Start::
CreateRestorePoint
EmptyCLSID
EmptyFlash
EmptyTracing
EmptyPrefetch
EmptyProxy
[HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\explorer\StartupApproved\Run]:OneDriveSetup
[HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\explorer\StartupApproved\Run]:OneDriveSetup
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA}
HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\Call of Duty Modern Warfare\Modern Warfare Launcher.exe.FriendlyAppName
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\Call of Duty Modern Warfare\Modern Warfare Launcher.exe.ApplicationCompany
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\BDNF\BDNF.exe.FriendlyAppName
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe.ApplicationCompany
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe.FriendlyAppName
[HKU\S-1-5-21-1729024293-2662946533-1075726789-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\Call of Duty Modern Warfare\Modern Warfare Launcher.exe.FriendlyAppName
[HKU\S-1-5-21-1729024293-2662946533-1075726789-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\Call of Duty Modern Warfare\Modern Warfare Launcher.exe.ApplicationCompany
[HKU\S-1-5-21-1729024293-2662946533-1075726789-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\BDNF\BDNF.exe.FriendlyAppName
[HKU\S-1-5-21-1729024293-2662946533-1075726789-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe.ApplicationCompany
[HKU\S-1-5-21-1729024293-2662946533-1075726789-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe.FriendlyAppName
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:GUDelayStartup
[HKEY_USERS\S-1-5-21-1729024293-2662946533-1075726789-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:GUDelayStartup
HKCU\SOFTWARE\Glarysoft
HKU\S-1-5-21-1729024293-2662946533-1075726789-1001\SOFTWARE\Glarysoft
HKLM\SYSTEM\CurrentControlSet\Services\AscFileFilter
HKLM\SYSTEM\CurrentControlSet\Services\AscRegistryFilter
HKLM\SOFTWARE\WOW6432Node\IObit
C:\Program Files (x86)\IObit
C:\ProgramData\IObit
C:\Program Files (x86)\Common Files\IObit
C:\Users\33625\AppData\Roaming\IObit
C:\Users\33625\AppData\LocalLow\IObit
C:\Windows\System32\Config\systemprofile\AppData\Roaming\IObit
HKLM\SOFTWARE\WOW6432Node\BraveSoftware
HKCU\SOFTWARE\BraveSoftware
HKU\S-1-5-21-1729024293-2662946533-1075726789-1001\SOFTWARE\BraveSoftware
C:\Users\33625\AppData\Local\BraveSoftware
HKCU\SOFTWARE\Avanquest
HKU\S-1-5-21-1729024293-2662946533-1075726789-1001\SOFTWARE\Avanquest
C:\Program Files (x86)\Common Files\Avanquest Software
HKCU\SOFTWARE\Chromium
HKU\S-1-5-21-1729024293-2662946533-1075726789-1001\SOFTWARE\Chromium
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh advfirewall set allprofiles state on
WinsockFix
EmptyRecycle
EmptyTemp
End::