XL98: How to Identify and Remove the PLDT Macro Virus
ID: Q188794
|
The information in this article applies to:
-
Microsoft Excel 98 Macintosh Edition
-
Microsoft Excel for the Macintosh, version 5.0
SUMMARY
This article contains information about the PLDT macro virus, including how
to tell when your workbooks are infected and how to remove the macro virus
from your workbooks.
MORE INFORMATIONGeneral Information About the PLDT Macro Virus
The PLDT macro virus is a non-destructive virus that copies a file called
Pldt.xls into your startup folder and copies a module containing an
Auto_Open macro into any workbook that you open in Microsoft Excel.
Detecting and Removing the PLDT Macro Virus
If the PLDT macro virus has infected any of your workbooks, the workbook
Pldt.xls will be found in one of the following folders on your computer:
<hard disk name>:System Folder:Preferences:Excel Startup (5)
<hard disk name>:Microsoft Office 98:Office:Startup:Excel
Also, any workbooks that are infected by the macro virus will contain a
Visual Basic module called "pldt".
To remove the PLDT macro virus from your workbooks, use the appropriate
method for your version of Excel.
In Microsoft Excel 98
- On the Tools menu, click Preferences. Click the General tab. Make sure
the Macro Virus Protection check box is selected (checked), and then
click OK.
- Quit Microsoft Excel.
- Open the Microsoft Office 98:Office:Startup:Excel folder on your hard
disk.
- If the file Pldt.xls exists, drag this file to the Trash.
On the Special menu, click Empty Trash.
- Start Microsoft Excel.
- Open a workbook that you believe to be infected with the PLDT macro
virus.
If you receive the following message, click Disable Macros:
The workbook you are opening contains macros. Some macros may
contain viruses that could be harmful to your computer.
If you are sure this workbook is from a trusted source, click
'Enable Macros'. If you are not sure and want to prevent any
macros from running, click 'Disable Macros'.
- On the Tools menu, point to Macro, and then click Visual Basic Editor.
- Click Project Explorer on the View menu to make sure the Project
Window is visible.
- In the Project window, click the triangle to the left of the
word "Modules" below the name of the workbook you just opened.
If a module named pldt is listed, hold down CONTROL and click the
module name, and then click Remove PLDT on the shortcut menu. Click YES
when you are asked if you are sure you want to remove PLDT.
- On the File menu, click "Close and Return to Microsoft Excel."
- On the File menu, click Save. On the File menu, click Close.
- Repeat steps 6-11 for all workbooks that you believe are infected with
the PLDT macro virus.
Also, if any other workbooks, such as Personal Macro Workbook, are
listed in the Project window in the Visual Basic Editor, click the
triangle to the left of the word "Modules" below each workbook's name.
If any modules named pldt are displayed, hold down CONTROL and click
the module name, and then click Remove PLDT on the shortcut menu.
Until you are absolutely certain that the PLDT macro virus has been
completely removed from your computer, click Disable Macros every time you
open a workbook. If you open a workbook that contains the PLDT macro virus
and click Enable Macros, the macro virus will begin to infect your
workbooks again.
In Microsoft Excel 5.0
- Quit Microsoft Excel.
- Open the System Folder:Preferences:Excel Startup (5) folder on your
hard disk.
- If the file Pldt.xls exists, drag this file to the Trash.
On the Special menu click Empty Trash.
- Start Microsoft Excel.
- Open a workbook that you believe to be infected with the PLDT macro
virus. On the File menu click Open. Locate and select the workbook.
Hold down SHIFT and then click Open. Keep the SHIFT key pressed until
the workbook is open.
This will prevent any Auto_Open macros in the workbook from running.
- On the Format menu, point to Sheet, and click Unhide. If pldt
is listed in the Unhide Sheet list box, select it, and then click OK.
- On the Edit menu, click Delete Sheet. Click OK to permanently delete
the sheet.
- On the File menu, click Save. On the File menu, click Close.
- Repeat steps 5-8 for all workbooks that you believe are infected with
the PLDT macro virus.
Also, if you have a Personal Macro Workbook, you may need to unhide it
(on the Window menu, click Unhide), perform steps 6 and 7, and then
rehide the Personal Macro Workbook (on the Window menu, click Hide).
When you quit Microsoft Excel, click Yes to save changes to the
Personal Macro Workbook.
If you are uncertain as to whether or not a workbook is infected with the
PLDT macro virus, hold down SHIFT while you open the workbook, and then
perform steps 6-8.
NOTE: If you have exchanged workbooks with anyone else, you should let them
know that their workbooks may also be infected by the PLDT macro virus.
Additional query words:
XL98
Keywords : kbdta xlvbainfo
Version : MACINTOSH:5.0,98
Platform : MACINTOSH
Issue type : kbhowto
|