System Startup details for 13d023438bdb6ca97c7d12779af4f046

Location

Registry Key

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\

Display Name

SpybotDeletingC9799

Filename

cmd.exe

File MD5 Hash

85D5DCF81AE47B68D5DC91255B9AD16F

Command

cmd /c del "C:\WINDOWS\system32\byXpolmM.dll_old"