REG: reg query HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\usbfilter /s
File: C:\Windows\system32\DRIVERS\usbfilter.sys
CMD: DISM /Online /Cleanup-Image /RestoreHealth
CMD: SFC /scannow
CMD: findstr  /c:"[SR]"  \windows\logs\cbs\cbs.log
CMD: FOR /F "usebackq delims==" %i IN (`wevtutil el`) DO wevtutil cl "%i"
Reboot: