Dynamic pricer

HKCU\Software
HKCU\Software\AppDataLow /s
HKLM\Software
HKCU\Software\Microsoft\Command Processor /s
HKLM\Software\Microsoft\Command Processor /s
HKLM\Software\Microsoft\Windows\CurrentVersion\RunMRU /s
HKLM\System\CurrentControlSet\Control\Session Manager\AppcertDlls /s
%Homedrive%\*
%Homedrive%\*.
%Homedrive%\Recycler\*.exe /s
%Homedrive%\Recycler\*.scr /s
%Homedrive%\Recycler\*.pif /s
%Homedrive%\Recycler\*.vb* /s
%Homedrive%\$Recycle.bin\*.exe /s
%Homedrive%\$Recycle.bin\*.scr /s
%Homedrive%\$Recycle.bin\*.pif /s
%Homedrive%\$Recycle.bin\*.vb* /s
%Userprofile%\*
%Userprofile%\*.
%Allusersprofile%\*
%Allusersprofile%\*.
%LocalAppData%\*
%LocalAppData%\*.
%Userprofile%\Local Settings\*
%Userprofile%\Local Settings\*.
%Userprofile%\Local Settings\Application Data\*
%Userprofile%\Local Settings\Application Data\*.
%Userprofile%\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\*
%Userprofile%\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\*.
%Userprofile%\Local Settings\Application Data\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\*
%Userprofile%\Local Settings\Application Data\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\*.
%programFiles%\*
%programFiles%\*.
%programfiles%\Google\Desktop\*.
%ProgramFiles%\Common Files\*.
%ProgramFiles(X86)%\Common Files\*.
%Systemroot%\Installer\*.
%Systemroot%\Temp\*.exe /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\*.exe /lockedfiles
%systemroot%\system32\*.in*
%systemroot%\PSS\* /s
%systemroot%\Tasks\*
%systemroot%\Tasks\*.
%systemroot%\system32\Tasks\*
%systemroot%\system32\Tasks\*.
%systemroot%\syswow64\Tasks\*
%systemroot%\syswow64\Tasks\*.
%systemroot%\system32\drivers\*.sy* /lockedfiles
%systemroot%\system32\config\*.exe /s
%Systemroot%\ServiceProfiles\*.exe /s
%systemroot%\system32\*.sys
dir %Homedrive%\* /S /A:L /C
msconfig
activex
/md5start
explorer.exe
winlogon.exe
wininit.exe
volsnap.sys
atapi.sys
ndis.sys
cdrom.sys
i8042prt.sys
iastor.sys
tdx.sys
netbt.sys
afd.sys
/md5stop
netsvcs
safebootminimal
safebootnetwork
CREATERESTOREPOINT

:OTL 
O2:64bit: - BHO: (ssaveeitakeep.) - {2F5A8E8E-0B08-ED2C-6699-8CCF600CDB84} - C:\ProgramData\ssaveeitakeep\N82bUv3e7.x64.dll File not found
O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKLM..\Run: [fst_fr_77]  File not found

:files
C:\ProgramData\ssaveeitakeep
C:\Users\déborah\AppData\Roaming\0D1F2W1G1I1F1T1QyE2W1L1G1Q1F2W1B
C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
C:\Users\déborah\AppData\Local\{00F74AF5-C696-45E5-90F0-6901D41D9F3F}
C:\Users\déborah\AppData\Local\{F826BA74-2F02-437F-A02C-DE38B8A9A06C}
C:\Users\déborah\AppData\Local\{F8D0E8B6-2E4D-4C77-8D50-156A071E4494}
C:\Users\déborah\AppData\Local\{F99DCBBC-363E-4818-B9B9-BFA786B55946}
C:\Users\déborah\AppData\Local\{FA1BE51B-6EC2-484D-AD91-E6D94F5A569E}
C:\Users\déborah\AppData\Local\{FB6627AF-02EE-428D-9A8E-8AC97FA01F19}
C:\Users\déborah\AppData\Local\{FBCD4656-0206-4698-B105-A7625375ECF6}
C:\Users\déborah\AppData\Local\{FCA7F012-B39F-46A5-99EF-368B6A10D2B4}
C:\Users\déborah\AppData\Local\{FD3B1583-0E3F-4C9A-9B75-F48F107FA206}
C:\Users\déborah\AppData\Local\{FDD6CA01-8BFB-4AAB-99D8-25F772831572}
C:\Users\déborah\AppData\Local\{FECCF499-BF61-4B21-8ABA-C989F7B2BA90}
C:\Users\déborah\AppData\Local\{FF737215-39AB-4744-8439-84174EAD0EE6}

:reg
[-HKEY_CURRENT_USER\Software\AppDataLow\Software\Feven Pro 1.1]
[-HKEY_CURRENT_USER\Software\AppDataLow\Software\Pricora 12.0]

:Commands 
[emptytemp] 
[emptyflash] 
[reboot]