Script ZHPFix
EmptyFlash
EmptyTemp
EmptyCLSID
EmptyPrefetch
CreateRestorePoint
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:QuickTime Task
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\AVAST Software\Avast\aswChLic.exe.FriendlyAppName
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\AVAST Software\Avast\aswChLic.exe.ApplicationCompany
[HKU\S-1-5-21-1022989830-3034067165-3015242350-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\AVAST Software\Avast\aswChLic.exe.FriendlyAppName
[HKU\S-1-5-21-1022989830-3034067165-3015242350-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\AVAST Software\Avast\aswChLic.exe.ApplicationCompany
G2 - GCE: Preference [passHP][User Data\Default\Extensions] [eofcbnmajmjmplflapaojjnihcjkigck] Avast  =>.Avast Software s.r.o
G2 - GCE: Preference [passHP][User Data\Default\Local Extension Settings] [eofcbnmajmjmplflapaojjnihcjkigck]   =>.Avast Software s.r.o
P2 - EXT FILE: (.Avast Software s.r.o.) -- C:\Users\passHP\AppData\Roaming\Mozilla\Firefox\Profiles\berwj9ck.default-1574322108457\extensions\sp@avast.com.xpi [Unsigned]  =>.Avast Software s.r.o
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AvastUI.exe  =>.Avast Software s.r.o
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:AvastUI.exe  =>.Avast Software s.r.o
HKLM\SOFTWARE\AVAST Software  =>.AVAST Software
HKLM\SOFTWARE\WOW6432Node\Avast Software  =>.AVAST Software
HKCU\SOFTWARE\Avast Software  =>.AVAST Software
HKCU\SOFTWARE\AvastAdSDK  =>.Avast Software s.r.o
HKCU\SOFTWARE\Browser Cleanup  =>.Avast Software s.r.o
HKU\S-1-5-21-1022989830-3034067165-3015242350-1001\SOFTWARE\Avast Software  =>.AVAST Software
HKU\S-1-5-21-1022989830-3034067165-3015242350-1001\SOFTWARE\AvastAdSDK  =>.Avast Software s.r.o
HKU\S-1-5-21-1022989830-3034067165-3015242350-1001\SOFTWARE\Browser Cleanup  =>.Avast Software s.r.o
O43 - CFD: 28/09/2021 - [] D -- C:\ProgramData\AVAST Software  =>.AVAST Software
O43 - CFD: 28/09/2021 - [] D -- C:\Users\passHP\AppData\Local\AVAST Software  =>.AVAST Software
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\AVAST Software\Avast\aswChLic.exe.FriendlyAppName  =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\AVAST Software\Avast\aswChLic.exe.ApplicationCompany  =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1022989830-3034067165-3015242350-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\AVAST Software\Avast\aswChLic.exe.FriendlyAppName  =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1022989830-3034067165-3015242350-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\AVAST Software\Avast\aswChLic.exe.ApplicationCompany  =>.SUP.Orphan.MUICache
O61 - LFC: 2021/09/13 10:36:12 ASH . (..) -- C:\ProgramData\KGyGaAvL.sys   [952] [Unsigned]
P2 - EXT FILE: (.Avira Software.) -- C:\Program Files\Mozilla Firefox\browser\features\doh-rollout@mozilla.org.xpi [Unsigned]  =>.Avira Software
P2 - EXT FILE: (.Avira Software.) -- C:\Program Files\Mozilla Firefox\browser\features\formautofill@mozilla.org.xpi [Unsigned]  =>.Avira Software
P2 - EXT FILE: (.Avira Software.) -- C:\Program Files\Mozilla Firefox\browser\features\pictureinpicture@mozilla.org.xpi [Unsigned]  =>.Avira Software
P2 - EXT FILE: (.Avira Software.) -- C:\Program Files\Mozilla Firefox\browser\features\screenshots@mozilla.org.xpi [Unsigned]  =>.Avira Software
P2 - EXT FILE: (.Avira Software.) -- C:\Program Files\Mozilla Firefox\browser\features\webcompat-reporter@mozilla.org.xpi [Unsigned]  =>.Avira Software
P2 - EXT FILE: (.Avira Software.) -- C:\Program Files\Mozilla Firefox\browser\features\webcompat@mozilla.org.xpi [Unsigned]  =>.Avira Software
HKLM\SOFTWARE\WOW6432Node\Lavasoft  =>.Lavasoft
HKCU\SOFTWARE\Lavasoft  =>.Lavasoft
HKU\S-1-5-21-1022989830-3034067165-3015242350-1001\SOFTWARE\Lavasoft  =>.Lavasoft
O43 - CFD: 25/05/2019 - [0] D -- C:\Program Files (x86)\Lavasoft  =>.Lavasoft
O43 - CFD: 25/05/2019 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft  =>.Lavasoft
O43 - CFD: 25/05/2019 - [0] D -- C:\ProgramData\Lavasoft  =>.Lavasoft
O43 - CFD: 25/05/2019 - [0] D -- C:\Users\passHP\AppData\Roaming\Lavasoft  =>.Lavasoft
O43 - CFD: 25/05/2019 - [0] D -- C:\Users\passHP\AppData\Local\Lavasoft  =>.Lavasoft
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:QuickTime Task  =>Riskware.QuickTime