CreateRestorePoint:
BootExecute: autocheck autochk * ⱽ뫠ౖፉ῔ጔ吠ొ䡐ፊ覠౗覠౗
CustomCLSID: HKU\S-1-5-21-4283896459-4070683001-661046522-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> No File Path
Task: {A9DDAFF4-7143-4ADC-8CF8-36A10BCB16B0} - System32\Tasks\{DEAD6DCD-77EE-41E7-2BA8-B150E9B7DC91} => C:\Windows\system32\zhnzron.dll/s "C:\Windows\system32\zhnzron.dll"
C:\Windows\system32\zhnzron.dll
EmptyTemp: