Numbness Posted March 17 Share Posted March 17 (edited) I want to decrypt this file, can you help me? Or can you solve and answer please? Edited March 17 by Jos Link to comment Share on other sites More sharing options...
argumentum Posted March 17 Share Posted March 17 It goes against forum rules to do such. Maybe there is another way to solve what you need ? Follow the link to my code contribution ( and other things too ). FAQ - Please Read Before Posting. Link to comment Share on other sites More sharing options...
Numbness Posted March 17 Author Share Posted March 17 I think a virus was sent to me with this application, I want to see the code Link to comment Share on other sites More sharing options...
argumentum Posted March 17 Share Posted March 17 Do remove the file. Otherwise this post will be locked ( and the file removed anyway ) As far as forensic study goes, you do not know enough to do anything about it, given that you can not even decompile this. Sorry but in this forum you will not get that done. Follow the link to my code contribution ( and other things too ). FAQ - Please Read Before Posting. Link to comment Share on other sites More sharing options...
Developers Jos Posted March 17 Developers Share Posted March 17 1 hour ago, Numbness said: I think a virus was sent to me with this application, I want to see the code I think you could be right, but there isn't much to see in the script, as it is totally obfuscated. So let's stick our forum rules and not discuss decompilation of scripts. Thanks SciTE4AutoIt3 Full installer Download page - Beta files Read before posting How to post scriptsource Forum etiquette Forum Rules Live for the present, Dream of the future, Learn from the past. Link to comment Share on other sites More sharing options...
Developers Solution Jos Posted March 17 Developers Solution Share Posted March 17 I took a quick look at the variables defined at the top of the master script and listed their content after de-obfuscation/computing by the script. Hope this helps you: googleads.publicvm.com C:\MicrosoftSecurity MicrosoftCMD.lnk Microsoft Microsoft Security MicrosoftSecurity.exe vbs 0.4x Usb Microsoft.a3x 0LIONW0 SciTE4AutoIt3 Full installer Download page - Beta files Read before posting How to post scriptsource Forum etiquette Forum Rules Live for the present, Dream of the future, Learn from the past. Link to comment Share on other sites More sharing options...
Recommended Posts