System Startup details for c8ba1222b862cf62936ef65e7cd6d8b0

Location

Registry Key

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\

Display Name

SpybotDeletingC2193

Filename

cmd.exe

File MD5 Hash

7705AED861C7FDBD919E771A1B42B5AA

Command

cmd /c del "C:\WINNT\SYSTEM32\ddaba.dll_tobedeleted"