System Startup details for 249df5c4eea424c5a0922808dd9b0cf9

Location

Registry Key

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\

Display Name

SpybotDeletingC4397

Filename

cmd.exe

File MD5 Hash

6D778E0F95447E6546553EEEA709D03C

Command

cmd /c del "C:\WINDOWS\system32\khfDuUMg.dll_old"