start createrestorepoint: HKLM-x32\...\Run: [] => [X] S3 MFE_RR; \??\C:\Users\FRANK&~1\AppData\Local\Temp\mfe_rr.sys [X] emptytemp: end