Win.Trojan.PoSeidon RegistryItem Indicators Matches known RegistryItem Text values that indicate Win.Trojan.PoSeidon execution and persistence CSS 2015-03-13T18:43:44 winhost pes13