I've seen malware add-ons that add themselves via the Windows registry and are near impossible for a normal user to remove, I've also seen some modify internet

I've seen malware add-ons that add themselves via the Windows registry and are near impossible for a normal user to remove, I've also seen some modify internet behavior by setting malicious DNS servers via group policy. A simple reset of settings will do nothing against these threats.