start::
CreateRestorePoint:
CloseProcesses:
HKLM-x32\...\Run: [] => [X]
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Winsock: Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 07 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
MSCONFIG\startupreg: NordVPN => C:\Program Files (x86)\NordVPN\NordVPN.exe
MSCONFIG\Services: nordvpn-service => 2
C:\Program Files (x86)\NordVPN
C:\ProgramData\BitRaider
CMD: cscript %windir%\System32\slmgr.vbs /dli
CMD: netsh winsock reset 
EmptyTemp:
end::