PDA

View Full Version : Virus for macro xls file


orenfarhi
December 30th, 2004, 06:42 AM
hi there.
i'm usin the latest 2.13 nod32.
i have this xls (excel file) file with macro inside (VBA programming).
nod32 keeps notify me that this xls file is having a Macro virus, but this file is not infected from where i know. As i mentioned before, i have created this file with the macro programming.
How can i tell nod32 not to lock this or not to identify it as a virus?

mrtwolman
December 30th, 2004, 08:02 AM
{QUOTE-> hi there.
i'm usin the latest 2.13 nod32.
i have this xls (excel file) file with macro inside (VBA programming).
nod32 keeps notify me that this xls file is having a Macro virus, but this file is not infected from where i know. As i mentioned before, i have created this file with the macro programming.
How can i tell nod32 not to lock this or not to identify it as a virus? <-QUOTE}

The file could cause false possitive or it could be infected. My suggestion - try to send the file to ESET for analysis.

Best regards

jlo
December 30th, 2004, 12:10 PM
The E mail address to send virus samples to the eset team for analysis is samples@nod32.com

Cheers

Jlo

jlo
December 30th, 2004, 12:11 PM
Should have said best Zip the file up and password protect it, (Don't forget to them the password as well :D )

Cheers

Jlo

orenfarhi
December 30th, 2004, 12:47 PM
thanks, i will try it.

tazdevl
December 30th, 2004, 12:52 PM
Don't bother password protecting it unless it has sensitive info in it.

anotherjack
December 30th, 2004, 01:10 PM
{QUOTE-> Don't bother password protecting it unless it has sensitive info in it. <-QUOTE}
If you don't, then it won't pass the incoming virus scan without being removed. Eset's gateway AV software would pick it off and it would never get to the recipient...

BFG
December 30th, 2004, 03:17 PM
Hello,

While waiting on word from Eset, you could go NOD32 Control Center > NOD32 > Run NOD32 > Setup > Extensions. Highlight "XL?" and click remove.

Nothing with an XL? will be scanned now.

This is assuming you know for sure these are just false positives.

sir_carew
December 30th, 2004, 03:25 PM
You can exclude the file from being scanned in AMON. AMON-Setup-Exclusion.

{QUOTE-> Hello,

While waiting on word from Eset, you could go NOD32 Control Center > NOD32 > Run NOD32 > Setup > Extensions. Highlight "XL?" and click remove.

Nothing with an XL? will be scanned now.

This is assuming you know for sure these are just false positives. <-QUOTE}

orenfarhi
December 31st, 2004, 10:18 AM
thanks..
i'll try that