CreateRestorePoint:
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MsMpSvc]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\mpfilter]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\NisSrv]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Nisdrv]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft AntimalwareSetup]
C:\Program Files\Microsoft Security Client
C:\ProgramData\Microsoft\Microsoft Security Client
Reboot: