ProntoApp Launch Agents (https://malwarefixes.com/remove-pronto-video-converter/): Artifact used by this malware
Query:
select * from launchd where name = 'pronto.notification.plist' or name = 'pronto.update.plist';Additional Query Info:
Version: 1.4.5
Platform: darwin
Interval: 3600
JSON:
{ "queries": { "Pronto": { "query" : "select * from launchd where name = 'pronto.notification.plist' or name = 'pronto.update.plist';", "interval" : "3600", "platform" : "darwin", "version": "1.4.5", "description" : "ProntoApp Launch Agents (https://malwarefixes.com/remove-pronto-video-converter/)", "value" : "Artifact used by this malware" } } }