CreateRestorePoint:
S1 NetUtils2016; C:\WINDOWS\system32\drivers\NetUtils2016.sys [914920 2018-06-06] () <==== ATTENTION
2018-09-15 18:42 - 2018-06-06 17:38 - 000624664 _____ C:\WINDOWS\system32\NetUtils2016.dll
2018-09-15 18:42 - 2016-08-05 19:54 - 000000000 ____D C:\Users\Default\AppData\Local\SoftThinks
2018-09-15 18:42 - 2016-08-05 19:54 - 000000000 ____D C:\Users\Default User\AppData\Local\SoftThinks
2014-11-08 03:33 - 2015-04-23 12:43 - 000606208 _____ () C:\Users\Andrew\AppData\Local\Temp\Quarantine.exe
CMD: FOR /F "usebackq delims==" %i IN (`wevtutil el`) DO wevtutil cl "%i"
Reboot: