Start up bat file automatically,There is a strange thing that I can't solve

[Gavin MoreYoung]

When the bat file is started up, the name of the file will be changed automatically. I looked for this file in the file location, but I did not find it. Bat will automatically delete itself.I hope you can help me. Thank you very much.

Below are the important logs:

11.05.2020 01.05.24    Task started    Network Attack Blocker    Time: 5/11/2020 1:05 AM
11.05.2020 01.05.24    Task started    System Watcher    Time: 5/11/2020 1:05 AM
11.05.2020 01.05.24    Task started    IM Anti-Virus    Time: 5/11/2020 1:05 AM
11.05.2020 01.05.24    Task started    Web Anti-Virus    Time: 5/11/2020 1:05 AM
11.05.2020 01.05.24    Task started    Mail Anti-Virus    Time: 5/11/2020 1:05 AM
11.05.2020 01.05.24    Task started    Application Control    Time: 5/11/2020 1:05 AM
11.05.2020 01.05.24    Task started    Firewall    Time: 5/11/2020 1:05 AM
11.05.2020 01.05.24    Task started    File Anti-Virus    Time: 5/11/2020 1:05 AM
11.05.2020 01.05.24    Task started    Anti-Spam    Time: 5/11/2020 1:05 AM
11.05.2020 01.05.24    Task started    Anti-Banner    Time: 5/11/2020 1:05 AM
11.05.2020 01.05.21    Task stopped    File Anti-Virus    Time: 5/11/2020 1:05 AM
11.05.2020 01.05.20    Task stopped    Firewall    Time: 5/11/2020 1:05 AM
11.05.2020 01.05.20    Task stopped    Web Anti-Virus    Time: 5/11/2020 1:05 AM
11.05.2020 01.05.20    Task stopped    System Watcher    Time: 5/11/2020 1:05 AM
11.05.2020 01.05.20    Task stopped    Anti-Spam    Time: 5/11/2020 1:05 AM
11.05.2020 01.05.20    Task stopped    IM Anti-Virus    Time: 5/11/2020 1:05 AM
11.05.2020 01.05.20    Task stopped    Mail Anti-Virus    Time: 5/11/2020 1:05 AM
11.05.2020 01.05.20    Task stopped    Anti-Banner    Time: 5/11/2020 1:05 AM
11.05.2020 01.05.20    Task stopped    Application Control    Time: 5/11/2020 1:05 AM
11.05.2020 01.05.20    Task stopped    Network Attack Blocker    Time: 5/11/2020 1:05 AM
...
11.05.2020 01.03.55    Application added to the Low Restricted group    C:\Users\Gavin\AppData\Local\Temp\RunA19B.bat    Application: C:\Users\Gavin\AppData\Local\Temp\RunA19B.bat    Reason: default    Application path: C:\Users\Gavin\AppData\Local\Temp\RunA19B.bat    Time: 5/11/2020 1:03 AM
...
11.05.2020 00.27.07    Task started    System Watcher    Time: 5/11/2020 12:27 AM
11.05.2020 00.27.07    Task started    Mail Anti-Virus    Time: 5/11/2020 12:27 AM
11.05.2020 00.27.07    Task started    IM Anti-Virus    Time: 5/11/2020 12:27 AM
11.05.2020 00.27.07    Task started    Application Control    Time: 5/11/2020 12:27 AM
11.05.2020 00.27.07    Task started    Web Anti-Virus    Time: 5/11/2020 12:27 AM
11.05.2020 00.27.07    Task started    Network Attack Blocker    Time: 5/11/2020 12:27 AM
11.05.2020 00.27.07    Task started    Firewall    Time: 5/11/2020 12:27 AM
11.05.2020 00.27.07    Task started    File Anti-Virus    Time: 5/11/2020 12:27 AM
11.05.2020 00.27.07    Task started    Anti-Banner    Time: 5/11/2020 12:27 AM
11.05.2020 00.27.07    Task started    Anti-Spam    Time: 5/11/2020 12:27 AM
11.05.2020 00.26.59    Task stopped    File Anti-Virus    Time: 5/11/2020 12:26 AM
11.05.2020 00.26.58    Task stopped    Firewall    Time: 5/11/2020 12:26 AM
11.05.2020 00.26.58    Task stopped    Application Control    Time: 5/11/2020 12:26 AM
11.05.2020 00.26.58    Task stopped    System Watcher    Time: 5/11/2020 12:26 AM
11.05.2020 00.26.58    Task stopped    Network Attack Blocker    Time: 5/11/2020 12:26 AM
11.05.2020 00.26.58    Task stopped    Mail Anti-Virus    Time: 5/11/2020 12:26 AM
11.05.2020 00.26.58    Task stopped    IM Anti-Virus    Time: 5/11/2020 12:26 AM
11.05.2020 00.26.58    Task stopped    Web Anti-Virus    Time: 5/11/2020 12:26 AM
11.05.2020 00.26.58    Task stopped    Anti-Spam    Time: 5/11/2020 12:26 AM
11.05.2020 00.26.58    Task stopped    Anti-Banner    Time: 5/11/2020 12:26 AM
...
11.05.2020 00.23.27    Application added to the Low Restricted group    C:\Users\Gavin\AppData\Local\Temp\Run9EC0.bat    Application: C:\Users\Gavin\AppData\Local\Temp\Run9EC0.bat    Reason: default    Application path: C:\Users\Gavin\AppData\Local\Temp\Run9EC0.bat    Time: 5/11/2020 12:23 AM
...
...
10.05.2020 23.48.58    Application added to the Low Restricted group    C:\Users\Gavin\AppData\Local\Temp\RunE455.bat    Application: C:\Users\Gavin\AppData\Local\Temp\RunE455.bat    Reason: default    Application path: C:\Users\Gavin\AppData\Local\Temp\RunE455.bat    Time: 5/10/2020 11:48 PM
...
...
10.05.2020 23.42.56    Application added to the Low Restricted group    C:\Users\Gavin\AppData\Local\Temp\Run9AC9.bat    Application: C:\Users\Gavin\AppData\Local\Temp\Run9AC9.bat    Reason: default    Application path: C:\Users\Gavin\AppData\Local\Temp\Run9AC9.bat    Time: 5/10/2020 11:42 PM
...
...
10.05.2020 22.22.25    Application added to the Low Restricted group    C:\Users\Gavin\AppData\Local\Temp\Run93C4.bat    Application: C:\Users\Gavin\AppData\Local\Temp\Run93C4.bat    Reason: default    Application path: C:\Users\Gavin\AppData\Local\Temp\Run93C4.bat    Time: 5/10/2020 10:22 PM
...
...
10.05.2020 22.18.19    Application added to the Low Restricted group    C:\Users\Gavin\AppData\Local\Temp\RunB67E.bat    Application: C:\Users\Gavin\AppData\Local\Temp\RunB67E.bat    Reason: default    Application path: C:\Users\Gavin\AppData\Local\Temp\RunB67E.bat    Time: 5/10/2020 10:18 PM
...

[Berny]

@Gavin MoreYoung  Welcome. Please submit the .bat file to K-Lab Technical Support https://center.kaspersky.com 

[Guest]

Add:

also please collect a GSI report and attach it in your request to Tech support:

https://support.kaspersky.com/common/diagnostics/3632

[Wesly.Zhang]

Hello @Gavin MoreYoung 

Could you provide these .bat files to me via pm? Thanks !

Regards.