start::
closeprocesses:
createrestorepoint:
HKLM\SYSTEM\CurrentControlSet\Services\aswSP
HKLM\SYSTEM\CurrentControlSet\Services\aswMonFlt
HKLM\SYSTEM\CurrentControlSet\Services\aswSnx
emptytemp:
end::