Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
DiscussionsAccessExcelInfoPathOutlookPowerPointPublisherWord
DirectoryUser Groups
Related Topics
Outlook ExpressInternet ExplorerWindowsMS Server ProductsMore Topics ...

MS Office Forum / Excel / General Excel Questions / May 2008

Tip: Looking for answers? Try searching our database.

Stop Symantec AV from quarantine my VBA

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
EagleOne@microsoftdiscussiongroups - 15 May 2008 16:55 GMT
Excel 2003 up to date

What type of commands in Excel VBA does NAV assume relate to the Bloodhound
Macro Virus.

I assume that it does not like any command that deletes files - but there
may be others.

Can anyone help me strip my Personal.xls of VBA commands which causes NAV to
delete the file?

Any ideas?  Plea..........se!

EagleOne
Bernie Deitrick - 15 May 2008 17:31 GMT
It dislikes any use of the VBIDE extensibility - changing code with code is a hallmark of document
viruses.  You can set NAV Bloodhound feature to ignore certain files or folders - not sure how, but
my IT department was able to protect my files from being deleted.

HTH,
Bernie
MS Excel MVP

> Excel 2003 up to date
>
[quoted text clipped - 10 lines]
>
> EagleOne
EagleOne@microsoftdiscussiongroups - 15 May 2008 17:51 GMT
Thanks Bernie.

My IT department makes no exceptions, so far.

Would you mind being a bit more specific re: changing code with code; just
an example or two.

Further, I will demonstrate my relative VBA inexperience as to - VBIDE
extensibility?

I thought the problem was related to file delete commands.

> It dislikes any use of the VBIDE extensibility - changing code with code is a hallmark of document
> viruses.  You can set NAV Bloodhound feature to ignore certain files or folders - not sure how, but
[quoted text clipped - 18 lines]
> >
> > EagleOne
Bernie Deitrick - 15 May 2008 18:21 GMT
You can use code like this to add VBA code to a workbook:

Sub AddMeanModuleAndWickedProcedure()

Dim newVBComp As VBComponent
Set newVBComp = ActiveWorkbook.VBProject.VBComponents.Add(vbext_ct_StdModule)
newVBComp.Name = "ReallyDangerousCode"

With newVBComp.CodeModule
  .InsertLines .CountOfLines + 1, _
               "Sub myKillerSub()" & Chr(13) & _
               "   Msgbox ""Hello There, I'm about to destroy your computer.... HA HA HA HA!!!!"" "
& Chr(13) & _
               "End Sub"
End With
End Sub

It requires a reference to the MS VBA Extensibility X.X  (Sorry, I mis-spoke when I said VBIDE
Extensibility) to work, and this was the basis of that Word virus that made headlines 5 years or so
ago.  You can see where adding code to workbooks can be problematic, especially if the code is
written in a way that it writes itself into all open workbooks, which then write code to....

Bloodhound may also look for file deletion or kill commands..  I'm not certain of what it looks for,
but I lost lots of code like that above  when I was writing a utility that would update the code in
files created from a template....

HTH,
Bernie
MS Excel MVP

> Thanks Bernie.
>
[quoted text clipped - 32 lines]
>> >
>> > EagleOne
EagleOne@microsoftdiscussiongroups - 15 May 2008 18:58 GMT
Outstanding answer!!  Thanks

> You can use code like this to add VBA code to a workbook:
>
[quoted text clipped - 62 lines]
> >> >
> >> > EagleOne
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.