CloseProcesses:
CreateRestorePoint:
EmptyTemp:
CMD: dir /a "C:\ProgramData"
FilesInDirectory: C:\Users\Klusek\AppData\Local\*.exe;*.dll;*.ini
FilesInDirectory: C:\Users\Klusek\AppData\Roaming\*.exe;*.dll;*.ini