System Startup details for 2df000cf1b0ea462f177cde43d632e1c

Location

Registry Key

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\

Display Name

SpybotDeletingC917

Filename

cmd.exe

File MD5 Hash

49A5F0A9A539780BA5A1A202416915A0

Command

cmd /c del "C:\WINDOWS\system32\pmnoPfFW.dll"