kxvo.exe

[super]

Taskkill.exe /F /IM Explorer.EXE
attrib -s -h -r C:\WINDOWS\system32\kxvo.exe
attrib -s -h -r C:\WINDOWS\system32\j3ewro.exe
move C:\WINDOWS\system32\kxvo.exe %tmp%
move C:\WINDOWS\system32\j3ewro.exe %tmp%