CMD: sc config WUDFRd start= auto
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [515776 2018-11-13] (Symantec Corporation)
DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eeCtrl
S3 Symantec SymSnap VSS Provider; C:\Windows\system32\dllhost.exe /Processid:{4DB90D5C-2D86-4014-9349-741A696FA2A7}
S3 WimFltr; system32\DRIVERS\wimfltr.sys [X] 
DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WimFltr
FOR /F "usebackq delims==" %i IN (`wevtutil el`) DO wevtutil cl "%i"
Reboot: