System Startup details for 5671acd322b9a12bef6d193b2874cbb9

Location

Registry Key

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\

Display Name

SpybotDeletingD3631

Filename

cmd.exe

File MD5 Hash

175530916470EDBE41700F926EED4BB7

Command

cmd /c del "C:\WINDOWS\system32\wsnpoem\video.dll"