[APPLE-ID] Itunes Brute/Checker By MrJorab | Proxyless

[Boale]

Tested At:

12 Nov 2018

 

 

Combo:

Mail:Pass

 

 

Download:

Hidden Content
You'll be able to see the hidden content once you reply to this topic or upgrade your account.

[xMostafa]

Hope this works

[fimuge]

vamos ver

[EvilNoak]

I'll check it my friend

[NoOne15]

grazie amigo

[choco01]

klk 

 

wa

 

 

wa

 

wa

[jeji]

Hope not a rat

[wallaienne]

think youuu man 

[boogij]

Infected.

Drops C:\Users\admin\AppData\Roaming\usrlog.exe, sets it in the HKEY_CURRENT_USER autorun registry and runs it endless times.


Tagging to notify.

Spoiler

tag

tag

tag

tag

tag

tag

tag

Spoiler

-=] Execution time: 31.51 seconds
-=] Processing time: 0.64 seconds
-=] Analysis time: 31.92 seconds

Processes Created:
==================
[CreateProcess] Explorer.EXE:1488 > "%UserProfile%\Desktop\Itunes Checker.exe " [Child PID: 3304]
[CreateProcess] Itunes Checker.exe:3304 > "%AppData%\usrlog.exe " [Child PID: 1268]

File Activity:
==================
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]
[CreateFile] Itunes Checker.exe:3304 > %AppData%\usrlog.exe [SHA256: b9993c7f4be467b399d4ce58c075e2574d18a1b81bba95a69c32f7771f2382c2]

Registry Activity:
==================
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegDeleteValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass
[RegDeleteValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet = 0
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect = 1
[RegDeleteValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass
[RegDeleteValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet = 0
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect = 1
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] Itunes Checker.exe:3304 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe
[RegSetValue] usrlog.exe:1268 > HKCU\Software\Microsoft\Windows\CurrentVersion\Run\User Logon = C:\Users\AustriaVM\AppData\Roaming\usrlog.exe

[marlinsman1]

infected and dosnt even open. scammer