1
0
I have several files which are massive in size, but should not be. The files are 20+MB and should be only around 1 MB. When opening with 7-Zip as an archive the file which is unusually large is: 'Workbook.' Also, if you can happen to open the XLS file with excel, and manage to scroll through (past the lag) it comes up with a smile-face. This is not a smile-face that should be in the file. Has anyone heard of such an attack or does anyone know of a fix?
Tim
Posted 2012-03-07T20:33:49.753
Reputation: 31
Currently I am running a script which loads the files via ADODB to extract all working data. This will serve as a back-up, however, any sort of fix, or help determining how this happened would be great. – Tim – 2012-03-07T21:37:05.663
Welcome to Superuser. A little more info will help us help you. What Windows and Office version are you using? Also, have you done any system scans for viruses or damaged/corrupted files (scan-disk)? – CharlieRB – 2012-03-07T23:32:22.777
There is not much additional information I can provide. We are on a network of PCs ranging from Windows 2000 to Windows 7. We have Office 2000/2003. The files appear to have been attacked via some sort of virus, which no anti-virus has caught, even in scans of the infected files. However, due to the nature of the "infected" files, I am not sure that they are actually "infected" as much as afflicted. Since the only real harm seems to be an added object made of Excel shapes stacked over and over. Is there perhaps something that could take these shapes out of the file? – Tim – 2012-03-08T14:16:48.407
PS: When I ask if there is something that could remove the autoshapes from the file, I mean a third-party application. The files, many of them, cannot be opened within excel nor open office. – Tim – 2012-03-08T14:30:50.403
Is it possible that a user could have opened these files in a later version of Office? If that is done, and the file is saved as an xlsx format, they realize that was wrong and rename the extension to xls, the format will be un-recognizable and if it does open at all you will see a mess. – datatoo – 2012-03-13T02:25:40.703
Or if you are looking at an xlsx you have renamed as a zip, can you edit the drawings\drawing.xml to remove autoshapes? – datatoo – 2012-03-13T02:31:42.630
None of these files are xlsx and while I had tried editing in 7zip they have nothign of that sort. Even if they had, it seems 7zip is unable to edit. – Tim – 2012-03-30T13:14:22.297