When the bat file is started up, the name of the file will be changed automatically. I looked for this file in the file location, but I did not find it. Bat will automatically delete itself.I hope you can help me. Thank you very much. Below are the important logs: 11.05.2020 01.05.24 Task started Network Attack Blocker Time: 5/11/2020 1:05 AM 11.05.2020 01.05.24 Task started System Watcher Time: 5/11/2020 1:05 AM 11.05.2020 01.05.24 Task started IM Anti-Virus Time: 5/11/2020 1:05 AM 11.05.2020 01.05.24 Task started Web Anti-Virus Time: 5/11/2020 1:05 AM 11.05.2020 01.05.24 Task started Mail Anti-Virus Time: 5/11/2020 1:05 AM 11.05.2020 01.05.24 Task started Application Control Time: 5/11/2020 1:05 AM 11.05.2020 01.05.24 Task started Firewall Time: 5/11/2020 1:05 AM 11.05.2020 01.05.24 Task started File Anti-Virus Time: 5/11/2020 1:05 AM 11.05.2020 01.05.24 Task started Anti-Spam Time: 5/11/2020 1:05 AM 11.05.2020 01.05.24 Task started Anti-Banner Time: 5/11/2020 1:05 AM 11.05.2020 01.05.21 Task stopped File Anti-Virus Time: 5/11/2020 1:05 AM 11.05.2020 01.05.20 Task stopped Firewall Time: 5/11/2020 1:05 AM 11.05.2020 01.05.20 Task stopped Web Anti-Virus Time: 5/11/2020 1:05 AM 11.05.2020 01.05.20 Task stopped System Watcher Time: 5/11/2020 1:05 AM 11.05.2020 01.05.20 Task stopped Anti-Spam Time: 5/11/2020 1:05 AM 11.05.2020 01.05.20 Task stopped IM Anti-Virus Time: 5/11/2020 1:05 AM 11.05.2020 01.05.20 Task stopped Mail Anti-Virus Time: 5/11/2020 1:05 AM 11.05.2020 01.05.20 Task stopped Anti-Banner Time: 5/11/2020 1:05 AM 11.05.2020 01.05.20 Task stopped Application Control Time: 5/11/2020 1:05 AM 11.05.2020 01.05.20 Task stopped Network Attack Blocker Time: 5/11/2020 1:05 AM ... 11.05.2020 01.03.55 Application added to the Low Restricted group C:\Users\Gavin\AppData\Local\Temp\RunA19B.bat Application: C:\Users\Gavin\AppData\Local\Temp\RunA19B.bat Reason: default Application path: C:\Users\Gavin\AppData\Local\Temp\RunA19B.bat Time: 5/11/2020 1:03 AM ... 11.05.2020 00.27.07 Task started System Watcher Time: 5/11/2020 12:27 AM 11.05.2020 00.27.07 Task started Mail Anti-Virus Time: 5/11/2020 12:27 AM 11.05.2020 00.27.07 Task started IM Anti-Virus Time: 5/11/2020 12:27 AM 11.05.2020 00.27.07 Task started Application Control Time: 5/11/2020 12:27 AM 11.05.2020 00.27.07 Task started Web Anti-Virus Time: 5/11/2020 12:27 AM 11.05.2020 00.27.07 Task started Network Attack Blocker Time: 5/11/2020 12:27 AM 11.05.2020 00.27.07 Task started Firewall Time: 5/11/2020 12:27 AM 11.05.2020 00.27.07 Task started File Anti-Virus Time: 5/11/2020 12:27 AM 11.05.2020 00.27.07 Task started Anti-Banner Time: 5/11/2020 12:27 AM 11.05.2020 00.27.07 Task started Anti-Spam Time: 5/11/2020 12:27 AM 11.05.2020 00.26.59 Task stopped File Anti-Virus Time: 5/11/2020 12:26 AM 11.05.2020 00.26.58 Task stopped Firewall Time: 5/11/2020 12:26 AM 11.05.2020 00.26.58 Task stopped Application Control Time: 5/11/2020 12:26 AM 11.05.2020 00.26.58 Task stopped System Watcher Time: 5/11/2020 12:26 AM 11.05.2020 00.26.58 Task stopped Network Attack Blocker Time: 5/11/2020 12:26 AM 11.05.2020 00.26.58 Task stopped Mail Anti-Virus Time: 5/11/2020 12:26 AM 11.05.2020 00.26.58 Task stopped IM Anti-Virus Time: 5/11/2020 12:26 AM 11.05.2020 00.26.58 Task stopped Web Anti-Virus Time: 5/11/2020 12:26 AM 11.05.2020 00.26.58 Task stopped Anti-Spam Time: 5/11/2020 12:26 AM 11.05.2020 00.26.58 Task stopped Anti-Banner Time: 5/11/2020 12:26 AM ... 11.05.2020 00.23.27 Application added to the Low Restricted group C:\Users\Gavin\AppData\Local\Temp\Run9EC0.bat Application: C:\Users\Gavin\AppData\Local\Temp\Run9EC0.bat Reason: default Application path: C:\Users\Gavin\AppData\Local\Temp\Run9EC0.bat Time: 5/11/2020 12:23 AM ... ... 10.05.2020 23.48.58 Application added to the Low Restricted group C:\Users\Gavin\AppData\Local\Temp\RunE455.bat Application: C:\Users\Gavin\AppData\Local\Temp\RunE455.bat Reason: default Application path: C:\Users\Gavin\AppData\Local\Temp\RunE455.bat Time: 5/10/2020 11:48 PM ... ... 10.05.2020 23.42.56 Application added to the Low Restricted group C:\Users\Gavin\AppData\Local\Temp\Run9AC9.bat Application: C:\Users\Gavin\AppData\Local\Temp\Run9AC9.bat Reason: default Application path: C:\Users\Gavin\AppData\Local\Temp\Run9AC9.bat Time: 5/10/2020 11:42 PM ... ... 10.05.2020 22.22.25 Application added to the Low Restricted group C:\Users\Gavin\AppData\Local\Temp\Run93C4.bat Application: C:\Users\Gavin\AppData\Local\Temp\Run93C4.bat Reason: default Application path: C:\Users\Gavin\AppData\Local\Temp\Run93C4.bat Time: 5/10/2020 10:22 PM ... ... 10.05.2020 22.18.19 Application added to the Low Restricted group C:\Users\Gavin\AppData\Local\Temp\RunB67E.bat Application: C:\Users\Gavin\AppData\Local\Temp\RunB67E.bat Reason: default Application path: C:\Users\Gavin\AppData\Local\Temp\RunB67E.bat Time: 5/10/2020 10:18 PM ...
