O7 - Policy: HKLM\Software\Microsoft\Windows Defender\Features: [TamperProtection] = 4
O7 - Policy: HKLM\Software\Microsoft\Windows Defender\Real-Time Protection: [DisableRealtimeMonitoring] = 1
O4 - HKCU\..\Run: [maibenben] = C:\Windows\system32\cmd.exe /c start www.exinariuminix.info