SOS - Recover infected Excel Files into Original Form?

[therock003]

Hello guys, my computer got infected with a virus (Malwarebytes shows synaptics.exe as infected virus) and lots of xlsx files turned into Macro xlsm files. It somehow run malicious code into my excel files and infected them. It shows RPC1 as author if this helps, and the size varies. For example one of my most important files is sized 685kb which shows that information might still be in there.

So any way to retreive the information, remove code without opening the file in excel etc etc?

Sorry guys im overwhealmed at this moment and any help will be gretly appreciated.

 

[therock003]

Guys i got good and bad news.

If i open the xlsm, all ive got to do is unhide the hidden tabs and then the rest of my workbook is there. But i think opening it reactivates the virus on my computer and i have to clean the virus again.

Question is, how do i safely extract the data, or clean the infected files without corrupting them.

Or if i open xlsm, unhide tabs, can i then save it as a clean non infected file?

I mean i really dunno, good news i guess is my information is not all gone, but is trapped inside infected excel files. Not so good news is i somehow need to extract it. Maybe ill boot a VM and try to play from inside there...

 

[Logit]

There are instructions on the internet to use Open Office as a means to open Excel files and retrieve data. That might be an approach.

 

[therock003]

It did open the file but it didn't have any unhide sheets options.

So anyway I did what I said I set up a VM run excel from there opened and saved as a new xlsx. But macro is still inside. Why doesn't excel give you the option to remove macros without enabling them. I mean just give me a list of macros saved in the worksheet so I can remove/delete them without having to enable them and have something malicious run

So any ideas how this could be done?

 

[Logit]

If you save the file as an XLSX file the macros will be deleted. Try the following (not tested here ... you should probably perform this action on COPIES of your files).

Sub ConvertXLSToXLSX()
    Dim folderPath As String
    Dim fileName As String
    Dim wb As Workbook
    Dim xlsFile As String
    
    folderPath = "C:\Your\Folder\Path\" ' Change to your folder path
    fileName = Dir(folderPath & "*.xls*")
    
    Do While fileName <> ""
        xlsFile = folderPath & fileName
        Set wb = Workbooks.Open(xlsFile)
        wb.SaveAs Replace(xlsFile, ".xls*", ".xlsx"), FileFormat:=51
        wb.Close SaveChanges:=False
        fileName = Dir
    Loop
End Sub