Getting rid of macro viruses?

I'm posting this question one more time in hopes of getting a response. (I had no takers last time.)

Hope this question sin't going over old ground, but after reading various discussion threads, I'm still uncertain as to what I should do. Here's my story. My teen-age son acquired a macro virus that infected many of his MS Word documents.(How many I'm not sure.) Not satisfied with that, he brought one of his infected Word documents onto my G5 and proceeded to infect my Word documents. To end the annoying macro warning that now often pops up when opening a Word document, I turned off that security setting in MS Word on both computers. But now I'm wondering what my next step (if any) should be. Does it really matter that I have Word documents infected with macro viruses. The viruses themselves don't seem to do any harm. But something tells me that keeping the macro warning setting turned off is not a good idea.

On a previous thread, one commentor suggested that one could get rid of macros by deleting the "normal" template in MS Word. But what are the implications of doing that? Will it mean that when I open blank Word documents, they won't have a familar formatting?

I've also thought about buying an anto-virus program -- Intego, specifically -- in order to disinfect my infected Word files. But I've seen some discussion commentators say that Intego contributed to system instability on their computers. And some have said that Intego has prevented them from running "Repair Disk Permissions" successfully.

I've also thought about downloading the freeware program, ClamXav, but as I understand it, ClamXav is just a scanner that will quarantine infected documents but cannot disinfect them.

So, I seem to be faced with three options:

1) Do nothing and keep the macro warning setting turned off

2) Try dis-infecting with Intego and hope it doesn't screw up stability.

3) Download ClamXav and quarantine dozens --- maybe hundreds --- of Word files.

All advice will be gratefully received.

G5 and G4 Powerbook, Mac OS X (10.4.8)

Posted on Jun 18, 2007 10:32 AM

Reply
3 replies

Jun 18, 2007 10:57 AM in response to Brooklynite

You need to do two things. Clean up the infected files and prevent your Normal file from getting infected again.

While there are a few such macros that can damage your Mac, most are written to damage Windows. That's probably why nothing much has happened to you.

Norton Anti Virus or other well supported AV software should be able to detect and remove macro viruses from your Word documents. You can also follow the directions for manually removing macro viruses from you documents on Symantec's site here. It also lists common symptoms of behavior you'll see in Word if you open a file with a macro virus.

Most macro viruses also permanently infect your Normal template. So each document you open and save, whether it's a new file or an existing one, get the macro attached to it. To prevent that, close Word. Move your Normal template to the desktop. Launch Word, but do not do so by double clicking an existing document. Word should be up with a new blank document on the screen. Some settings such as margins (I think) are stored in the Normal template. You'll just have to go through all of your preferences and set things that you know are different back where you want them. Close Word. If it asks to save changes to your Normal template, click OK. Go to the folder in your user account where the Normal template is. Highlight the file by clicking on it once and press Command+I, or choose Get Info from the menu bar. Under Ownerships and Permissions, change all settings to Read Only. Click the little padlock next to your user account name if necessary so you can change it. Close the Get Info dialogue.

While doing this won't prevent you from opening Word documents that are already infected, it will protect your Normal template. No macro viruses will be able to embed themselves in the template, which in turn prevents you from getting them in any new document you create. What it won't do is automatically strip macro viruses from files that already have them.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Getting rid of macro viruses?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.