System Startup details for ecaf145ca0cdad92e438a0afaad93dbc

Location

Registry Key

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\

Display Name

SpybotDeletingC1735

Filename

cmd.exe

File MD5 Hash

1911498680D5A6B6B32629E196F33C6D

Command

cmd /c del "C:\WINDOWS\system32\gdmemrdy.dll"