
Ŀ
                                                                    
                        
                                    
                           
                                          
Ĵ
                                  5                           
ٰ



             㠫 ࠧࠡ⪨   ஢ᮢ
                      1999 Stefan Kurtzhals / VHM

*************************** ॢ by Redarc *************************

                       VBScript 㯠?

    VBScript -         ਠ   VBA  (Visual  Basic  for
Applications),      ᯮ짮  Windows  Scripting
Host (WSH)  Microsoft Windows 98  Internet Explorer 5.0. VBS 
⮩  㭪樮쭮,      VBA,   ᯮ짮 
      ஢.        ணࠬ      
ASCII-⥪,   ᯮ  ।⢥  Windows  Scripting
Host.      䠩  VBScript   ᬠਢ  ।
ASCII-䠩,  Microsoft  ।  㬥,      
஢  ⠪  䠩  VBScript,    ।㥬 業਩ ⠥
  ᯮᮡ.   ணࠬ   ᮢ   ᯮ짮   
㬥  ।⢥    ⮣,  ⮡ 㤭 ᯮ
ᮢ VBS.  ,   ஡ ⪫  ஢ (
⮣  㦭    室  ⠡  䠩 VBSCRIPT.DLL,   
⠢ 让  ஡).  HTML-㬥  ⠪    ᮤঠ
⠢    VBScript.      ⠢  ⨢   ᬮ
㬥  Microsoft  Explorer  -  ⨬  Microsoft    ᤥ
 ⢮ HTML-ᮢ.

    ᯮ VBS     ஡  Registry  䠩,  
   ᮧ  .    ᮡ,    
  CreateObject     VBScript ᮧ ⢮ ࠧ
ꥪ⮢,   ਬ,  ꥪ 䠩 ⥬  㬥  Word  
㫨஢     .          ࠧ          ᮧ
Cross-Application-ᮢ,   ᯥ譮  ஢
᪮쪮 ࠧ  ਫ.  ਬ -   O97M/Hopper.E
 W97M/Coldape,   VBS-䠩  㬥 Word.  ६
室   VBScript  㬥 Word    ஡ ⪫
஥  Microsoft Office   ᮢ ।⢮ 権
   Registry.   祬,    믮  VBScrip-ணࠬ,  ᮧ
FileSystemObject,  筮 뢠  ।०饥  ᮮ饭  
⠭ ⠭⭮ ᭮.  ⠪  ⨢஢
VBScript  ﭭ  饬 ⪫  .

           VBS  ࠪ᪨       ࠭.
    ᫥ ६,  ⠪    Microsoft
Office 2000,  Internet Explorer 5.0   Windows  2000  (५  )
⮬᪨  ᮨ⠫  Windows  Scripting  Host    
ᠬ VBS  襥 ࠭,  祬  뫮   .
VBS/Freelink      ᮬ VBS,   
஬ ⢥  짮⥫.  VBS/Freelink  ᯮ  ⮥
஢   ப (祢      Microsoft VBS
-Encryptor).    ᮧ  ᢮        "RUNDLL.VBS"  
⥬ ⠫    䠩  Registry  ⮣, ⮡ 
믮   㧪 .      W97M/Melissa,  
  ᮤন  㭪  ᮢ  뫪   뫠 ᥡ 
Attachment (䠩   "LINK.VBS")    ᥬ  ,    
᭮  짮⥫.  ⥫쭮 VBS/Freelink  ⨢
⥢ ᮥ  ᮧ  ୥ ⠫   ᪮ ᢮
.   ஬   ⮣      IRC-    mIRC    pIRCH
ᮮ⢥騬 INI-䠩,   ࠭ VBS/Freelink  
⮫쪮 짮⥫ 室  IRC-.

    騩  VBS- -  VBS/BubbleBoy,  ᬮ
   ⨢        In The
Wild. ⢥, VBS/BubbleBoy    ᮡ 
஢ᮬ - ,  ᯮ    Microsoft Outlook 
Microsoft  Outlook  Express,    ⨢஢ VBScript
 - ।०饣 ᮮ饭.   ⨢ 㦥
 ᬮ ஭ ,     ᪥ Attachment,   
뫮 ࠪ୮          ᮢ.    Microsoft
Outlook  Express    ⨢஢      ᬮ
஭        ।⥫쭮   ᬮ.   ᫨   
ந室,  १  ActiveX (, 祢, ⠥
) ᮧ ஢ HTA-䠩     ⮧᪠.  
⮬   ⠫  म (⠫  "C:\WINDOWS"),  ⮬
VBS/BubbleBoy ࠡᯮᮡ ⮫쪮  ᪮ ਠ  Windows  9x.
   VBS/BubbleBoy,        VBS/Freelink,  ᮤন  㭪樨
ᮢ 뫪     뫠  ᥡ  ।⢮  EMail  㣨
짮⥫.       ᯮ  ᯮᮡ  ࠭  १
஭  ⮫쪮  ࠧ  ஢ ⥬.

      ᮧ   ⥬  ஬.      
  譥 ࠭,    ᮦ,  ᫥  ᮮ饭 
VBS/BubbleBoy,  ਢ  ⮬,   㣨 ᮯ⥫ ⠪
  ᯮ짮  㯮   .  ⪠  Microsoft,
       ࠭,    㦥  祭  ,
  ⠭    ⥬.

      ஡  ᯮ ஢ᮢ  Office 97/2000.

     室    Office95    Office97  Microsoft   ᮢ
 VBA5      WordBasic  (Word95)    VBA3  (Excel95).
७    VBA5    ᫮,  祬   WordBasic  ᨫ쭮
⫨砥,  ᮦ,  VBA3. ଠ Microsoft  ࠧ蠥 
  ᢥ  ७ ଠ 䠩,  ⠪   ᥣ譥
   ⨢᭠  ࠬ      ⢨⥫쭮  ࠢ쭮
ᯮ  ࠡ뢠 ப VBA5.

     㬥  Office  (᪫    Access) ࠭ 
⠪ 뢠 OLE COM-ଠ (Compound Object Model).  OLE  COM-䠩
  ७   宦  FAT ⪮ ᪠  ࠧ 
ᥪ,  FAT,  ⮪ (Stream)  ⠫  (Storage).  ⨢
 㦤  讬 ⢥ ६, ⮡   ଠ,
     ᮦ      ᨨ   ⥬   䠩   "OLE32.DLL",
⢥⢥    OLE-䠩,  ᮤঠ  訡.  -    訡
ப ⥫쭮 ०  Word95          
᭥   ⥫⢠.     ਢ    讬  
"⢥" 権  ᮢ,        㪠뢠    ⭨
ਠ⮢   WM/CAP    ᥬ⢮  WM/NPAD.    Windows  2000  Microsoft
ਫ  OLE  COM-ଠ      ᮧ  ६  ࠧ
ᥪ஢  -    祬  ⨢ ࠬ      
ࠢ쭮 ࠡ.

    ᭮ ஥ 㬥 Word95  ப    
㭪 1.  室 ᢥ 室  Stream ("WordDocument")
 ⭮⥫쭮  .  WordBasic ᯮ ᥬ  
⮬ 㬥   ஢  "஢".

    +---------------+---------------------------+-----------------+
    |FIB ()| 1Table                    |        |
    | 㬥| VBA                       |  ꥪ⮢|
    |     | dir                       |  ப   |
    |TDT            | Thisdocument              | P-Code          |
    |               | Modul                     |  室 |
    |               | __Srp_                    |                 |
    |               | _VBA_PROJECT              |                 |
    |               | PROJECT                   |                 |
    |               | PROJECTwm                 |                 |
    |               | WordDocument              |                 |
    |               | DocumentSummaryInformation|                 |
    +---------------+---------------------------+-----------------+

    )   Word 95  b) ⮪  Word 97 ) ⮪  ᠬ
                               㭮 1

     (FIB) ᮤন ஬ 祣 ᮮ饭  ⮬,  
䠩 㬥⮬  蠡  㪠뢠    ࠧ  TDT.
  TDT  ᮤন    ᮮ饭    ⤥  ப (,
ࠧ,     ।  WordDocument-Stream,    ஢  
..).

    VBA5   ࠧ稥  ﬨ  ᠬ  ப.
 ।      室  ᪮쪮  ப.  
䠩  VBA5  ᢥ  ।    㫥   ᮮ⢥
ப  ᪮쪨 Stream. "1Table"-Stream ᮤন ஬ 祣
TDT   (      ४஢    ⪥).    㣨
५ ᢥ 室  "VBA"-Storage (  ᠬ,  
ࠢ,  ᮤন    㣮  Storage,  ਬ "Macros"  Word97).
"dir" -  "__VBA_PROJECT"-Stream ᮤঠ      ᢥ,
祬    ࠭    "dir"-Stream  娢஢ .  
室 । 祣    㫥  ।⢥
ᨬ  PCode.  "ThisDocument"  (  ⠭  ᨬ 
몠      ਫ   Office         뢠,   ਬ,
"DiesesDokument"      "ThisWorkbook")    㫥  ᮢ  
ᮤন   㬥 Office  ப.

       ணࠬ  室    ⤥쭮  㫥  Stream.  
믮  ப    㬥 ࠭,  ⮣  䠩
ࠧ  讬 ⢥ "__SRP"-Stream.    ᮤঠ  ⮢
஢  ணࠬ,  Office ࠭  ᪮७
믮  ப.    Modulstream   室   PCode,   
ନ  ᥬ  㦤  ⥫쭮 ଠ樨  ⠡
  ।⢥묨  ᨬ  (__VBA_PROJECT-Stream)     ᢥ묨
ᨬ.   㦥 ࢠ ஡   ⨢
᪠஢.  - ᫮   ⨢   
      ।஢  PCode  .    ࠧ  
ந室  ,    ⨢᭠  ࠬ  ᫥騥  ப   
ࠧ  :

ActiveDocument.VBProject.VBComponents.Name = "Test"
NormalTemplate.VBE.VBComponents.Description = "Test"

    Modulstream ᮤন   ⥫쭮    ,    娢஢
室 ⥪ ப  ଠ ASCII.   ࠧ  
 䠩                  ࠧ
।,    ⢨⥫쭮 ᪠  Microsoft Office.
  ⨢ ࠬ ஢  PCode,   ⠫
   ᠬ  ணࠬ.  室 ASCII-⥪  ᯮ
  믮   ⮡ࠦ 室 ⥪   । VBA.
᫨    䠩    __SRP-Stream,  Microsoft  Office  
믮,   PCode  ஢.  ந室    ᫥騬
ࠧ:  ࠢ   ᨨ VBA  __VBA_PROJECT-Stream  
ᨨ Office,  ⠭  짮⥫.  ᫨     ᨨ
ᮢ,  ᪠ 騩 __SRP-Stream,    PCode.  ᫨
 ᨨ  ᮢ, Office ᯮ 娢஢ 室
⥪  ᮧ  PCode.   堭 㦥, 祢,  
ᠬ  ࠧ묨 ﬨ Office.   Office97   
ப  ᮧ  Office2000  .    ⠢
⨢ ணࠬ ஡,  ⠪  ⥯     ᪠
筮,         殢 㤥 ᯮ짮 
믮.  ᫨ PCode ०, ਬ, 訡  OLE32.DLL, 
 Office97   ਠ ,   ⮩  樨 
䨪   Office 2000  .      ⨢᭠
ࠬ  ஢  饥 ६,  ᮢ  PCode  室
  ᮬ. __SRP-Stream  ६묨  ᮢᥬ  ஢
   㤠,   ᮦ,  묨 ⨢묨 ࠬ 
⪥  㬥    .    뫨    砨,    
१ 祭 㤠  Stream,   __SRP-Stream ⠢ 
㬥.  ਬ,  X97M/Laroux ⠢ ࠡᯮᮡ ᫥
⠪ 祭,   䠩 㦥  । ⨢묨 ᪠ࠬ 
஢.  騩 ਬ -  W97M/Melissa.U.  ஢
⨬ ᮬ 䠩 ⠪ ⨫ ࠢ쭮. PCode 㤠 ,
⭮ ⠢﫨 䥪 室 ⥪  訡  
  ᨨ  VBA  ⠭    ⨬  祭.  
室  ⨢஢    ᮡ⢥      -    
㤠.    ०  筮    ࠭    쭥襬
࠭ ,  ,  W97M/Melissa   㭪樨  ᮢ
뫪 ,   ⮬ ࠢ ࢮ砫 㬥 -  
砥 ஢ 䠩,   ஬  ⨢ ᪠
   । .

    ⨬       ஫            権
ᯮ :  PCode,  室     Execode  (__SRP-Stream).
,   ⥫쭮   ࠡ ⨢ ᪠஢, ⠪
  㦥 饬 ⢥ ஢ᮢ VBA5/6 (ਬ୮ 5000)
㠫  ᨣ 㦥  让 ⮩ ६.

           ᥢ-ࠧ᪨ ஢ - "Sandwiches".

      Service Release 1 (SR1)   Microsoft Office 97
 ࠭ ᯮ짮    ஢ᠬ ᯮᮡ ஢
ᮡ⢥ 㫥:

Application.OrganizerCopy Source:= NormalTemplate.FullName,
Destination:= ActiveDocument.FullName, Name:= "Virus"

    SR1 ९   ।⢥   ஢    㫥    
쭮  蠡  NORMAL.DOT  㣨 㬥.   ࠧ 
᮪-஢ WM-     W97M-  﫨
ᯮᮡ  ࠧ.   , ᮯ⥫  ᭨
              ࠭祭.            Office
97/2000-஢      室   ⥪    ⮣,  ⮡
७  楫    .     ।   室   
  :

1. .Import/.Export -  ᥣ 室 ⥪  㫥
2. .AddFromString - ਡ ⥪   室 ⥪
3. .AddFromFile - ਡ ⥪   室 ⥪
4. .InsertLine - ⠢ ⥪  砫 室 ⥪

     ६ ᮢ६ ஢      ᯮ  ⮤
.Import/.Export, ⠪   ।  ⨪,   㣨
⮤   । ⥫⢠ ।७ 
䥪.  ᫨ ᮯ⥫ 室  ⮣,   㥬 㫥
         뢠  㤠  騩  
짮⥫,   ⮣   ஢,   ᥢ-ࠧ᪨  ᯮ
㯮   ⮤ ஢.      ⥭  ⮫쪮
ᯥ           ᠭ     ࠧ᪮     ஢
(W97M/Intended/Flesh),  ,  ࠧࠡ⠭ ஢, 
஢ ଠ ஢  ࠧ஢  . 
᪮쪨   ஢ᮢ      ।         뢠
"祬", ,     樨 ࠡᯮᮡ.
᭮  ⮣   ⥫⢮,   VBA   
ᯮ짮      楤/㭪樨  । 
.  VBA  ࠧ稥   -ﬨ (Modul    
AutoOpen   楤ன "Main"),  -ப (楤 AutoOpen
())  ࠡ稪 ᮡ (楤 Document_Close ()).

    ᫨  ६ -ப    -  
 ,  -  ᪠. ᫨ ⥪騩 㬥
ᮤন -ப  NORMAL.DOT  ᮤন  -ப  
⥬  ,   ᮮ饭  訡 Microsoft Office. -
ப    ᮪  ਮ  祬  ࠡ稪  ᮡ,
⮬  楤 AutoOpen() ᪠ ࠭,  祬 Document_Open().
᫨  ஢    (⠪ 뢠   ਬ
  㫥  "ThisDocument")      ⮬   ᯮ    
ࠡ稪 ᮡ (ਬ,  Document_Close()),    १  
        ९樨  (    ⮬   
।  ⨢묨 ᪠ࠬ).

    ᫨   ᯮ  ࠧ  ந,    ।
஢    ਮ  ᯮ㥬  ப,   ࠢ,
蠥,      १     ᯮᮡ   ᮬ.   
஢  ப ணࠬ  ஢,  ਬ, ⠪
  ப ⨢樨 Document_Open()   Document_
Close().  ਬ,        "A"    ।,   
"ThisDocument" 㦥      "B",      ⮬    "A"
ᯮ ".AddFromString".   ࠧ   "A" ਡ
   "B".    ⮬    "A"    ப  ணࠬ,
묨      㫨஢ ।⢥ १  ப.
 ப ⥯      "B". ᫨  ⮬ 
ᯮ      ணࠬ,    १ 㤥 ०
  "A"    ,    ࠢ,      ᬮ  㭪樮஢.
 ஢ ᥬ⢠ "W97M/Class"  ஡. 
         ப   ணࠬ   砩   ᮧ묨
ﬨ.  ᫨  ⮬  㦥  ࠦ ⠪ ᮬ, 
ਬ,  W97M/Brenda.A   ਠ  Class  (ਬ,  Class.D)  
 ,   Class.D 㤥 ᯮ  ⮬ 㫥 
஬ ,       ன  ப
   Brenda.A.      ⥪  ᯮ    ᠬ⨪
묨 ஢ᠬ,  ਬ, ᮤন   ப 室
⥪  ப  "Rem    ".  ᫨      ᮢ   ""
ᯮ  ⮤,     室    ୮  ஢
,  ⠪    થ      ६頥    ୮
஢.   ࠧ,   ,   ""  㤥
ᮤঠ     ࢮ    ண  (।:
  1,    2,    1).    ⮬    ப   
  ⠪ "" ⠭ ࠡᯮᮡ.

    訬 ஡  ᯮ  ⠪  権  ஢ᮢ
   -,   ࠭             ⮤
ᯮ ᮢ  ⨢ ࠬ. ⨢  ᥣ
 㫥ਥ஢묨,      மਥ஢묨.  ன
஡  ।᪠㥬 ⠪ 権 ஢ᮢ. -
   ०     䭮  㭪樥
ண , १   筮 ஢.

