CloseProcesses: RestoreQuarantine: C:\FRST\Quarantine\C\Windows\System32\cmd.exe.xBAD