Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > microsoft.public.excel.programming > #107989

Re: ms antivirus started finding "trojan" in workbooks, any ideas how to narrow down what module it's coming from?

From GS <gs@v.invalid>
Newsgroups microsoft.public.excel.programming
Subject Re: ms antivirus started finding "trojan" in workbooks, any ideas how to narrow down what module it's coming from?
Date 2015-08-21 08:17 -0400
Organization A noiseless patient Spider
Message-ID <mr74qj$6ag$1@dont-email.me> (permalink)
References <b4bfa9aa-eeed-4ecf-8f58-e53e8582825f@googlegroups.com> <mr67an$42b$1@dont-email.me>

Show all headers | View raw


> madscijr wrote:
>> My question is, does anyone have any suggestions or know of any 
>> utilities or ways to narrow down what is setting off the alerts?
>
>
> You are not the first one.
>
> Try renaming some of procedures/variables, moving code to different 
> modules...
> or
> switch antivirus.
>
> VBA code stored in bin file "looks similar" to virus.
>
> You can start removing module by module and see when it stops being 
> infected and focus in rearranging code in these modules.

FWIW:
I had my licensing code 'flagged' as a false positive suddenly, on a 
system that it ran fine on, after Avast did an update/upgrade. How I 
fixed it was to change wording used...

  encrypt, encode
  and
  decrypt, decode

were changed to...

  convert
  and
  revert

..after which the flagging stopped!

-- 
Garry

Free usenet access at http://www.eternal-september.org
Classic VB Users Regroup!
  comp.lang.basic.visual.misc
  microsoft.public.vb.general.discussion

Back to microsoft.public.excel.programming | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

ms antivirus started finding "trojan" in workbooks, any ideas how to narrow down what module it's coming from? madscijr <usenet_daughter@yahoo.com> - 2015-08-17 12:27 -0700
  Re: ms antivirus started finding "trojan" in workbooks, any ideas how to narrow down what module it's coming from? madscijr <usenet_daughter@yahoo.com> - 2015-08-17 12:29 -0700
    Re: ms antivirus started finding "trojan" in workbooks, any ideas how to narrow down what module it's coming from? madscijr <usenet_daughter@yahoo.com> - 2015-08-17 12:35 -0700
  Re: ms antivirus started finding "trojan" in workbooks, any ideas how to narrow down what module it's coming from? "Peter T" <askformy@gmail.com> - 2015-08-18 13:06 +0100
    Re: ms antivirus started finding "trojan" in workbooks, any ideas how to narrow down what module it's coming from? madscijr <usenet_daughter@yahoo.com> - 2015-08-20 11:36 -0700
      Re: ms antivirus started finding "trojan" in workbooks, any ideas how to narrow down what module it's coming from? "Peter T" <askformy@gmail.com> - 2015-08-22 11:22 +0100
  Re: ms antivirus started finding "trojan" in workbooks, any ideas how to narrow down what module it's coming from? witek <witek7205@gazeta.pl.invalid> - 2015-08-20 22:54 -0500
    Re: ms antivirus started finding "trojan" in workbooks, any ideas how to narrow down what module it's coming from? GS <gs@v.invalid> - 2015-08-21 08:17 -0400
      Re: ms antivirus started finding "trojan" in workbooks, any ideas how to narrow down what module it's coming from? witek <witek7205@gazeta.pl.invalid> - 2015-08-21 08:20 -0500
        Re: ms antivirus started finding "trojan" in workbooks, any ideas how to narrow down what module it's coming from? GS <gs@v.invalid> - 2015-08-21 09:31 -0400
          Re: ms antivirus started finding "trojan" in workbooks, any ideas how to narrow down what module it's coming from? madscijr <usenet_daughter@yahoo.com> - 2015-08-21 08:21 -0700
      Re: ms antivirus started finding "trojan" in workbooks, any ideas how to narrow down what module it's coming from? madscijr <usenet_daughter@yahoo.com> - 2015-08-21 08:07 -0700
        Re: ms antivirus started finding "trojan" in workbooks, any ideas how to narrow down what module it's coming from? GS <gs@v.invalid> - 2015-08-21 11:19 -0400

csiph-web