Script ZHPFix CreateRestorePoint IntegrityChecksFix TestSigningFix DeleteKey: HKLM\SOFTWARE\WOW6432Node\AVG C:\ProgramData\AVG C:\Users\Brees\AppData\Roaming\AVG C:\Users\Brees\AppData\Local\AVG DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\Common Files\AVG\Icarus\avg-av\icarus_ui.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\Common Files\AVG\Icarus\avg-av\icarus_ui.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-3024573055-3625204592-536517642-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\Common Files\AVG\Icarus\avg-av\icarus_ui.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3024573055-3625204592-536517642-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\Common Files\AVG\Icarus\avg-av\icarus_ui.exe.ApplicationCompany DeleteKey: HKCU\SOFTWARE\ca0e291c-abd4-5fc3-b6a0-3d4333eccbd7 DeleteKey: HKU\S-1-5-21-3024573055-3625204592-536517642-1001\SOFTWARE\ca0e291c-abd4-5fc3-b6a0-3d4333eccbd7 C:\Users\Brees\AppData\Local\Temp\mat-debug-21740.log C:\Users\Brees\AppData\Local\Temp\mat-debug-7468.log C:\Users\Brees\AppData\Local\Google\Chrome\User Data\Default\File System\000 DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\AppData\Roaming\uTorrent\uTorrent.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\AppData\Roaming\uTorrent\uTorrent.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\AppData\Local\Temp\RarSFX0\Guitar Rig 6 Setup PC.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\AppData\Local\Temp\RarSFX0\Guitar Rig 6 Setup PC.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\AppData\Local\Temp\keygen.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\Desktop\GuitarRig6_Keygen.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\AppData\Local\SquirrelTemp\Update.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\AppData\Local\SquirrelTemp\Update.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\Downloads\MiniMeters v088 WiN-OSX-LiNUX.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\AppData\Local\Temp\nsbB5AD.tmp\n25d.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\360\Total Security\safemon\PopWndTracker.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\360\Total Security\safemon\PopWndTracker.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\AppData\Local\Temp\nsf5EA2.tmp\Bloomberg.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\AppData\Local\Temp\nszA88C.tmp\Bloomberg.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\360\Total Security\safemon\360SPTool.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\360\Total Security\safemon\360SPTool.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\AppData\Local\Temp\nss48E3.tmp\Bloomberg.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\AppData\Local\Temp\.opera\Opera GX Installer\installer.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\AppData\Local\Temp\.opera\Opera GX Installer\installer.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-3024573055-3625204592-536517642-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\AppData\Roaming\uTorrent\uTorrent.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3024573055-3625204592-536517642-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\AppData\Roaming\uTorrent\uTorrent.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-3024573055-3625204592-536517642-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\AppData\Local\Temp\RarSFX0\Guitar Rig 6 Setup PC.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3024573055-3625204592-536517642-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\AppData\Local\Temp\RarSFX0\Guitar Rig 6 Setup PC.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-3024573055-3625204592-536517642-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\AppData\Local\Temp\keygen.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3024573055-3625204592-536517642-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\Desktop\GuitarRig6_Keygen.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3024573055-3625204592-536517642-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\AppData\Local\SquirrelTemp\Update.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3024573055-3625204592-536517642-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\AppData\Local\SquirrelTemp\Update.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-3024573055-3625204592-536517642-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\Downloads\MiniMeters v088 WiN-OSX-LiNUX.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3024573055-3625204592-536517642-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\AppData\Local\Temp\nsbB5AD.tmp\n25d.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3024573055-3625204592-536517642-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\360\Total Security\safemon\PopWndTracker.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3024573055-3625204592-536517642-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\360\Total Security\safemon\PopWndTracker.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-3024573055-3625204592-536517642-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\AppData\Local\Temp\nsf5EA2.tmp\Bloomberg.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3024573055-3625204592-536517642-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\AppData\Local\Temp\nszA88C.tmp\Bloomberg.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3024573055-3625204592-536517642-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\360\Total Security\safemon\360SPTool.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3024573055-3625204592-536517642-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\360\Total Security\safemon\360SPTool.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-3024573055-3625204592-536517642-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\AppData\Local\Temp\nss48E3.tmp\Bloomberg.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3024573055-3625204592-536517642-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\AppData\Local\Temp\.opera\Opera GX Installer\installer.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3024573055-3625204592-536517642-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\Brees\AppData\Local\Temp\.opera\Opera GX Installer\installer.exe.ApplicationCompany DeleteKey: HKCU\SOFTWARE\BitTorrent DeleteKey: HKCU\SOFTWARE\BitTorrentPersist DeleteKey: HKU\S-1-5-21-3024573055-3625204592-536517642-1001\SOFTWARE\BitTorrent DeleteKey: HKU\S-1-5-21-3024573055-3625204592-536517642-1001\SOFTWARE\BitTorrentPersist C:\Users\Brees\AppData\Roaming\utorrent C:\Users\Brees\AppData\Local\BitTorrentHelper C:\Users\Brees\AppData\LocalLow\uTorrent.WebView2 DeleteKey: HKLM\SOFTWARE\Setup C:\ProgramData\Temporary C:\Program Files (x86)\360 C:\ProgramData\360Quarant C:\WINDOWS\System32\Config\systemprofile\AppData\Roaming\360safe C:\Windows\SoftwareDistribution\Download\ * C:\Windows\Temp\*.* C:\Users\CurrentUserName\Appdata\Local\Temp\*.* cmd: ipconfig /flushdns cmd: netsh winsock reset Cmd: netsh advfirewall reset Cmd: Netsh advfirewall set allprofiles state on EmptyCLSID EmptyFlash EmptyTemp EmptyTracing EmptyPrefetch EmptyProxy EmptyRecycle WinsockFix Fin