Confused about VBA Stomping Message - how should I proceed? #777
Unanswered
x1-foundation
asked this question in
Q&A
Replies: 1 comment
-
In practice VBA stomping detection triggers a lot of false positives, so in your case I would not worry about it. This is only useful when analyzing actual malware, which does not seem to be your case as you wrote the macro. It's not really clear to me what you are trying to do: why not simply delete macros and forms using the VBA editor? |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Apologies - I am not an expert in Malware.
After a ppam I wrote has been flagged by an antivir VIRUSBARRIER on Mac I used your great tools to analyze.
One attempt was to delete all code Modules and analyze the nuked file.
I get the info
It seems there is a Form code left which was not removed by the removal code
(I used a PPT adapted version of this code by Jacob Hilderbrand at VBA EXPRESS
I see a lot of code in the form debug like this:
I read that stomping detection is experimental. How should I proceed? Any advice?
THANKS!
Beta Was this translation helpful? Give feedback.
All reactions