http://www.kitploit.com/2013/01/zeus-registry-analysis-using-volatility.html