Start::
CreateRestorePoint
EmptyCLSID
EmptyFlash
EmptyTracing
EmptyPrefetch
EmptyProxy
HKLM64\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B86EAFF-FE5A-4402-AA9C-D05C8B7EC461
C:\WINDOWS\System32\Tasks\Avast SecureLine VPN Update
c:\program files\avast software\secureline\vpnupdate.exe
C:\Program Files\AVAST Software\SecureLine\Vpn.exe
C:\Users\marce\AppData\Roaming\Mozilla\Firefox\Profiles\yppk137e.default-release\extensions\sp@avast.com.xpi
C:\Users\marce\AppData\Roaming\Mozilla\Firefox\Profiles\yppk137e.default-release\extensions\wrc@avast.com.xpi
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Avast SecureLine VPN.lnk
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AvastUI.exe
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\StartupFolder]:Avast SecureLine VPN.lnk
HKLM\SOFTWARE\AVAST Software
HKLM\SOFTWARE\WOW6432Node\AVAST Software
C:\ProgramData\AVAST Software
C:\Users\marce\AppData\Roaming\AVAST Software
C:\Program Files\AVAST Software
OPT: O4 - HKUS\S-1-5-19\..\StartupApproved\Run: [OneDriveSetup] . (. - .) -- 0x020000000000000000000000
OPT: O4 - HKUS\S-1-5-20\..\StartupApproved\Run: [OneDriveSetup] . (. - .) -- 0x020000000000000000000000
WinsockFix
EmptyRecycle
EmptyTemp
End::