Edited header and added winlogon
added cleanup script and vss writers