Start::
CreateRestorePoint
EmptyCLSID
EmptyFlash
EmptyTracing
EmptyPrefetch
EmptyProxy
TestSigningFix
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ALZip =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{4EB37360-49E8-11D3-95B5-004033382980} =>.SUP.Orphan
HKLM\Software\Wow6432Node\Classes\CLSID\{4EB37360-49E8-11D3-95B5-004033382980} =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\IObit Malware Fighter =>.SUP.Orphan
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ALZip =>.SUP.Orphan
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\IObit Malware Fighter =>.SUP.Orphan
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\ALZip =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\ALZip =>.SUP.Orphan
HKLM\Software\Classes\Drive\shellex\ContextMenuHandlers\ALZip =>.SUP.Orphan
[HKEY_USERS\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AvastBrowserAutoLaunch_6C11B48B80641F442B678DFCEAB6480A =>PUP.Optional.MyBrowser
[HKEY_USERS\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:GoogleChromeAutoLaunch_F99F5537A004AD18EB189A07977D6977 =>PUP.Optional.MyBrowser
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AvastBrowserAutoLaunch_6C11B48B80641F442B678DFCEAB6480A =>PUP.Optional.MyBrowser
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:GoogleChromeAutoLaunch_F99F5537A004AD18EB189A07977D6977 =>PUP.Optional.MyBrowser
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:qBittorrent
[HKEY_USERS\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:qBittorrent
SR - Auto [13/02/2018] [ 178840] avgntflt (avgntflt) . (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avgntflt.sys =>.Avira Operations GmbH & Co. KG®
SR - System [13/02/2018] [ 169864] avipbb (avipbb) . (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avipbb.sys =>.Avira Operations GmbH & Co. KG®
SR - System [13/02/2018] [ 44488] avkmgr (avkmgr) . (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avkmgr.sys =>.Avira Operations GmbH & Co. KG®
SR - Demand [24/10/2018] [ 45056] Phantom TAP-Windows Adapter V9 (phantomtap) . (.The OpenVPN Project.) - C:\WINDOWS\System32\drivers\phantomtap.sys =>.Avira Operations GmbH & Co. KG®
SR - Demand [10/02/2017] [ 35784] TAP-Windows Adapter V9 (tap0901) . (.The OpenVPN Project.) - C:\WINDOWS\System32\drivers\tap0901.sys =>.Avira Operations GmbH & Co. KG®
G2 - GCE: Preference [Daniel][User Data\Default\Extensions] [flliilndjeohchalpbbcdekjklbdgfkk] Avira Operations GmbH & Co. KG =>.Avira Software
G2 - GCE: Preference [Daniel][User Data\Default\Extensions] [flliilndjeohchalpbbcdekjklbdgfkk] Avira Browser Safety =>.Avira Software
P2 - EXT: (.Avira - Avira Browser Safety.) -- C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\e1YVy467.default\extensions\abs@avira.com =>.Avira
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.avira.net/ =>.Avira Software
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.avira.net/ =>.Avira Software
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:Avira SystrayStartTrigger =>.Avira Software
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:avgnt =>.Avira Software
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:Avira System Speedup User Starter =>.Avira Software
C:\Users\Daniel\AppData\Local\AviraSpeedup =>.Avira Software
O58 - SDL:2018/02/13 12:58:16 A . (.Avira Operations GmbH & Co. KG - Avira Minifilter Driver.) -- C:\WINDOWS\System32\drivers\avgntflt.sys [178840] =>.Avira Operations GmbH & Co. KG®
O58 - SDL:2018/02/13 12:58:16 A . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) -- C:\WINDOWS\System32\drivers\avipbb.sys [169864] =>.Avira Operations GmbH & Co. KG®
O58 - SDL:2018/02/13 12:58:16 A . (.Avira Operations GmbH & Co. KG - Avira Manager Driver.) -- C:\WINDOWS\System32\drivers\avkmgr.sys [44488] =>.Avira Operations GmbH & Co. KG®
O58 - SDL:2018/10/24 04:55:30 A . (.The OpenVPN Project - TAP-Windows Virtual Network Driver (NDIS 6..) -- C:\WINDOWS\System32\drivers\phantomtap.sys [45056] =>.Avira Operations GmbH & Co. KG®
O58 - SDL:2017/02/10 05:36:30 A . (.The OpenVPN Project - TAP-Windows Virtual Network Driver (NDIS 6..) -- C:\WINDOWS\System32\drivers\tap0901.sys [35784] =>.Avira Operations GmbH & Co. KG®
[3AEA7D79BC1D84D2E1AB0FFC8BC35658] [10/02/2017] (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\drivers\tap0901.sys =>.Avira Operations GmbH & Co. KG
[3AEA7D79BC1D84D2E1AB0FFC8BC35658] [13/02/2018] (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avkmgr.sys =>.Avira Operations GmbH & Co. KG
[76BA9423DDBCE7B145A95F01EE015F17] [13/02/2018] (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avgntflt.sys =>.Avira Operations GmbH & Co. KG
[76BA9423DDBCE7B145A95F01EE015F17] [13/02/2018] (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\DRIVERS\avipbb.sys =>.Avira Operations GmbH & Co. KG
[76BA9423DDBCE7B145A95F01EE015F17] [24/10/2018] (.Avira Operations GmbH & Co. KG.) - C:\WINDOWS\System32\drivers\phantomtap.sys =>.Avira Operations GmbH & Co. KG
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:AvgUi =>.AVG Software
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:AVG_UI
HKLM\SOFTWARE\AVG =>.AVG Software
HKLM\SOFTWARE\WOW6432Node\AVG =>.AVG Software
HKCU\SOFTWARE\Avg =>.AVG Software
HKCU\SOFTWARE\Avg Secure Update =>.AVG Software
HKU\.DEFAULT\SOFTWARE\Avg Secure Update =>.AVG Software
HKU\.DEFAULT\SOFTWARE\AVG Web TuneUp =>.AVG Web TuneUp
HKU\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\Avg =>.AVG Software
HKU\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\Avg Secure Update =>.AVG Software
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen =>.AVG Software
C:\ProgramData\Avg =>.AVG Software
C:\ProgramData\Avg_Update_0516piz =>.AVG Software
C:\ProgramData\MFAData =>.AVG Software
C:\Users\Daniel\AppData\Roaming\AVG =>.AVG Software
C:\Users\Daniel\AppData\Local\Avg =>.AVG Software
C:\Users\Daniel\AppData\Local\AvgSetupLog =>.AVG Software
C:\Users\Daniel\AppData\Local\MFAData =>.AVG Software
[MD5.59D0F30F102B382B13DD66A97A09E110] [WIS][2016/09/05 20:57:59] (.AVG Technologies - Visual Studio 2012 x64 Redistributables.) -- C:\WINDOWS\Installer\21dae3c.msi [13684736] =>.AVG Technologies
[MD5.D7C8F629A87765492DAA8856DE7A9CCC] [WIS][2016/09/05 20:58:01] (.AVG Technologies CZ, s.r.o. - Visual Studio 2012 x86 Redistributables.) -- C:\WINDOWS\Installer\21dae3f.msi [40960] =>.AVG Technologies CZ, s.r.o.
C:\Program Files (x86)\AVG =>.AVG Software
HKLM\SOFTWARE\WOW6432Node\BraveSoftware =>.Brave Software Inc.
HKCU\SOFTWARE\BraveSoftware =>.Brave Software Inc.
HKU\S-1-5-21-4024821978-2350809512-895266991-1001\SOFTWARE\BraveSoftware =>.Brave Software Inc.
C:\Users\Daniel\AppData\Local\BraveSoftware =>.Brave Software Inc.
C:\Program Files (x86)\BraveSoftware =>.Brave Software Inc.
O87 - FAEL: "IIS-WebServerRole-FTP-Passive-In-TCP" [In-None-P6-FALSE] .(...) -- %windir%\system32\svchost.exe [Unsigned] (.not file.) =>.SUP.Orphan
O87 - FAEL: "IIS-WebServerRole-FTP-Out-TCP-989" [Out-None-P6-FALSE] .(...) -- %windir%\system32\svchost.exe [Unsigned] (.not file.) =>.SUP.Orphan
O87 - FAEL: "IIS-WebServerRole-FTP-In-TCP-990" [In-None-P6-FALSE] .(...) -- %windir%\system32\svchost.exe [Unsigned] (.not file.) =>.SUP.Orphan
O87 - FAEL: "IIS-WebServerRole-FTP-Out-TCP-20" [Out-None-P6-FALSE] .(...) -- %windir%\system32\svchost.exe [Unsigned] (.not file.) =>.SUP.Orphan
O87 - FAEL: "IIS-WebServerRole-FTP-In-TCP-21" [In-None-P6-FALSE] .(...) -- %windir%\system32\svchost.exe [Unsigned] (.not file.) =>.SUP.Orphan
WinsockFix
EmptyRecycle
EmptyTemp
End::