CreateRestorePoint:
2015-09-03 18:10 - 2015-09-03 19:51 - 00000000 ____D C:\Users\-\AppData\Roaming\tor
2015-09-03 17:27 - 2015-09-03 18:14 - 00002141 _____ C:\WINDOWS\system32\1
2015-09-03 17:11 - 2015-09-03 17:11 - 07134400 _____ (Sysinternals - www.sysinternals.com) C:\Users\-\Desktop\disk2vhd.exe
2015-09-03 10:34 - 2015-09-03 10:34 - 01118208 _____ C:\Users\-\Desktop\SysMon.evtx
2015-09-03 10:23 - 2015-09-03 10:23 - 00710948 _____ C:\WINDOWS\system32\CFG2825601889
2015-09-02 11:55 - 2015-09-02 11:55 - 02383977 _____ (DIY DataRecovery.nl ) C:\Users\-\Desktop\MBRtool_Setup.exe
2015-09-03 18:02 - 2015-09-03 20:06 - 511173455 _____ () C:\Program Files\MEMORY.DMP
EmptyTemp: