CCleaner Trojan.Floxif

(https://sensorstechforum.com/ccleaner-trojan-floxif-malware-how-to-remove/):

Query

select * from registry where path like 'HKEY_LOCAL_MACHINE\SOFTWARE\Piriform\Agomo%';

Additional Query Info

• Version: 2.2.1
• Interval: 3600

JSON

{
  "queries": {
    "CCleaner Trojan.Floxif": {
      "query": "select * from registry where path like 'HKEY_LOCAL_MACHINE\SOFTWARE\Piriform\Agomo%';",
      "interval": "3600",
      "platform": "",
      "version": "2.2.1",
      "description": "(https://sensorstechforum.com/ccleaner-trojan-floxif-malware-how-to-remove/)",
      "value": ""
    }
  }
}