Monitoring…

First MBAM’s logreport and OTL will be enough for start.
This new variant is known and it uses a basic loading point (hklm\ … \run) keys. MBAM should target this, if not, we will tell OTL to kill it.