CreateRestorePoint:
FF user.js: detected! => C:\Users\my computer\AppData\Roaming\Mozilla\Firefox\Profiles\j30s7tgw.default\user.js [2015-04-05]
HKLM\...\Run: [] => [X]
wmic computersystem get manufacturer
wmic computersystem get model
EmptyTemp: