CloseProcesses:
CreateRestorePoint:
EmptyTemp:
CPUID CPU-Z 1.80.2 (HKLM\...\CPUID CPU-Z_is1) (Version: 1.80.2 - ) <==== ATTENTION
HKLM...\Run: [winlogui] => C:\WINDOWS\system32\winlogui.exe [1780736 2019-02-14] (Microsoft Corporation) [File not signed]
S3 SWDUMon; \SystemRoot\system32\DRIVERS\SWDUMon.sys [X]
2019-02-13 12:54 - 2019-02-14 07:45 - 001780736 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogui.exe