Re: Word Macros & file sharing?

[Nelson Brito <nelson () SECUNET COM BR>]

Marius Huse Jacobsen wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> I haven't looked into it, but I believe a script *may* be able to
> save a binary file (.exe?) and execute it.
> I doubt there is any documented way of doing it though...

Yeah, if your Macro Virus has a function to do a "DEBUG.EXE"'s operation it's
possible to make a EXE or COM File that do this...

Year ago I read a document that explain how you can do this in examples. The
Document was in Portuguese. You can find it at:
http://www.geocities.com/CapeCanaveral/Galaxy/1182/newpage13.htm

A example is, a old fashion:
[...]
Open "C:\AddFileSharing.SCR" For Output As #1
Print #1, "N c:\sharing.com"
Print #1, "E0100 4D 5A 60 00 10 00 70 00 1E 00 E0 02 E0 02 58 02"
Print #1, "E0110 00 25 00 00 54 08 00 00 1C 00 00 00 2D 00 00 00"
[...]

Notice, I don't know if it's a right way to do this nowadays.

So, you'll call "DEBUG.EXE", with some kind of VB's shell function, to assembly
the code(DEBUG.EXE < AddFileSharing.SRC > NUL).

The point is: IT'S POSSIBLE!

Sem mais,
--
Nelson Brito - IBQN / Security Network AG - The Trust Company!
open(S, shift || $ENV{'HOME'} . "/.signature") || die "open: $!\n";
foreach(<S>){ chop; split(//, $_); print reverse @_; print "\n"; }
close(S);