Is it wrong that viruses cannot be hidden in word files?

#Is it wrong that viruses cannot be hidden in word files?

It is a wrong conclusion that viruses cannot be hidden in word files.

Word files can be infected with word macro viruses.

Word macro virus is a collection of one or more macros with virus characteristics specially made by some virus-making professionals by taking advantage of the openness of MICROSOFT Word, that is, the WordBASIC programming interface provided in Word. Collections of virus macros affect computer usage and can self-replicate and spread through DOC documents and DOT templates.

Characteristics of macro viruses:

1. Very fast spread:

Word macro viruses self-replicate and spread through DOC documents and DOT templates, and computer documents are the most A wide range of file types. For many years, people have mostly paid attention to protecting the boot part and executable files of their computers from being infected by viruses, and they have basically browsed and used foreign document files directly, which has brought a lot of convenience to the spread of Word macro viruses. Especially the popularity of the Internet and the large number of applications of E-mail have paved the way for the spread of Word macro viruses;

2. Convenient production and variation:

Word uses the macro language WordBasic to write macros instruction. Macro viruses are also written in WordBasic;

At present, there are dozens of macro virus prototypes in the world, and their variants are increasing day by day. The reason is traced back to the openness of Word. Today's Word viruses are all written in WordBasic language. Most Word virus macros are not processed using the Execute-Only processing function provided by Word. They are still open for reading and modification.

All users can easily see the full face of this macro virus in the macro menu of the Word tool. Of course, there will be "criminals" who use the Basic statements they have mastered to change the virus activation conditions and destruction conditions, and immediately produce a new macro virus, which is even more harmful than the original virus;

3. The possibility of damage is extremely high:

Since macro viruses are written in WordBasic language, WordBasic language provides many system-level underlying calls, such as directly using DOS system commands, calling Windows API, calling DDE, DLL, etc. These operations may pose a direct threat to the system, and Word's ability to detect the security integrity of instructions is very weak, and instructions that damage the system can easily be executed. The macro virus Nuclear is a typical example of damaging the operating system.

According to the infection mechanism of macro viruses, it is not difficult to see the characteristics of macro virus infection, so macro viruses can be found through the following steps:

1. Open the tool in the Word you use In the Macro menu, click on the Normal template. If you find automatic macros such as "AutoOpen", file operation macros such as "FileSave" or some macros with strange names, and you have not loaded a special template, there may be something wrong. Virus. Because most users do not have macros in their normal templates;

2. If you find that a document is opened and it is saved immediately without any modification, it is also possible that Word contains a virus;

　3. When opening a file with the suffix DOC, you can only save it as a template in the save menu. At this time, the general template contains macros, and it is possible that Word has a virus.

How to manually remove macro viruses:

1. Open the macro menu and delete macros that you think are viruses in the general template; 2. Open macros with viruses document (template), then open the macro menu and delete the macros you think are viruses in the general template and virus file name template;

　3. Save the clean document.

Manual virus removal is always cumbersome and unnecessary. Using anti-virus tools to automatically remove macro viruses is an ideal solution.

The above is the detailed content of Is it wrong that viruses cannot be hidden in word files?. For more information, please follow other related articles on the PHP Chinese website!