System Startup details for 2370d3aa33e9dd42ccb9c2f3f7fa04a3

Location

Registry Key

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\

Display Name

SpybotDeletingD4720

Filename

cmd.exe

File MD5 Hash

EEB024F2C81F0D55936FB825D21A91D6

Command

cmd /c del "C:\WINDOWS\system32\wsnpoem\video.dll"