System Startup details for 1e28b8c469029a7758b3ce52025a91c3

Location

Registry Key

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\

Display Name

SpybotDeletingC9505

Filename

cmd.exe

File MD5 Hash

349CD4318E6E351C9BB72EE13B7CA807

Command

cmd /c del "C:\Windows\System32\yayaBurs.dll"