CloseProcesses: CreateRestorePoint: C:\ProgramData\Microsoft\Security\ Emptytemp: