System Startup details for 4711d1a3f2ff6538d7b561cd45ee9731

Location

Registry Key

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\

Display Name

SpybotDeletingC2640

Filename

cmd.exe

File MD5 Hash

181C4ADC12DE4318114D957D86F8232D

Command

cmd /c del "C:\WINDOWS\wt\webdriver.dll"