-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathpersistence_check_log.txt
More file actions
65 lines (57 loc) · 3.5 KB
/
Copy pathpersistence_check_log.txt
File metadata and controls
65 lines (57 loc) · 3.5 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
================================
Persistence Check Log
Date: 11/02/2025
Time: 12:00:17.22
================================
---------------------------------------------------
Checking: HKCU\Software\Microsoft\Windows\CurrentVersion\Run
---------------------------------------------------
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Zoom REG_SZ "C:\Program Files\Zoom\bin\Zoom.exe" --silent
Spotify REG_SZ "C:\Users\User\AppData\Roaming\Spotify\Spotify.exe" --autostart
Discord REG_SZ "C:\Users\User\AppData\Local\Discord\app.exe" --minimized
Steam REG_SZ "C:\Program Files (x86)\Steam\steam.exe" -silent
AdobeCreativeCloud REG_SZ "C:\Program Files\Adobe\Creative Cloud\ACC\CreativeCloud.exe" --background
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\AutorunsDisabled
Status: Entries found in HKCU\Software\Microsoft\Windows\CurrentVersion\Run
---------------------------------------------------
Checking: HKLM\Software\Microsoft\Windows\CurrentVersion\Run
---------------------------------------------------
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
WindowsDefender REG_EXPAND_SZ %windir%\system32\WindowsDefenderSystray.exe
RealtekAudioService REG_SZ "C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_01de91f5c3258938\RtkAudUService64.exe" -background
Status: Entries found in HKLM\Software\Microsoft\Windows\CurrentVersion\Run
---------------------------------------------------
Checking: HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
---------------------------------------------------
Status: No entries found in HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
---------------------------------------------------
Checking: HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce
---------------------------------------------------
Status: No entries found in HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce
---------------------------------------------------
Checking: HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
---------------------------------------------------
ERROR: The system was unable to find the specified registry key or value.
Status: No entries found in HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
---------------------------------------------------
Checking: HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
---------------------------------------------------
ERROR: The system was unable to find the specified registry key or value.
Status: No entries found in HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
---------------------------------------------------
Checking Startup folder: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
---------------------------------------------------
Volume in drive C has no label.
Volume Serial Number is B64B-9C23
Directory of C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
07/12/2024 10:00 pm <DIR> .
26/01/2025 11:49 pm <DIR> ..
07/12/2024 10:00 pm 761 OBS Studio.lnk
1 File(s) 761 bytes
2 Dir(s) 26,451,472,384 bytes free
Status: Files found in Startup folder.
---------------------------------------------------
Persistence check completed.
Check persistence_check_log.txt for details.
================================