Thegrideon Software - View topic - VBA Bypasser not able to unlock excel file

jeff_B · Guest

I have an excel file that opens and disables the normal excel menu items. I need to be able to 'see' the VBA code behind the front end user forms and user menus.

I start VBA Bypass and select the file...see attached log. When the file is open there is an option to enter a password to view the source code. No matter what I put in here the window goes away and the source is not viewable.

Here is the log file:
11/26/2009 - 12:23:42 AM Program started successfully [Registered version 1.7]
11/26/2009 - 12:23:54 AM Trying to open File: C:\T-2008-2700.xls
11/26/2009 - 12:23:54 AM Excel.Sheet.8
11/26/2009 - 12:23:54 AM Microsoft Excel Worksheet
11/26/2009 - 12:23:54 AM Application associated to this file type: "C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE"
11/26/2009 - 12:24:17 AM Hiding backdoor from "VBA-enabled" software.
11/26/2009 - 12:24:17 AM Backdoor has been hidden successfully!
11/26/2009 - 12:24:21 AM Loading VBA DLL...
11/26/2009 - 12:24:21 AM DLL 'VBE6.DLL' ver: '6.5.10.24' size: 2585936 bytes
11/26/2009 - 12:24:21 AM VBA Backdoor has been opened successfully…

Thegrideon_Support

Hello,

Could you please send your file for examination?
The option to see source code is not looks like usual Excel dialog, so it could be part of VBA script itself. In order to start VBA script editor you can use standard Alt-F11 shortcut.

jeff_B · Guest

After several hours of experimenting I was able to stumble across something that did work. I don't know if I could duplicate it again but I was able to open up VBA and find the module where the code was looking for a password. I am all set..Thanks for the reply!

Thegrideon_Support

Hello,

The best way to start in this kind of cases is to elevate VBA security level (Excel main menu: Tools - Macro - Security...) from Low to Medium or above. This will allow you to cancel VBA script start-up and as the result self-protection mechanisms.