System Startup details for 2b326530f5d4fd4e6966ccc24c73a148

Location

Registry Key

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\

Display Name

SpybotDeletingC2781

Filename

cmd.exe

File MD5 Hash

BF3797D962C2DD639D7242A614BDA998

Command

cmd /c del "C:\WINNT\SchedLgU.Txt"