| ZeroBOX

Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide 2020-06-10
Version history 2020-06-10

| ZeroBOX

fit.exe "C:\Users\test22\AppData\Local\Temp\fit.exe"
560
- cmd.exe cmd /c ""C:\Users\Public\Trast.bat" "
  972
  - cmd.exe C:\Windows\system32\cmd.exe /K C:\Users\Public\UKO.bat
    808
    - reg.exe reg delete hkcu\Environment /v windir /f
      532
    - reg.exe reg add hkcu\Environment /v windir /d "cmd /c start /min C:\Users\Public\KDECO.bat reg delete hkcu\Environment /v windir /f && REM "
      1776
    - schtasks.exe schtasks /Run /TN \Microsoft\Windows\DiskCleanup\SilentCleanup /I
      2820
- cmd.exe cmd /c ""C:\Users\Public\nest.bat" "
  2980
  - reg.exe reg delete hkcu\Environment /v windir /f
    2556

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID

default registry file network process services synchronisation iexplore office pdf