System Startup details for e57d3e56b3ce09a0f3ce89e156a5bdf0

Location

Registry Key

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\

Display Name

SpybotDeletingD2898

Filename

cmd.exe

File MD5 Hash

49A5F0A9A539780BA5A1A202416915A0

Command

cmd /c del "C:\WINDOWS\system32\byXQKccB.dll"