System Startup details for 02c6eac1e0b83478fa957ee5d52b9a6b

Location

Registry Key

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\

Display Name

SpybotDeletingC7293

Filename

cmd.exe

File MD5 Hash

EEB024F2C81F0D55936FB825D21A91D6

Command

cmd /c del "C:\WINDOWS\system32\qoMdARHw.dll_old"