CloseProcesses:

HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1888222736-2957073895-2253413786-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://search.babylon.com/?babsrc=HP_ss&affID=100488&mntrId=4c2974f300000000000000265e2e8623
FF Extension: (Babylon) - C:\Users\Ciborki\AppData\Roaming\Mozilla\Firefox\Profiles\5q0z72bx.default\Extensions\ffxtlbr@babylon.com [2012-03-20] [Legacy] [not signed]
CHR DefaultSearchURL: Default -> hxxps://ch.search.yahoo.com/search?fr=chr-yo_gc&ei=utf-8&ilc=12&type=501549&p={searchTerms}
CHR DefaultSearchKeyword: Default -> yahoo.com search
CHR DefaultSuggestURL: Default -> hxxps://ff.search.yahoo.com/gossip?output=fxjson&command={searchTerms}