erikoka

Hello, I get a message from MalwareBytes antivirus today path below Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon => at the value data of SHELL was an wtime.cmd command that Malware Bytes get this as a Hijacked ! Anyone has the idea what is this ? I deleted it from SHELL registry but however I needed a conclusion to make further steps ! I don't know if is a trojan or whatever !