software

I have a keylog file that I captured and it is encrypted by the virus. It
requires a XOR operation of each byte. I would like to see what the contents
of the file is so I know if I lost anything.

I looked in Excel and there is no XOR operation or function.

An example of the file is hex code:

03 34 3e 3b .....

I'm told that if I XOR it with the key, I can get to the data. I found the
key... Can I do this in Exel?

Thanks!

Demo'd from the Immediate window:

? amp;HEFamp; xor 2^3
231
? amp;HEFamp;
239

Looks like an XOR operator to me.

--
Regards,
Tom Ogilvy

quot;Randy Brownquot; gt; wrote in message
...
gt; I have a keylog file that I captured and it is encrypted by the virus. It
gt; requires a XOR operation of each byte. I would like to see what the
contents
gt; of the file is so I know if I lost anything.
gt;
gt; I looked in Excel and there is no XOR operation or function.
gt;
gt; An example of the file is hex code:
gt;
gt; 03 34 3e 3b .....
gt;
gt; I'm told that if I XOR it with the key, I can get to the data. I found
the
gt; key... Can I do this in Exel?
gt;
gt; Thanks!
Odd - it is not in the Excel 2003 function or operator list... I'll try it.

So it is A1 B1
3 =(a1 xor 0xE)

Returns an error. Function format is not correct...

HREF seems to be a large number checker... How can it use that for a very
large file? I want import it into Excel, each column containg 1 byte. In
sheet 2, do a XOR 0xE on the associated cell in Sheet 1.

I don't think this is possilbe.

quot;Tom Ogilvyquot; wrote:

gt; Demo'd from the Immediate window:
gt;
gt; ? amp;HEFamp; xor 2^3
gt; 231
gt; ? amp;HEFamp;
gt; 239
gt;
gt; Looks like an XOR operator to me.
gt;
gt; --
gt; Regards,
gt; Tom Ogilvy
gt;
gt; quot;Randy Brownquot; gt; wrote in message
gt; ...
gt; gt; I have a keylog file that I captured and it is encrypted by the virus. It
gt; gt; requires a XOR operation of each byte. I would like to see what the
gt; contents
gt; gt; of the file is so I know if I lost anything.
gt; gt;
gt; gt; I looked in Excel and there is no XOR operation or function.
gt; gt;
gt; gt; An example of the file is hex code:
gt; gt;
gt; gt; 03 34 3e 3b .....
gt; gt;
gt; gt; I'm told that if I XOR it with the key, I can get to the data. I found
gt; the
gt; gt; key... Can I do this in Exel?
gt; gt;
gt; gt; Thanks!
gt;
gt;
gt;

What I showed you is VBA.

Usually, processing a textfile as you describe would be done with VBA.

If the file has had all the bits altered, then I doubt it would come into
Excel with each bit in a single cell just by opening it.

In any event, you could create your own worksheet function

Public Function MYXOR(rng As Range)
If rng.Count gt; 1 Then
MYXOR = CVErr(xlErrRef)
Exit Function
ElseIf Not IsNumeric(rng) Then
MYXOR = CVErr(xlErrValue)
Else
MYXOR = Int(rng.Value) Xor amp;HEamp;
End If
End Function

Change amp;HEamp; to your key value

Put this in a general module of your workbook.

Usage
=MYXOR(A1)
--
Regards,
Tom Ogilvy
quot;Randy Brownquot; gt; wrote in message
...
gt; Odd - it is not in the Excel 2003 function or operator list... I'll try
it.
gt;
gt; So it is A1 B1
gt; 3 =(a1 xor 0xE)
gt;
gt; Returns an error. Function format is not correct...
gt;
gt; HREF seems to be a large number checker... How can it use that for a very
gt; large file? I want import it into Excel, each column containg 1 byte. In
gt; sheet 2, do a XOR 0xE on the associated cell in Sheet 1.
gt;
gt; I don't think this is possilbe.
gt;
gt; quot;Tom Ogilvyquot; wrote:
gt;
gt; gt; Demo'd from the Immediate window:
gt; gt;
gt; gt; ? amp;HEFamp; xor 2^3
gt; gt; 231
gt; gt; ? amp;HEFamp;
gt; gt; 239
gt; gt;
gt; gt; Looks like an XOR operator to me.
gt; gt;
gt; gt; --
gt; gt; Regards,
gt; gt; Tom Ogilvy
gt; gt;
gt; gt; quot;Randy Brownquot; gt; wrote in message
gt; gt; ...
gt; gt; gt; I have a keylog file that I captured and it is encrypted by the virus.
It
gt; gt; gt; requires a XOR operation of each byte. I would like to see what the
gt; gt; contents
gt; gt; gt; of the file is so I know if I lost anything.
gt; gt; gt;
gt; gt; gt; I looked in Excel and there is no XOR operation or function.
gt; gt; gt;
gt; gt; gt; An example of the file is hex code:
gt; gt; gt;
gt; gt; gt; 03 34 3e 3b .....
gt; gt; gt;
gt; gt; gt; I'm told that if I XOR it with the key, I can get to the data. I
found
gt; gt; the
gt; gt; gt; key... Can I do this in Exel?
gt; gt; gt;
gt; gt; gt; Thanks!
gt; gt;
gt; gt;
gt; gt;