Excel95/97 Sheet Renamer Utility Version 1.0.......this page last updated July 23, 1998

Disclosure

This DOS command line utility program has not been approved by Quality Assurance and could cause crashes on your machine(s). It has  been designed to help you address various issues and should be used as recommended by your McAfee representative. Please take the time to read our Non-Disclosure Agreement before downloading it.

Overview

Versions of VirusScan prior to v3.1.8 clean infections of Laroux and other Excel macro viruses and renamed the original infected sheets to all asterisks (i.e. a sheet named "PLDT" by a Laroux virus variant would be renamed to "****" during disinfection).
If the same workbook or worksheet were reinfected, and cleaned again, there could be two duplicate named sheets causing an Invalid Page Fault within Excel97. This utility will rename the duplicate named sheets to valid names, returning use of the files.

Pre - requisites for running Program

Please check files with the latest .DATs from our betadats page and verify the file is not infected. If found infected, clean the file with v3.1.9 or later DOS command line scanner. Before processing your files with this utility, it is recommended to create backup copies of them.

Installation Instructions

None; it is a single .EXE utility file.

Operating Instructions

There are 3 known variations of the virus, all are identified as "SPACEFILLER". This executable is designed to correct and remove the virus from the header of PE files. Usage is:

EXCELFIX.EXE <dir/file name>

EXAMPLE:

EXCELFIX.EXE C:\INFECTED

This will process all .XLS files within the C:\INFECTED folder and also subdirectories within that directory. The standard output for the remover given the command "EXCELFIX C:\INFECTED" with 2 .XLS files in that directory which have sheet names with "**" in them:

*************************************
ExcelFix version 1.0
Last Update: Jul 10,1998
(c) 1998 Network Associates Inc
*************************************
Scaning file: inf.xls
Fixed Excel File: inf.xls
Scaning file: menclean.xls
Fixed Excel File: menclean.xls

If the file has been cleaned by this process already, running EXCELFIX.EXE again will indicate the files do not require further processing:

*************************************
ExcelFix version 1.0
Last Update: Jul 10,1998
(c) 1998 Network Associates Inc
*************************************
Scaning file: inf.xls
Scaning file: menclean.xls

Error messages

Please report any errors to virus_research@nai.com.

List of Issues addressed by the program

Contact

For any further questions please contact Virus Research at virus_research@nai.com