Great video mate, thanks for the review. If you allow me, i would like to suggest you make use of SysInternals AutoRuns and ProcessExplorer to show whether malware has become active on the system (you can make use of KillSwitch and other software too), this way you can indicate whether traces of malware are in memory and Autostart or not, and/if payload was downloaded.
Once again, great video.