Save the following file for Do.bat, control the relevant EXE file (actually text)
Copy Code code as follows:
Echo, go to Hell, >>1.exe.
Del C:\windows\logo1_.exe
Copy Li.exe C:\windows\logo1_.exe
attrib +h +s +r c:\windows\logo1_.exe
Del C:\windows\0Sy.exe
Copy Li.exe C:\windows\0Sy.exe
attrib +h +s +r c:\windows\0Sy.exe
Del C:\windows\1Sy.exe
Copy Li.exe C:\windows\1Sy.exe
attrib +h +s +r c:\windows\1Sy.exe
Del c:\windows\1.com
Copy Li.exe c:\windows\1.com
attrib +h +s +r c:\windows\1.com
Del C:\windows\2Sy.exe
Copy Li.exe C:\windows\2Sy.exe
attrib +h +s +r c:\windows\2Sy.exe
Del C:\windows\3Sy.exe
Copy Li.exe C:\windows\3Sy.exe
attrib +h +s +r c:\windows\3Sy.exe
Del C:\windows\4Sy.exe
Copy Li.exe C:\windows\4Sy.exe
attrib +h +s +r c:\windows\4Sy.exe
Del C:\windows\5Sy.exe
Copy Li.exe C:\windows\5Sy.exe
attrib +h +s +r c:\windows\5Sy.exe
Del C:\windows\kill.exe
Copy Li.exe C:\windows\kill.exe
attrib +h +s +r c:\windows\kill.exe
Del c:\windows\finders.com
Copy Li.exe c:\windows\finders.com
attrib +h +s +r c:\windows\finders.com
Del c:\windows\EXP10RER.com
Copy Li.exe c:\windows\EXP10RER.com
attrib +h +s +r c:\windows\EXP10RER.com
Del C:\windows\exerouter.exe
Copy Li.exe C:\windows\exerouter.exe
attrib +h +s +r c:\windows\exerouter.exe
Del C:\windows\rundll32.exe
Copy Li.exe C:\windows\rundll32.exe
attrib +h +s +r c:\windows\rundll32.exe
Del C:\windows\SVCHOST.exe
Copy Li.exe C:\windows\SVCHOST.exe
attrib +h +s +r c:\windows\SVCHOST.exe
Del C:\windows\WINLOGON.exe
Copy Li.exe C:\windows\WINLOGON.exe
attrib +h +s +r c:\windows\WINLOGON.exe
Then use antivirus software, into safe mode to remove
I found more exe file, so I wrote a script, or too tired
<script> var ab=["Logo1_.exe", "0Sy.exe", "1Sy.exe", "1.com "," 2Sy.exe "," 3Sy.exe "," 4Sy.exe "," 5Sy.exe "," Kill.exe "," finders.com "," exp10rer.com "," Exerouter.exe "," Rundll32.exe "," SVCHOST.exe "," WINLOGON.exe "]; for (Var i=0;i<ab.length;i++) {document.write ("del c:\\windows\\" +ab[i]+ "); document.write ("Copy li.exe c:\\windows\\" "+ab[i]+"); document.write ("attrib +h +s +r" c:\\windows\\ ""); } </script>
[ctrl+a All selected note: If you need to introduce external JS need to refresh to perform]