I have been trying to make a way for combofix to work better with AutoIT, as I would like to include it with a script I am writing. The one issue I have so far, is during the scan it will delete a regestry entry that I had the script create to start another script upon the reboot that has to occurr.
I think it is within the first could of "stages" I am wondering how I could detect when the combofix window is open, and has the entirety of the text:
Scanning for infected files . . .
The typicially dosen't take more than 10 minutes
However, scan times for badly infected machines may easily double
Completed Stage_1
Completed Stage_2
Completed ....
....
Completed Stage 49
Once it hits stage 48 or 49 I want it to make the regestry entry.
Any ideas?