CreateRestorePoint: CloseProcesses: C:\WINDOWS\SysNative\drivers\ucguard.sys EmptyTemp: