Results 1 to 10 of 10
  1. #1
    alterego
    Guest

    Macro warning, but no macros! (W97-SR2)

    Hope this isn't too obvious, but I don't know how to remove all traces of macros from a document to prevent the Macro Virus Warning from appearing when it is opened. As far as I can tell, there are no macros present, but it clearly thinks there are...

    I know how to turn the warning off, but this is a document we want to send to a customer, and we don't want to alarm him!

    TIA, James

  2. #2
    alterego
    Guest

    Re: Macro warning, but no macros! (W97-SR2)

    Many thanks for the prompt reply. I did find the MS article shortly after posting the query (of course) and was pleased to note that MS come as near as they ever do to admitting that it was a bug (or "known issue" in MS-speak). None of their solutions is really practical - as you correctly surmise, the formatting does not get properly preserved, especially with a complex document containing metafiles and photos. We've got round it by using Adobe Acrobat, as the end-user doesn't have to edit the file, but it does seem absurd that Word can't recognise whether or not a macro is really present, and doesn't have any tools to sort it out! Absurd, but not surprising...

  3. #3
    Star Lounger
    Join Date
    Mar 2001
    Posts
    73
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Macro warning, but no macros! (W97-SR2)

    Please see the Technet article at:

    <A target="_blank" HREF=http://support.microsoft.com/support/kb/articles/Q161/5/15.asp>http://support.microsoft.com/support/kb/ar...s/Q161/5/15.asp</A>

    Saving to RTF has worked for me, but you may run into formatting issues.

    SJMiller

  4. #4
    5 Star Lounger
    Join Date
    Jan 2001
    Location
    Cairns, Queensland, Australia
    Posts
    885
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Macro warning, but no macros! (W97-SR2)

    Also you should be aware that sending in RTF is not 100% protection against Macro viruses. (I know there was a post or something in MS KB but I can't find either <img src=/S/blank.gif border=0 alt=blank width=15 height=15>).

    This thread may also be of interest RTF concerns
    Granville

  5. #5
    Super Moderator jscher2000's Avatar
    Join Date
    Feb 2001
    Location
    Silicon Valley, USA
    Posts
    23,112
    Thanks
    5
    Thanked 93 Times in 89 Posts

    Re: Macro warning, but no macros! (W97-SR2)

    Save As... document template.

    Create a new document based on that template.

    The new document should not inherit real or phantom macros from the template.

    This preserves formatting, but "statistics" on the properties tab will be lost. Document variables may be lost. Okay, I admit, I haven't tested this.

  6. #6
    Platinum Lounger
    Join Date
    Feb 2001
    Location
    Yilgarn region of Toronto, Ontario
    Posts
    5,453
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Macro warning, but no macros! (W97-SR2)

    > RTF is not 100% protection against Macro viruses.

    1. WORD (IN)SECURITY ALERT
    in
    WOW 27 June 2001 Vol 6 No 30:


    1. WORD (IN)SECURITY ALERT
    We've got another live one.

    Steven McLeod came up with a fascinating security exposure
    in Word 97, 2000, and 2002. It also affects MacWord 98 and
    2001. If you use Word, you need to make sure you have the
    patch. I don't know of any malware (viruses, worms,
    whatever) that take advantage of this tricky little number,
    but you can bet some cretin will figure it out real soon
    now. Better to get your posterior covered now.

    In very broad terms, here's how it works: when Word
    attaches a macro to a document, it flips a few bits that
    say, in effect, "Hey, I've got macro(s) attached to me, and
    here are their names. To run this macro, you need to hop
    down to such-and-so part of the .doc file and start
    chugging away. To run this other macro, you have to hop
    over here to this other place and go at it."

    Fair 'nuff. Works great. When Word opens a document, it
    checks to see if the "Hey, I've got macro(s) attached to
    me" bit is flipped. If that bit is on, Word runs the
    anti-virus security stuff. What happens from that point on
    varies depending on which version of Word you're using,
    what your security settings say, and whether or not you
    have an anti-virus package installed.

    Later, when the macros are needed (perhaps there's an
    "Auto" macro that runs automatically immediately after the
    document gets opened), Word looks in its list of macro
    names and runs whatever needs to be run.

    Here's the trick. If you go into a document with a binary
    editor, you can flip the "Hey, I've got macro(s) attached
    to me" bit - turn it from a one to a zero. Using this
    approach, a very clever cretin (and there are a few left)
    can construct a document, with viruses attached, that has
    the "Hey, I've got macro(s) attached to me" bit turned off.
    When Word opens the document, it looks to see if that bit
    is turned on. If it isn't, Word's antivirus program assumes
    that there are no macros attached to the document, and
    doesn't run its usual antivirus routines. But the macros
    are still there, they can still run - even run
    automatically - and they can definitely wreak havoc.

    Now that you know the problem exists, what should you do
    about it? Unfortunately, the answer to that question is a
    bit complicated.

    Last month I told you about a security exposure in Word
    2000 and 97 that reared its ugly head when you opened an
    RTF document with an attached macro. For those of you who
    use Word 2000 or 97, I recommended that you download and
    install Microsoft's security patch to fix the problem.
    (Historical side-note: since issuing that warning, a Trojan
    has appeared that takes advantage of the security hole.
    Hey, I toldja so.)

    The good news: if you took my advice, you don't need to do
    anything else. Amazingly, the security patch from last
    month actually zaps out this problem, too.

    On the other hand, if you didn't apply the security patch
    last month, you need to do it now, more than ever. And if
    you're running Word 2002 - which didn't need last month's
    patch - you have to download and install a new patch, right
    away.

    To summarize:

    If you use Word 97
    and you followed my instructions last month for getting rid
    of the RTF security exposure - that is, you downloaded and
    installed Microsoft's security update - you're home free.
    Otherwise, go to
    http://office.microsoft.com/download.../wd97mcrs.aspx
    and get the patch.

    If you use Word 2000
    and you followed my instructions last month for getting rid
    of the RTF security exposure, you don't need to do
    anything. But if you didn't download and install the
    security patch - and I bet you didn't, did you? - hit
    http://office.microsoft.com/download.../wd2kmsec.aspx
    and take the cure.


    If you use Word 2002
    (that is, the version of Word that ships with Office XP),
    this is a must-have patch. Go to
    http://office.microsoft.com/downloads/2002/wrd1001.aspx and
    install it quick.

  7. #7
    alterego
    Guest

    Re: Macro warning, but no macros! (W97-SR2)

    Excellent! It worked perfectly. Test not exhaustive, although I assume that even MS must save its templates correctly (or that a non-sequitur?) Anyway, many thanks.

  8. #8
    alterego
    Guest

    Re: Macro warning, but no macros! (W97-SR2)

    Thank you Chris. I remember reading that in the newsletter recently, but I hadn't properly realised its significance until now...

  9. #9
    alterego
    Guest

    Re: Macro warning, but no macros! (W97-SR2)

    FWIW, I checked the document stats, and although a lot cleaner, a few items (such as the print date) got preserved. I also noticed that the overall file size had reduced by about 1% and that although the word count remained the same, the total number of characters had reduced. Clearly a good way of tidying up a file, as well as getting rid of phantom macros...

  10. #10
    Platinum Lounger
    Join Date
    Feb 2001
    Location
    Yilgarn region of Toronto, Ontario
    Posts
    5,453
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Macro warning, but no macros! (W97-SR2)

    You're welcome. A large part of our memories is given over to a form of bookmark - "I know I've heard/read of this before, but where, and what was the message?". I think that's why I feel so strongly about a strong serach mechanism on any repository such as this board.


    >If you go into a document with a binary editor, you can flip the "Hey, I've got macro(s) attached to me" bit


    Now, who is going to pluck up the courage to suggest to Woody that he test "fixing" Normnal.dot this way to see if all documents created on the "fixed" template are switched? Or doesn't it matter?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •