Malware Log Analysis

shared / loverboy666xxx
content copied

content

Start:: CloseProcesses: DeleteKey: HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{2806F34E-16BA-41BC-AA3C-5134B3D49A9D} DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1709695016-1157341809-3477375620-1001\Products\E43F6082AB61CB14AAC315433B4DA9D9 DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\19E36D30CE208454EA2E4CA562570791 Unlock: C:\WINDOWS\Installer\106ce42a.msi File: C:\WINDOWS\Installer\106ce42a.msi C:\WINDOWS\Installer\106ce42a.msi C:\Users\gabri\AppData\Local\Temp\xbllq4Tbq1qVdy2G AlternateDataStreams: C:\Users\gabri\Desktop\Escritorio\SecurityCheck.exe:MBAM.Zone.Identifier [26] AlternateDataStreams: C:\Users\gabri\Downloads\esetonlinescanner.exe:MBAM.Zone.Identifier [314] HKU\.DEFAULT\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION Comment: Remove temporary files via FRST EmptyTemp: End::