1 2 3 4 5 6 7 |
> "%TEMP%\proc_logoff.ps1" echo Start-Sleep -s 60 >> "%TEMP%\proc_logoff.ps1" echo $localSession = Get-ChildItem 'HKCU:\Volatile Environment' -name >> "%TEMP%\proc_logoff.ps1" echo $process = get-process ^| where {$_.sessionID -eq $localSession} ^| where {$_.processName -eq "MetaVision"} >> "%TEMP%\proc_logoff.ps1" echo if ($process -eq $null) {logoff.exe} >> "%TEMP%\proc_logoff.ps1" echo $process.waitforexit() >> "%TEMP%\proc_logoff.ps1" echo logoff.exe powershell.exe -ExecutionPolicy Unrestricted -WindowStyle Hidden -File "%TEMP%\proc_logoff.ps1" |
Tags :