System Startup details for e9166a4677f185b92df35f433af44dca

Location

Registry Key

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\

Display Name

SpybotDeletingC2691

Filename

cmd.exe

File MD5 Hash

C585D017ED266FF9BE92F44D7790FBAD

Command

cmd /c del "C:\WINNT\system32\pmnnNghg.dll"