<SYSTEM32>\reg.exe ADD HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run /v system /t REG_SZ /d "<Drive name for removable media>:\?????.exe" /f
<SYSTEM32>\cmd.exe /c "%TEMP%\RegSet.bat"
Attempts to shut down the Windows operating system.
Modifies file system :
Creates the following files:
C:\新建文件夹.exe
C:\AutoRun.inf
%TEMP%\RegSet.bat
Sets the 'hidden' attribute to the following files: