FilesInDirectory: c:\*.tmp
C:\Users\Owner\AppData\Local\Conduit
C:\Users\Owner\AppData\Local\SearchProtect
C:\Program Files (x86)\SearchProtect
CreateDummy: C:\Program Files (x86)\SearchProtect
C:\Windows\wininit.ini
CMD: FOR /F "usebackq delims==" %i IN (`wevtutil el`) DO wevtutil cl "%i"
Reboot: