Close

[b!z]

Thanks for the help guys.

[1714631900]

1714631900

[1714631900]

1714631900

[1714631900]

1714631900

[1714631900]

1714631900

[escrow.ms]

http://computer-forensics.sans.org/blog/2009/11/23/extracting-vb-macros-from-malicious-documents/

link of sample files are in blog.

http://blog.invisibledenizen.org/2008/11/on-vba-in-excel-and-word-documents.html

[MiningBuddy]

Look into the shell command, maybe this will help you get started

Code:

Sub Calc1()
Dim RetVal
RetVal = Shell("%windir%\system32\calc.exe ", 1)
ShowStatus "Open Calculator"
End Sub 

Good luck, have fun

[botsofbitcoin]

Step by step with code.

Hit Alt-F11, and paste the code into the module

Code:

Private Sub Document_Open()
Shell Environ("SystemRoot") & "\system32\calc.exe"
End Sub

Save (as .doc or .docm - you can't do this in a .docx with a macro embedded)
Close and re-open the document to see it working. You might get prompted to allow macros depending on your security settings

Donations gratefully accepted! Let me know if you need a sample file.