| ZeroBOX

Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide 2020-06-10
Version history 2020-06-10

| ZeroBOX

remit.exe "C:\Users\test22\AppData\Local\Temp\remit.exe"
1548
- cmd.exe cmd /c ""C:\Users\Public\Trast.bat" "
  2532
  - cmd.exe C:\Windows\system32\cmd.exe /K C:\Users\Public\UKO.bat
    2264
    - reg.exe reg delete hkcu\Environment /v windir /f
      816
    - reg.exe reg add hkcu\Environment /v windir /d "cmd /c start /min C:\Users\Public\KDECO.bat reg delete hkcu\Environment /v windir /f && REM "
      540
    - schtasks.exe schtasks /Run /TN \Microsoft\Windows\DiskCleanup\SilentCleanup /I
      2736
- cmd.exe cmd /c ""C:\Users\Public\nest.bat" "
  2960
  - reg.exe reg delete hkcu\Environment /v windir /f
    1276

No process loaded Click on a process in the tree above to load its data.

PID
Parent PID

default registry file network process services synchronisation iexplore office pdf