Boot Verification Program

#need to set Winlogon ReportBootOk to 0 before this will work
https://technet.microsoft.com/en-us/library/cc963195.aspx
https://www.trendmicro.com/vinfo/us/threat-encyclopedia/malware/worm_alzore.jwe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BootVerificationProgram ImagePath = "%System%\azrolemain.exe"
$data += [PSObject] @{Path='HKLM:\System\CurrentControlSet\Control\BootVerificationProgram\'; Entries='ImagePath'}