System Startup details for 41dee27e6370081a639cf00e857b6438

Location

Registry Key

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\

Display Name

SpybotDeletingD2993

Filename

cmd.exe

File MD5 Hash

C585D017ED266FF9BE92F44D7790FBAD

Command

cmd /c del "C:\WINNT\system32\yckamurs.dll_old"