On Tue, 06 Jan 2004 12:56:06 +0000 (GMT) Trog <[EMAIL PROTECTED]> wrote:
> > In case anyone is interested... > > I have completed the first version of an OLE2 file unpacker (as used > in MS Office Documents >= Office97). It is currently at: > > http://www.uncon.org/files/ole2extract.c > > Should extract all component files from Office documents. Looks great. I will test it against our all infected word document samples today night. If you need some samples just let me know. > I can now hopefully start work on code to extract the VBA components. > Any and all information on this gratefully received. Please check the sources of OpenOffice and libgsf. Good luck !! Thank you in advance. Best regards, Tomasz Kojm -- oo ..... [EMAIL PROTECTED] www.ClamAV.net (\/)\......... http://www.clamav.net/gpg/tkojm.gpg \..........._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Tue Jan 6 14:58:46 CET 2004
pgp00000.pgp
Description: PGP signature
