start::
closeprocesses:
createrestorepoint:
HKU\S-1-5-21-4089050159-2748266293-4026137074-1000\...\StartupApproved\Run: => "Windscribe"
HKU\S-1-5-21-4089050159-2748266293-4026137074-1000\...\Run: [Windscribe] => "C:\Program Files (x86)\Windscribe\Windscribe.exe" -os_restart
C:\Program Files (x86)\Windscribe
S3 tapwindscribe0901; C:\WINDOWS\System32\drivers\tapwindscribe0901.sys [54896 2018-07-06] (Windscribe Limited -> The OpenVPN Project)
C:\WINDOWS\System32\drivers\tapwindscribe0901.sys
cmd: DISM /Online /Cleanup-image /Restorehealth
emptytemp:
end::