Article ID: 211800 - View products that this article applies to.
This article was previously published under Q211800
For a Microsoft Word 98 version of this article, see 181080
The first macro virus was discovered in the summer of 1995. Since that time, numerous other macro viruses have appeared. This article describes what to do if you think you have a Word macro virus.
The following are a few of the symptoms a Word macro virus may cause or exhibit.
NOTE: A macro virus may cause one or more of these symptoms (as well as other symptoms not listed).
For a long-term solution to macro viruses, install antivirus software that is specifically designed to detect macro viruses. For additional information about antivirus software, click the article number below to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/49500/EN-US/ )List of Antivirus Software Vendors
For additional information about methods available to reduce the risks of infecting Microsoft Word documents or templates with a macro virus, please see the following article in the Microsoft Knowledge Base:
233396Use the following workarounds as a temporary solution only.
(http://support.microsoft.com/kb/233396/EN-US/ )WD: How to Reduce the Chances of Macro Virus Infection
Method 1: Press SHIFT When You Open a FileIf you do not have any of the symptoms described in this article when you start Word, and you do not want to be affected by a macro virus, hold down the SHIFT key when you open a file that you suspect may be infected by a macro virus.
NOTE: Pressing and holding SHIFT when you open a document or template (or pressing SHIFT when you start Word) prevents any auto macros from being run; if a macro virus is present, it will not be loaded.
Method 2: Delete the Macro and Recover the DocumentIf you have experienced the symptoms listed in this article, or if you suspect that you have a macro virus that is not described here, use the following steps to remove the macros and correct the affected documents. (Remember, this is only a temporary solution; because new macros viruses are possible, these steps may not work.)
Method 3: Use the OrganizerUse the Organizer to "clean up" a suspected macro virus. Remember that if other files are opened after you open the infected file, the other files most likely are infected, as well.
NOTE: Do not use this method if your global (Normal.dot) template contains macros that you may want to keep.
Method 4: Insert the File into a New DocumentNOTE: Before you use this method, rename your global (Normal.dot) template.
Follow these steps to insert a suspected macro-virus-infected document into a new file:
A macro virus is a program that is written in the macro language of a application, for example, Microsoft Word. A macro virus propagates itself among files and can harm your Word documents and templates or your computer's operating system.
Word macro viruses do not travel independently over the Internet or any other media (for example, a disk or network connection); they can only be transferred when a document or template is opened that contains the macro virus.
Macro viruses also cannot be transferred by electronic mail (e-mail), unless an affected document is attached to the e-mail message, and the recipient opens the document (attachment).
To view frequently asked questions about Word macro viruses, please see the following article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/211607/EN-US/ )WD: Frequently Asked Questions About Word Macro Viruses
Article ID: 211800 - Last Review: September 1, 2006 - Revision: 3.1
Contact us for more help