R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: [ProxyServer] = 196.18.2.185:8000 (disabled)
O7 - Policy: HKLM\Software\Microsoft\Windows Defender\Real-Time Protection: [DisableRealtimeMonitoring] = 1
O7 - Suspicious (EV): HKCU\Environment: [WPSCLI_HOME] C:\Users\User\AppData\Local\Kingsoft\WPS Office\12.1.0.27458\clitool (file missing)
O7 - Windows Defender Exclusion - Paths: C:\Users\User\AppData\Local\Temp\files (file missing)
O7 - Windows Defender Exclusion - Paths: D:\OInstall.exe (file missing)