Start:: SystemRestore: On CreateRestorePoint: CloseProcesses: Start:: DeleteKey: HKLM\SYSTEM\CurrentControlSet\Services\BITS_bkp DeleteKey: HKLM\SYSTEM\CurrentControlSet\Services\dosvc_bkp DeleteKey: HKLM\SYSTEM\CurrentControlSet\Services\UsoSvc_bkp DeleteKey: HKLM\SYSTEM\CurrentControlSet\Services\WaaSMedicSvc_bkp DeleteKey: HKLM\SYSTEM\CurrentControlSet\Services\wuauserv_bkp End::