System Startup details for 4d7738515c6284c006e1ddee60deee45

Location

Registry Key

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\

Display Name

SpybotDeletingC1519

Filename

cmd.exe

File MD5 Hash

8F346D8CD55B50710E87D0C2D5B7FE2B

Command

cmd /c del "C:\WINDOWS\system32\wsnpoem\video.dll_tobedeleted"