Start:: CreateRestorePoint:: CloseProcesses: Removeproxy: Hosts: FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction HKU\S-1-5-21-110431701-2858794518-3327108828-1001\...\Run: [Woom1] => explorer.exe hxxp://dinoraptzor.org Task: {1365F8AA-7796-42E1-9CC4-146C0BD34299} - System32\Tasks\Woom1 => cmd.exe /c REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /f /v Woom1 /t REG_SZ /d "explorer.exe hxxp://dinoraptzor.org" cmd: ipconfig /flushdns cmd: netsh advfirewall reset cmd: netsh advfirewall set allprofiles state on cmd: netsh winsock reset Emptytemp: End::