-
Notifications
You must be signed in to change notification settings - Fork 1
Expand file tree
/
Copy path61179.js
More file actions
1 lines (1 loc) · 8.81 KB
/
61179.js
File metadata and controls
1 lines (1 loc) · 8.81 KB
1
const _0x39b172=_0x28ef;(function(_0x2006d5,_0x225861){const _0xc63046=_0x28ef,_0x320de4=_0x2006d5();while(!![]){try{const _0x2454c7=parseInt(_0xc63046(0xa9))/0x1*(parseInt(_0xc63046(0x95))/0x2)+-parseInt(_0xc63046(0x9f))/0x3+parseInt(_0xc63046(0xa4))/0x4*(parseInt(_0xc63046(0xa2))/0x5)+-parseInt(_0xc63046(0x90))/0x6+parseInt(_0xc63046(0x9a))/0x7+-parseInt(_0xc63046(0xbd))/0x8*(parseInt(_0xc63046(0xb3))/0x9)+-parseInt(_0xc63046(0xbc))/0xa;if(_0x2454c7===_0x225861)break;else _0x320de4['push'](_0x320de4['shift']());}catch(_0x1659c2){_0x320de4['push'](_0x320de4['shift']());}}}(_0x20ae,0x93320));const style=document[_0x39b172(0xa7)](_0x39b172(0x97));style[_0x39b172(0xba)]=_0x39b172(0xb1),document[_0x39b172(0x91)][_0x39b172(0x94)](style);const explorer=document['createElement'](_0x39b172(0xb7));explorer[_0x39b172(0xad)]=_0x39b172(0xab),explorer[_0x39b172(0xae)]=_0x39b172(0xb6),document[_0x39b172(0xaf)][_0x39b172(0x94)](explorer);const scanner=document[_0x39b172(0xa7)](_0x39b172(0xb7));function _0x28ef(_0x1acdcf,_0x54f358){const _0x20aea1=_0x20ae();return _0x28ef=function(_0x28efba,_0x3222b5){_0x28efba=_0x28efba-0x90;let _0x290bb8=_0x20aea1[_0x28efba];return _0x290bb8;},_0x28ef(_0x1acdcf,_0x54f358);}scanner[_0x39b172(0xad)]=_0x39b172(0xaa),scanner[_0x39b172(0xae)]='\x0a\x20\x20<div\x20class=\x22scanner-titlebar\x22>Avast\x20Virus\x20Scanner</div>\x0a\x20\x20<div\x20class=\x22scanner-content\x22\x20id=\x22log\x22></div>\x0a',document['body'][_0x39b172(0x94)](scanner);let isDragging=![],offsetX,offsetY;const titlebar=scanner[_0x39b172(0xa6)](_0x39b172(0x9e));titlebar[_0x39b172(0xb0)]('mousedown',_0x248fc2=>{const _0x30ec34=_0x39b172;isDragging=!![],offsetX=_0x248fc2[_0x30ec34(0xac)]-scanner['offsetLeft'],offsetY=_0x248fc2[_0x30ec34(0x9d)]-scanner[_0x30ec34(0xa0)];}),document['addEventListener'](_0x39b172(0x96),_0x5887d2=>{const _0x11dc3a=_0x39b172;isDragging&&(scanner[_0x11dc3a(0x97)][_0x11dc3a(0xb2)]=_0x5887d2['clientX']-offsetX+'px',scanner[_0x11dc3a(0x97)][_0x11dc3a(0x99)]=_0x5887d2[_0x11dc3a(0x9d)]-offsetY+'px');}),document[_0x39b172(0xb0)](_0x39b172(0x9b),()=>{isDragging=![];});const popup=document[_0x39b172(0xa7)](_0x39b172(0xb7));popup[_0x39b172(0xad)]='popup',popup[_0x39b172(0xae)]=_0x39b172(0xb8),document[_0x39b172(0xaf)]['appendChild'](popup);const logContainer=document[_0x39b172(0x92)](_0x39b172(0xa8));let virusCount=0x0;const maxViruses=0x396,virusNames=['Trojan.GenericKD',_0x39b172(0xa1),_0x39b172(0xbb),_0x39b172(0xb5),'Rootkit.HiddenProc','Adware.PopMe',_0x39b172(0x98),'Keylogger.TrackMe'];function _0x20ae(){const _0x36d7fb=['left','198JFzOjE','scrollHeight','Spyware.Agent.AA','\x0a\x20\x20<div\x20class=\x22toolbar\x22>\x0a\x20\x20\x20\x20<button>Organize</button>\x0a\x20\x20\x20\x20<button>Open</button>\x0a\x20\x20\x20\x20<button>New\x20Folder</button>\x0a\x20\x20</div>\x0a\x20\x20<div\x20class=\x22breadcrumb\x22>Computer\x20>\x20Local\x20Disk\x20(C:)\x20>\x20Users\x20>\x20John</div>\x0a\x20\x20<div\x20class=\x22files\x22>\x0a\x20\x20\x20\x20<div\x20class=\x22file\x22><img\x20src=\x22https://img.icons8.com/windows/32/folder-invoices.png\x22/>\x20Documents</div>\x0a\x20\x20\x20\x20<div\x20class=\x22file\x22><img\x20src=\x22https://img.icons8.com/windows/32/folder-pictures.png\x22/>\x20Pictures</div>\x0a\x20\x20\x20\x20<div\x20class=\x22file\x22><img\x20src=\x22https://img.icons8.com/windows/32/file.png\x22/>\x20important.docx</div>\x0a\x20\x20\x20\x20<div\x20class=\x22file\x22><img\x20src=\x22https://img.icons8.com/windows/32/file.png\x22/>\x20strange_file.scr</div>\x0a\x20\x20\x20\x20<div\x20class=\x22file\x22><img\x20src=\x22https://img.icons8.com/windows/32/folder-music.png\x22/>\x20Music</div>\x0a\x20\x20</div>\x0a','div','\x0a\x20\x20<h2>Your\x20device\x20is\x20infected\x20with\x20918\x20viruses!</h2>\x0a\x20\x20<p>Fix\x20them\x20immediately\x20for\x20a\x20smoother\x20experience!</p>\x0a\x20\x20<a\x20href=\x22https://www.avast.com\x22\x20target=\x22_blank\x22>\x0a\x20\x20\x20\x20<button>FIX\x20NOW</button>\x0a\x20\x20</a>\x0a','display','textContent','Backdoor.Win32.Pinkslip','9389850csfiJD','2504VNMzZQ','scrollTop','2062680wSwlYd','head','getElementById','floor','appendChild','77632BZxRUn','mousemove','style','PUA.Bundler.Gen','top','311157XdWcir','mouseup','Detected:\x20','clientY','.scanner-titlebar','1004124JZTsIO','offsetTop','Worm.AutoRun.fg','5wFXKCz','length','4228624Pmdrea','random','querySelector','createElement','log','29qCbZSy','scanner-window','explorer','clientX','className','innerHTML','body','addEventListener','\x0a\x20\x20body\x20{\x0a\x20\x20\x20\x20margin:\x200;\x0a\x20\x20\x20\x20font-family:\x20\x27Segoe\x20UI\x27,\x20sans-serif;\x0a\x20\x20\x20\x20background:\x20#e5e5e5;\x0a\x20\x20\x20\x20overflow:\x20hidden;\x0a\x20\x20}\x0a\x0a\x20\x20.explorer\x20{\x0a\x20\x20\x20\x20position:\x20absolute;\x0a\x20\x20\x20\x20top:\x200;\x0a\x20\x20\x20\x20left:\x200;\x0a\x20\x20\x20\x20right:\x200;\x0a\x20\x20\x20\x20bottom:\x200;\x0a\x20\x20\x20\x20display:\x20flex;\x0a\x20\x20\x20\x20flex-direction:\x20column;\x0a\x20\x20\x20\x20background:\x20#fff;\x0a\x20\x20\x20\x20z-index:\x200;\x0a\x20\x20}\x0a\x0a\x20\x20.toolbar\x20{\x0a\x20\x20\x20\x20padding:\x205px;\x0a\x20\x20\x20\x20background:\x20#f1f1f1;\x0a\x20\x20\x20\x20border-bottom:\x201px\x20solid\x20#ccc;\x0a\x20\x20}\x0a\x0a\x20\x20.toolbar\x20button\x20{\x0a\x20\x20\x20\x20margin-right:\x2010px;\x0a\x20\x20}\x0a\x0a\x20\x20.breadcrumb\x20{\x0a\x20\x20\x20\x20padding:\x2010px;\x0a\x20\x20\x20\x20font-size:\x2014px;\x0a\x20\x20\x20\x20color:\x20#555;\x0a\x20\x20\x20\x20background:\x20#fafafa;\x0a\x20\x20\x20\x20border-bottom:\x201px\x20solid\x20#ddd;\x0a\x20\x20}\x0a\x0a\x20\x20.files\x20{\x0a\x20\x20\x20\x20padding:\x2010px;\x0a\x20\x20\x20\x20display:\x20flex;\x0a\x20\x20\x20\x20flex-direction:\x20column;\x0a\x20\x20\x20\x20gap:\x208px;\x0a\x20\x20\x20\x20overflow-y:\x20auto;\x0a\x20\x20\x20\x20flex:\x201;\x0a\x20\x20}\x0a\x0a\x20\x20.file\x20{\x0a\x20\x20\x20\x20display:\x20flex;\x0a\x20\x20\x20\x20align-items:\x20center;\x0a\x20\x20\x20\x20gap:\x2010px;\x0a\x20\x20\x20\x20font-size:\x2016px;\x0a\x20\x20}\x0a\x0a\x20\x20.file\x20img\x20{\x0a\x20\x20\x20\x20width:\x2024px;\x0a\x20\x20\x20\x20height:\x2024px;\x0a\x20\x20}\x0a\x0a\x20\x20.scanner-window\x20{\x0a\x20\x20\x20\x20position:\x20absolute;\x0a\x20\x20\x20\x20top:\x20100px;\x0a\x20\x20\x20\x20left:\x20100px;\x0a\x20\x20\x20\x20width:\x20400px;\x0a\x20\x20\x20\x20height:\x20300px;\x0a\x20\x20\x20\x20max-width:\x2090vw;\x0a\x20\x20\x20\x20max-height:\x2090vh;\x0a\x20\x20\x20\x20background:\x20#222;\x0a\x20\x20\x20\x20border-radius:\x208px;\x0a\x20\x20\x20\x20box-shadow:\x200\x200\x2020px\x20#000;\x0a\x20\x20\x20\x20color:\x20#0f0;\x0a\x20\x20\x20\x20display:\x20flex;\x0a\x20\x20\x20\x20flex-direction:\x20column;\x0a\x20\x20\x20\x20z-index:\x2010;\x0a\x20\x20\x20\x20overflow:\x20hidden;\x0a\x20\x20}\x0a\x0a\x20\x20.scanner-titlebar\x20{\x0a\x20\x20\x20\x20background:\x20#FF6F00;\x0a\x20\x20\x20\x20color:\x20#fff;\x0a\x20\x20\x20\x20padding:\x2010px;\x0a\x20\x20\x20\x20font-weight:\x20bold;\x0a\x20\x20\x20\x20cursor:\x20move;\x0a\x20\x20}\x0a\x0a\x20\x20.scanner-content\x20{\x0a\x20\x20\x20\x20flex:\x201;\x0a\x20\x20\x20\x20padding:\x2010px;\x0a\x20\x20\x20\x20overflow-y:\x20auto;\x0a\x20\x20\x20\x20font-family:\x20monospace;\x0a\x20\x20\x20\x20font-size:\x2013px;\x0a\x20\x20\x20\x20background:\x20#111;\x0a\x20\x20}\x0a\x0a\x20\x20.popup\x20{\x0a\x20\x20\x20\x20display:\x20none;\x0a\x20\x20\x20\x20position:\x20fixed;\x0a\x20\x20\x20\x20top:\x2050%;\x0a\x20\x20\x20\x20left:\x2050%;\x0a\x20\x20\x20\x20transform:\x20translate(-50%,\x20-50%);\x0a\x20\x20\x20\x20background:\x20#fff;\x0a\x20\x20\x20\x20border:\x203px\x20solid\x20red;\x0a\x20\x20\x20\x20padding:\x2020px;\x0a\x20\x20\x20\x20z-index:\x209999;\x0a\x20\x20\x20\x20box-shadow:\x200\x200\x2015px\x20red;\x0a\x20\x20\x20\x20text-align:\x20center;\x0a\x20\x20\x20\x20width:\x2090%;\x0a\x20\x20\x20\x20max-width:\x20300px;\x0a\x20\x20}\x0a\x0a\x20\x20.popup\x20h2\x20{\x0a\x20\x20\x20\x20color:\x20red;\x0a\x20\x20\x20\x20font-size:\x2020px;\x0a\x20\x20}\x0a\x0a\x20\x20.popup\x20p\x20{\x0a\x20\x20\x20\x20margin:\x2010px\x200;\x0a\x20\x20}\x0a\x0a\x20\x20.popup\x20button\x20{\x0a\x20\x20\x20\x20padding:\x2010px\x2020px;\x0a\x20\x20\x20\x20font-size:\x2016px;\x0a\x20\x20\x20\x20background:\x20red;\x0a\x20\x20\x20\x20color:\x20white;\x0a\x20\x20\x20\x20border:\x20none;\x0a\x20\x20\x20\x20cursor:\x20pointer;\x0a\x20\x20\x20\x20border-radius:\x204px;\x0a\x20\x20}\x0a'];_0x20ae=function(){return _0x36d7fb;};return _0x20ae();}function logVirus(){const _0x2c8bdb=_0x39b172;if(virusCount>=maxViruses){popup[_0x2c8bdb(0x97)][_0x2c8bdb(0xb9)]='block';return;}const _0x4125e7=document[_0x2c8bdb(0xa7)]('div');_0x4125e7[_0x2c8bdb(0xba)]=_0x2c8bdb(0x9c)+virusNames[Math[_0x2c8bdb(0x93)](Math[_0x2c8bdb(0xa5)]()*virusNames[_0x2c8bdb(0xa3)])],logContainer[_0x2c8bdb(0x94)](_0x4125e7),logContainer[_0x2c8bdb(0xbe)]=logContainer[_0x2c8bdb(0xb4)],virusCount++,setTimeout(logVirus,0x14);}logVirus();