windows malware investigation