Start::
CreateRestorePoint::
CloseProcesses:
Removeproxy:
Hosts:
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction
HKU\S-1-5-21-110431701-2858794518-3327108828-1001\...\Run: [Woom1] => explorer.exe hxxp://dinoraptzor.org
Task: {1365F8AA-7796-42E1-9CC4-146C0BD34299} - System32\Tasks\Woom1 => cmd.exe /c REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /f /v Woom1 /t REG_SZ /d "explorer.exe hxxp://dinoraptzor.org"
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh advfirewall set allprofiles state on
cmd: netsh winsock reset
Emptytemp:
End::