Start::
CreateRestorePoint
EmptyCLSID
EmptyFlash
EmptyTracing
EmptyPrefetch
EmptyProxy
HKLM\SOFTWARE\029c4619-0385-5543-9426-46f9987161d9
HKLM\SOFTWARE\410fcd79-1be8-5bf1-986e-ea09c55f7edf
HKLM\SOFTWARE\57979c68-f490-55b8-8fed-8b017a5af2fe
HKCU\SOFTWARE\03ceac78-9166-585d-b33a-90982f435933
HKCU\SOFTWARE\b80c210b-b721-5d13-a51a-89790ee6761f
HKCU\SOFTWARE\d4bdf6df-7a5c-51e4-b6d0-4309a13db14d
HKCU\SOFTWARE\f844a100-2ca0-51d4-8013-d11548b01669
HKU\S-1-5-21-795271049-4234349049-3760370567-1001\SOFTWARE\03ceac78-9166-585d-b33a-90982f435933
HKU\S-1-5-21-795271049-4234349049-3760370567-1001\SOFTWARE\b80c210b-b721-5d13-a51a-89790ee6761f
HKU\S-1-5-21-795271049-4234349049-3760370567-1001\SOFTWARE\d4bdf6df-7a5c-51e4-b6d0-4309a13db14d
HKU\S-1-5-21-795271049-4234349049-3760370567-1001\SOFTWARE\f844a100-2ca0-51d4-8013-d11548b01669
C:\Users\ncast\AppData\Roaming\Mozilla\Firefox\Profiles\xkiissdy.default-release\extensions\jid1-93CWPmRbVPjRQA@jetpack.xpi
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA}
HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:\\192.168.1.11\Public\Software\441.41-desktop-win10-64bit-international-whql-rp.exe.FriendlyAppName
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:\\192.168.1.11\Public\Software\441.41-desktop-win10-64bit-international-whql-rp.exe.ApplicationCompany
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:\\192.168.1.11\Public\Software\390.77-desktop-win10-64bit-international-whql.exe.FriendlyAppName
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:\\192.168.1.11\Public\Software\390.77-desktop-win10-64bit-international-whql.exe.ApplicationCompany
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:\\192.168.1.11\Public\Software\Apache_OpenOffice_4.1.1_Win_x86_install_fr.exe.FriendlyAppName
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:E:\Battle.net\Battle.net Launcher.exe.FriendlyAppName
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:E:\Battle.net\Battle.net Launcher.exe.ApplicationCompany
[HKU\S-1-5-21-795271049-4234349049-3760370567-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:\\192.168.1.11\Public\Software\441.41-desktop-win10-64bit-international-whql-rp.exe.FriendlyAppName
[HKU\S-1-5-21-795271049-4234349049-3760370567-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:\\192.168.1.11\Public\Software\441.41-desktop-win10-64bit-international-whql-rp.exe.ApplicationCompany
[HKU\S-1-5-21-795271049-4234349049-3760370567-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:\\192.168.1.11\Public\Software\390.77-desktop-win10-64bit-international-whql.exe.FriendlyAppName
[HKU\S-1-5-21-795271049-4234349049-3760370567-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:\\192.168.1.11\Public\Software\390.77-desktop-win10-64bit-international-whql.exe.ApplicationCompany
[HKU\S-1-5-21-795271049-4234349049-3760370567-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:\\192.168.1.11\Public\Software\Apache_OpenOffice_4.1.1_Win_x86_install_fr.exe.FriendlyAppName
[HKU\S-1-5-21-795271049-4234349049-3760370567-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:E:\Battle.net\Battle.net Launcher.exe.FriendlyAppName
[HKU\S-1-5-21-795271049-4234349049-3760370567-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:E:\Battle.net\Battle.net Launcher.exe.ApplicationCompany
C:\Windows\SysWOW64\Macromed\Flash
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh advfirewall set allprofiles state on
WinsockFix
EmptyRecycle
EmptyTemp
End::