UTFSM-petya

rem
rem @Author: CiberSeguridadUTFSM
rem @E-mail: ciberseguridadutfsm@gmail.com
rem @Website: fb.me/CiberSeguridadUTFSM
rem @Description:
rem Script to avoid further execution of malware Petya
rem The malware creates several files at the beginning of its execution. If it can't get a valid handle to some of those files it will finish the execution without infecting the computer
rem This script creates an empty file with the same name of one of the files needed by the malware with reading permission
rem Please note, that this script will only stop the execution of the ransomware if it's run on your machine using Administrator privileges. After you download it, rename it with .bat extension then run it as Administrator
rem Please, feel free to share it, but keep this copyright text unchanged
rem
del %WINDIR%\perfc.* /f
echo > %WINDIR%\perfc
echo > %WINDIR%\perfc.dat
echo > %WINDIR%\perfc.dll
attrib +R %WINDIR%\perfc.*
echo DONE