow6432Node\Classes\PROTOCOLS\Handler\dssrequest]:CLSID=""
[HKLM\SOFTWARE\Wow6432Node\Classes\PROTOCOLS\Handler\sacore]:CLSID=""
HKLM\SOFTWARE\McAfee
HKLM\SOFTWARE\WOW6432Node\McAfee
HKLM\SOFTWARE\WOW6432Node\McAfee NGI
HKU\.DEFAULT\SOFTWARE\McAfee
ProgramData\McAfee
C:\Program Files (x86)\Common Files\McAfee
C:\Program Files\McAfee
HKLM\SOFTWARE\Microsoft\Tracing\PROPCCleaner_RASMANCS
EmptyRecycle
EmptyTemp
End::