Start:: SystemRestore: On CreateRestorePoint: CloseProcesses: Reg: reg query "HKCU\SOFTWARE\Classes\CLSID\{72AD0A89-B69C-4700-AE8C-4AD44350E487}\InprocServer32" Reg: reg delete "HKCU\SOFTWARE\Classes\CLSID\{72AD0A89-B69C-4700-AE8C-4AD44350E487}" /f End::