XL98: How to Identify and Remove the PLDT Macro Virus

ID: Q188794


The information in this article applies to:
  • Microsoft Excel 98 Macintosh Edition
  • Microsoft Excel for the Macintosh, version 5.0


SUMMARY

This article contains information about the PLDT macro virus, including how to tell when your workbooks are infected and how to remove the macro virus from your workbooks.


MORE INFORMATION

General Information About the PLDT Macro Virus

The PLDT macro virus is a non-destructive virus that copies a file called Pldt.xls into your startup folder and copies a module containing an Auto_Open macro into any workbook that you open in Microsoft Excel.

Detecting and Removing the PLDT Macro Virus

If the PLDT macro virus has infected any of your workbooks, the workbook Pldt.xls will be found in one of the following folders on your computer:
<hard disk name>:System Folder:Preferences:Excel Startup (5)
<hard disk name>:Microsoft Office 98:Office:Startup:Excel
Also, any workbooks that are infected by the macro virus will contain a Visual Basic module called "pldt".
To remove the PLDT macro virus from your workbooks, use the appropriate method for your version of Excel.

In Microsoft Excel 98

  1. On the Tools menu, click Preferences. Click the General tab. Make sure the Macro Virus Protection check box is selected (checked), and then click OK.


  2. Quit Microsoft Excel.


  3. Open the Microsoft Office 98:Office:Startup:Excel folder on your hard disk.


  4. If the file Pldt.xls exists, drag this file to the Trash. On the Special menu, click Empty Trash.


  5. Start Microsoft Excel.


  6. Open a workbook that you believe to be infected with the PLDT macro virus.

    If you receive the following message, click Disable Macros:
    The workbook you are opening contains macros. Some macros may contain viruses that could be harmful to your computer.

    If you are sure this workbook is from a trusted source, click 'Enable Macros'. If you are not sure and want to prevent any macros from running, click 'Disable Macros'.


  7. On the Tools menu, point to Macro, and then click Visual Basic Editor.


  8. Click Project Explorer on the View menu to make sure the Project Window is visible.


  9. In the Project window, click the triangle to the left of the word "Modules" below the name of the workbook you just opened.

    If a module named pldt is listed, hold down CONTROL and click the module name, and then click Remove PLDT on the shortcut menu. Click YES when you are asked if you are sure you want to remove PLDT.


  10. On the File menu, click "Close and Return to Microsoft Excel."


  11. On the File menu, click Save. On the File menu, click Close.


  12. Repeat steps 6-11 for all workbooks that you believe are infected with the PLDT macro virus.

    Also, if any other workbooks, such as Personal Macro Workbook, are listed in the Project window in the Visual Basic Editor, click the triangle to the left of the word "Modules" below each workbook's name. If any modules named pldt are displayed, hold down CONTROL and click the module name, and then click Remove PLDT on the shortcut menu.


Until you are absolutely certain that the PLDT macro virus has been completely removed from your computer, click Disable Macros every time you open a workbook. If you open a workbook that contains the PLDT macro virus and click Enable Macros, the macro virus will begin to infect your workbooks again.

In Microsoft Excel 5.0

  1. Quit Microsoft Excel.


  2. Open the System Folder:Preferences:Excel Startup (5) folder on your hard disk.


  3. If the file Pldt.xls exists, drag this file to the Trash. On the Special menu click Empty Trash.


  4. Start Microsoft Excel.


  5. Open a workbook that you believe to be infected with the PLDT macro virus. On the File menu click Open. Locate and select the workbook. Hold down SHIFT and then click Open. Keep the SHIFT key pressed until the workbook is open.

    This will prevent any Auto_Open macros in the workbook from running.


  6. On the Format menu, point to Sheet, and click Unhide. If pldt is listed in the Unhide Sheet list box, select it, and then click OK.


  7. On the Edit menu, click Delete Sheet. Click OK to permanently delete the sheet.


  8. On the File menu, click Save. On the File menu, click Close.


  9. Repeat steps 5-8 for all workbooks that you believe are infected with the PLDT macro virus.

    Also, if you have a Personal Macro Workbook, you may need to unhide it (on the Window menu, click Unhide), perform steps 6 and 7, and then rehide the Personal Macro Workbook (on the Window menu, click Hide). When you quit Microsoft Excel, click Yes to save changes to the Personal Macro Workbook.


If you are uncertain as to whether or not a workbook is infected with the PLDT macro virus, hold down SHIFT while you open the workbook, and then perform steps 6-8.

NOTE: If you have exchanged workbooks with anyone else, you should let them know that their workbooks may also be infected by the PLDT macro virus.

Additional query words: XL98

Keywords : kbdta xlvbainfo
Version : MACINTOSH:5.0,98
Platform : MACINTOSH
Issue type : kbhowto


Last Reviewed: August 3, 1999
© 2000 Microsoft Corporation. All rights reserved. Terms of Use.