Office documents randomly corrupting - possible malware issue.

Posted on 2013-01-31
Medium Priority
Last Modified: 2013-11-22
Hi there,

I have a really worrying issue that emerged yesterday with two independent customers. The first one was a laptop that was running extremely slow and then apparently some of the office documents had become unreadable. I immediately assumed adware / virus infection but was unable to remotely access it due to connection / stability issues and so could not confirm this. I got the customer to email me several of the affected documents (word, excel and publisher). Sure enough when I attempted to open them i got the same message as them: The file cannot be opened because there are problems with its contents. Details: The file is corrupt and cannot be opened.

Given that the laptop showed all the signs of being infected with some kind of malware I assumed at this stage that it had somehow corrupted some of the office documents. Within two hours I got a report from another customer (totally unrelated) that some of their office documents had become corrupted. I did have remote access to this machine and logged in to find exactly the same error message as on the laptop. I scanned for viruses and found nothing.

This is where I currently am. Could this be a new virus that is corrupting Office documents? I have attempted to repair one of the files using the office repair component of Ontrack Data Recovery. It repaired the header but then the data was unreadable. However my main concern is identifying the underlying cause.

Any suggestions or feedback would be welcome.
Question by:VogueSoftware
LVL 30

Accepted Solution

Sudeep Sharma earned 2000 total points
ID: 38839165
I would recommend to scan the system with the tools mentioned below and in the sequence they are mentioned and post the logs

Make sure you DO NOT REBOOT the system after running tools in point 1 & 2.

1. RogueKiller/TheKiller
2. MalwareBytes
3. TDSSKIller

I would also recommend you to go through the articles from Younghv and RPG for the links of the tools and for the future reference

Basic Malware Troubleshooting



Run MalwareBytes in Quick Mode and if that required reboot, then reboot the system and run tools mentioned in point 1 and 2 but this time run MalwareBytes in Full Systen Scan.

So in your next reply post the RogueKiller logs, MBAM logs and TDSSKIller Logs


Author Comment

ID: 38839184
Many thanks Sudeep,

Will get started on those steps shortly. It will take me a while though as there are three machines with network access to the files and theoretically it could be any of them with the issue - to make matters worse they need constant access to them during the day so i will need to work round the staff.

In the meantime if anyone else has had same issue or has any suggestions for repairing the office documents please speak up!

Cheers again.

Featured Post

The new generation of project management tools

With monday.com’s project management tool, you can see what everyone on your team is working in a single glance. Its intuitive dashboards are customizable, so you can create systems that work for you.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

This is an article on how to answer questions, earn points and become an expert.
Are you looking to start a business? Do you own and operate a small company? If so, here are some courses you need to take before you hire a full-time IT staff.
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
This lesson discusses how to use a Mainform + Subforms in Microsoft Access to find and enter data for payments on orders. The sample data comes from a custom shop that builds and sells movable storage structures that are delivered to your property. …

600 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question