When BAT.Sebak runs, it does the following:

   1. Changes to .bat the filename extension of all files in the Windows directory and the C:\Mydocu~1 directory which have the following extensions:

      .txt
      .log
      .tmp
      .net
      .jpg
      .bmp
      .gif
      .avi
      .doc
      .xls

   2. Copies itself as %Windir%\system7.bat.

      Note: %Windir% is a variable. The BAT.Sebak locates the Windows installation folder (by default, this is C:\Windows or C:\Winnt) and copies itself to that location.
   3. Drops a copy of VBS.Tante.A@mm in the Windows directory.

   4. Adds the value:

      "Epy"="C:\Windows\system7.bat"

      to the registry key:

      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

      so that the BAT.Sebak runs when you start Windows.

   5. Displays a message box with the text:

      "I'm Batch Epy and You are BiTchEpy...!!
      BAT/Epy Created By sevenC [17-04-04]
      Bekasi-Indonesia"

   6. If it is the 19th day of the month, the 19th hour of the day, the 19th minute of the hour or the 19th second of the minute, it will disable the computer. 
   To delete the value from the registry

WARNING: We strongly recommend that you back up the registry before making any changes to it. Incorrect changes to the registry can result in permanent data loss or corrupted files. Modify the specified keys only. Read the document, "How to make a backup of the Windows registry," for instructions.

   1. Click Start, and then click Run. (The Run dialog box appears.)
   2. Type regedit

      Then click OK. (The Registry Editor opens.)

   3. Navigate to the key:

      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

   4. In the right pane, delete the value:

      "Epy"="C:\Windows\system7.bat"

   5. Exit the Registry Editor.