Start::
CreateRestorePoint
EmptyCLSID
EmptyFlash
EmptyTracing
EmptyPrefetch
EmptyProxy
HKLM64\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0B4A4B2-A6AC-4531-AF21-978AF8FA5495
C:\WINDOWS\System32\Tasks\Avast Software\Overseer
C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe
G2 - GCE: Preference [flosal][User Data\Default\Extensions] [eofcbnmajmjmplflapaojjnihcjkigck] Avast =>.Avast Software s.r.o
G2 - GCE: Preference [flosal][User Data\Default\Local Extension Settings] [eofcbnmajmjmplflapaojjnihcjkigck] =>.Avast Software s.r.o
HKLM\SOFTWARE\AVAST Software =>.AVAST Software
HKCU\SOFTWARE\AvastAdSDK =>.Avast Software s.r.o
HKU\S-1-5-21-2565604041-4069925371-3295733377-1024\SOFTWARE\AvastAdSDK =>.Avast Software s.r.o
ProgramData\AVAST Software =>.AVAST Software
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} =>.SUP.Orphan
HKLM\Software\Wow6432Node\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} =>.SUP.Orphan
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\SpyshelterExt =>.SUP.Orphan
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx =>.SUP.Orphan
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip =>.SUP.Orphan
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\SpyshelterExt =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu =>.SUP.Orphan
HKLM\Software\Classes\Drive\shellex\ContextMenuHandlers\SpyshelterExt =>.SUP.Orphan
C:\WINDOWS\Installer\167ea0f6.msp =>.SUP.Obsolete.Adobe
C:\WINDOWS\Installer\184a104f.msp =>.SUP.Obsolete.Adobe
C:\WINDOWS\Installer\192fc3f0.msp =>.SUP.Obsolete.Adobe
C:\WINDOWS\Installer\19a16e96.msp =>.SUP.Obsolete.Adobe
C:\WINDOWS\Installer\227ae25.msp =>.SUP.Obsolete.Adobe
C:\WINDOWS\Installer\23c1c021.msp =>.SUP.Obsolete.Adobe
C:\WINDOWS\Installer\275df164.msp =>.SUP.Obsolete.Adobe
C:\WINDOWS\Installer\29c958da.msp =>.SUP.Obsolete.Adobe
C:\WINDOWS\Installer\2c9c10dd.msp =>.SUP.Obsolete.Adobe
C:\WINDOWS\Installer\33081629.msp =>.SUP.Obsolete.Adobe
C:\WINDOWS\Installer\367d8c.msp =>.SUP.Obsolete.Adobe
C:\WINDOWS\Installer\3800eb40.msp =>.SUP.Obsolete.Adobe
C:\WINDOWS\Installer\38d6cc7b.msp =>.SUP.Obsolete.Adobe
C:\WINDOWS\Installer\410b62d1.msp =>.SUP.Obsolete.Adobe
C:\WINDOWS\Installer\4542d4e.msp =>.SUP.Obsolete.Adobe
C:\WINDOWS\Installer\622523b4.msp =>.SUP.Obsolete.Adobe
C:\WINDOWS\Installer\6a154e.msp =>.SUP.Obsolete.Adobe
C:\Users\flosal\AppData\Local\Google\Chrome\User Data\Default\File System\000 =>.SUP.Temporary.Chrome
C:\Users\flosal\AppData\Local\Google\Chrome\User Data\Default\File System\001 =>.SUP.Temporary.Chrome
C:\Users\flosal\AppData\Local\Google\Chrome\User Data\Default\File System\002 =>.SUP.Temporary.Chrome
C:\Users\flosal\AppData\Local\Google\Chrome\User Data\Default\File System\003 =>.SUP.Temporary.Chrome
C:\Users\flosal\AppData\Local\Google\Chrome\User Data\Default\File System\004 =>.SUP.Temporary.Chrome
C:\Users\flosal\AppData\Local\Google\Chrome\User Data\Default\File System\005 =>.SUP.Temporary.Chrome
C:\Users\flosal\AppData\Local\Google\Chrome\User Data\Default\File System\006 =>.SUP.Temporary.Chrome
C:\Users\flosal\AppData\Local\Google\Chrome\User Data\Default\File System\007 =>.SUP.Temporary.Chrome
C:\Users\flosal\AppData\Local\Google\Chrome\User Data\Default\File System\008 =>.SUP.Temporary.Chrome
C:\Users\flosal\AppData\Local\Google\Chrome\User Data\Default\File System\009 =>.SUP.Temporary.Chrome
C:\Users\flosal\AppData\Local\Google\Chrome\User Data\Default\File System\010 =>.SUP.Temporary.Chrome
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\flosal\AppData\Local\Temp\RarSFX1\setupdownloader.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\flosal\AppData\Local\Temp\RarSFX1\setupdownloader.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-2565604041-4069925371-3295733377-1024\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\flosal\AppData\Local\Temp\RarSFX1\setupdownloader.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-2565604041-4069925371-3295733377-1024\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\flosal\AppData\Local\Temp\RarSFX1\setupdownloader.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-2565604041-4069925371-3295733377-1024\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-2565604041-4069925371-3295733377-1024\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe.ApplicationCompany =>.SUP.Orphan.MUICache
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh advfirewall set allprofiles state on
WinsockFix
EmptyRecycle
EmptyTemp
End::