Vba Virus

Dexter · Apr 12th, 2002, 05:50 AM

I have been battling a Vba virus for several days now. Not sure where it came from but the filename is RESULTS.XLS. I'm also not entirely clear on how the little bugger works. But here are some of the actions I have noticed.

The file gets copied into the
C:WINDOWSAPPLICATION DATAMICROSOFTEXCELXLSTART directory.

It is impossible to open the two macros in the file which are called "Auto_open" and "Ck_Files."

When working with other excel files and writing macros, these two macros attach themselves to your new file.

If file containing these two macros is open and I'm working on a new file, the macros attach themselves to the new file as well.

The only way I was able to stop this thing was to close Excel, go into Windows Explorer, kill the RESULTS.XLS file, and then change the name of the XLSTART directory.

Has anyone else encountered this bug?

Dexter

Ivan F Moala · Apr 12th, 2002, 06:27 AM

Yes I got this via IT dept !! ....fortunately
I new what was happening and was able to
recode and disable it. I think this was an
attempt to see if anyone knew what they were
doing in excel to be able to do anything.

Fairly harmless.....but a pain non the less.

dk · Apr 12th, 2002, 06:34 AM

Not had it myself but a quick Google search revealed this:-

http://vil.nai.com/vil/content/v_10274.htm

HTH,
Dan

Apr 12th, 2002, 06:27 AM	#2
Ivan F Moala MrExcel MVP Join Date: Feb 2002 Location: Auckland, New Zealand Posts: 4,209	Yes I got this via IT dept !! ....fortunately I new what was happening and was able to recode and disable it. I think this was an attempt to see if anyone knew what they were doing in excel to be able to do anything. Fairly harmless.....but a pain non the less. __________________ Kind Regards, Ivan F Moala From the City of Sails

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Apr 12th, 2002, 05:50 AM	#1
Dexter Board Regular Join Date: Apr 2002 Location: St. Louis Posts: 71	I have been battling a Vba virus for several days now. Not sure where it came from but the filename is RESULTS.XLS. I'm also not entirely clear on how the little bugger works. But here are some of the actions I have noticed. The file gets copied into the C:WINDOWSAPPLICATION DATAMICROSOFTEXCELXLSTART directory. It is impossible to open the two macros in the file which are called "Auto_open" and "Ck_Files." When working with other excel files and writing macros, these two macros attach themselves to your new file. If file containing these two macros is open and I'm working on a new file, the macros attach themselves to the new file as well. The only way I was able to stop this thing was to close Excel, go into Windows Explorer, kill the RESULTS.XLS file, and then change the name of the XLSTART directory. Has anyone else encountered this bug? Dexter

Apr 12th, 2002, 06:34 AM	#3
dk MrExcel MVP Join Date: Feb 2002 Location: Sydney, Australia Posts: 2,908	Not had it myself but a quick Google search revealed this:- http://vil.nai.com/vil/content/v_10274.htm HTH, Dan