Sort:  

sorry I editted the article, you need to make a read-only file instead of a folder.

This prevents the ransomware from placing and executing a file with the same name.

perfc.exe i suppose.

just perfc, like this: