toto mi vypisal JRT.exe:

File System: 2

Successfully deleted: C:\Users\Marko\AppData\Roaming\3909 (Folder)
Successfully deleted: C:\Users\Marko\AppData\Roaming\Mozilla\Firefox\Profiles\dwcolnq6.default-1588452505831\extensions\staged (Folder)

Deleted the following from C:\Users\Marko\AppData\Roaming\Mozilla\Firefox\Profiles\dwcolnq6.default-1588452505831\prefs.js
user_pref(browser.newtabpage.url, hxxps://securesearch.org/homepage?hp=2&pId=BT170603&iDate=2020-05-04 04:23:23&bName=);

Registry: 0