Start::
CreateRestorePoint
EmptyCLSID
EmptyFlash
EmptyTracing
EmptyPrefetch
EmptyProxy
EmptyRecycle
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk
C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dalelnnofafalcmkmnhdbigbjjkloabo
C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk
C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\ngohaaocccbohaffogpbgfpmpgbcgccg
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:avgnt 
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:Avira SystrayStartTrigger 
HKLM\SOFTWARE\WOW6432Node\Avira 
HKCU\SOFTWARE\Avira 
HKU\.DEFAULT\SOFTWARE\Avira 
HKU\S-1-5-21-2571112955-4239876419-1220594018-1001\SOFTWARE\Avira 
C:\ProgramData\Avira 
C:\Users\User\AppData\Local\Avira 
C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Avira 
HKLM\SOFTWARE\Bitdefender 
HKCU\SOFTWARE\Bitdefender 
HKU\.DEFAULT\SOFTWARE\SetID 
HKU\S-1-5-21-2571112955-4239876419-1220594018-1001\SOFTWARE\Bitdefender
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh advfirewall set allprofiles state on
WinsockFix
EmptyTemp
End::