CloseProcesses:
CreateRestorePoint:

DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DWPROT

DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DwProt