Malware Log Analysis

shared / u/FadedKarma
content copied

content

Start:: SystemRestore: On CreateRestorePoint: CloseProcesses: Reg: reg query "HKCU\SOFTWARE\Classes\CLSID\{72AD0A89-B69C-4700-AE8C-4AD44350E487}\InprocServer32" Reg: reg delete "HKCU\SOFTWARE\Classes\CLSID\{72AD0A89-B69C-4700-AE8C-4AD44350E487}" /f End::