Question

我目前正在为我的客户开发Excel文档，确保VBA的安全性得到很好的保护非常重要。他们不打算查看本文档。所以我在搜索如何绕过VBA密码，我发现了一个超出旧密码的宏。

我的问题：有没有办法禁用下面的宏？

第1单元：

Option Explicit

Private Const PAGE_EXECUTE_READWRITE = &H40

Private Declare Sub MoveMemory Lib "kernel32" Alias "RtlMoveMemory" _
    (Destination As Long, Source As Long, ByVal Length As Long)

Private Declare Function VirtualProtect Lib "kernel32" (lpAddress As Long, _
    ByVal dwSize As Long, ByVal flNewProtect As Long, lpflOldProtect As Long) As Long

Private Declare Function GetModuleHandleA Lib "kernel32" (ByVal lpModuleName As String) As Long

Private Declare Function GetProcAddress Lib "kernel32" (ByVal hModule As Long, _
    ByVal lpProcName As String) As Long

Private Declare Function DialogBoxParam Lib "user32" Alias "DialogBoxParamA" (ByVal hInstance As Long, _
    ByVal pTemplateName As Long, ByVal hWndParent As Long, _
    ByVal lpDialogFunc As Long, ByVal dwInitParam As Long) As Integer

 Dim HookBytes(0 To 5) As Byte
 Dim OriginBytes(0 To 5) As Byte
 Dim pFunc As Long
 Dim Flag As Boolean

 Private Function GetPtr(ByVal Value As Long) As Long
     GetPtr = Value
 End Function

 Public Sub RecoverBytes()
     If Flag Then MoveMemory ByVal pFunc, ByVal VarPtr(OriginBytes(0)), 6
 End Sub

 Public Function Hook() As Boolean
Dim TmpBytes(0 To 5) As Byte
Dim p As Long
Dim OriginProtect As Long

Hook = False

pFunc = GetProcAddress(GetModuleHandleA("user32.dll"), "DialogBoxParamA")


If VirtualProtect(ByVal pFunc, 6, PAGE_EXECUTE_READWRITE, OriginProtect) <> 0 Then

    MoveMemory ByVal VarPtr(TmpBytes(0)), ByVal pFunc, 6
    If TmpBytes(0) <> &H68 Then

        MoveMemory ByVal VarPtr(OriginBytes(0)), ByVal pFunc, 6

        p = GetPtr(AddressOf MyDialogBoxParam)

        HookBytes(0) = &H68
        MoveMemory ByVal VarPtr(HookBytes(1)), ByVal VarPtr(p), 4
        HookBytes(5) = &HC3

        MoveMemory ByVal pFunc, ByVal VarPtr(HookBytes(0)), 6
        Flag = True
        Hook = True
    End If
End If
 End Function

 Private Function MyDialogBoxParam(ByVal hInstance As Long, _
         ByVal pTemplateName As Long, ByVal hWndParent As Long, _
         ByVal lpDialogFunc As Long, ByVal dwInitParam As Long) As Integer
     If pTemplateName = 4070 Then
         MyDialogBoxParam = 1
     Else
         RecoverBytes
         MyDialogBoxParam = DialogBoxParam(hInstance, pTemplateName, _
                            hWndParent, lpDialogFunc, dwInitParam)
         Hook
     End If
 End Function

第2单元（并运行此程序）

 Sub unprotected()
     If Hook Then
         MsgBox "VBA Project is unprotected!", vbInformation, "*****"
     End If
 End Sub

Answer 1

1）代码不适用于较新版本的excel

2）HEx编辑会让你哭泣 Excel VBA Password via Hex Editor

3）@TimWilliams评论也适用

安全 - 如何获得更多

1 个答案: