System Startup details for 0e2a05aee7b1d6f844aee99763844525

Location

Registry Key

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\

Display Name

SpybotDeletingD2896

Filename

cmd.exe

File MD5 Hash

F1D5B96D5DD8BA66D210DDC8F26A28D5

Command

cmd /c del "C:\WINDOWS\System32\ljJBttQK.dll_old"