RMVEMBED: Powerpoint 97 Embedded OLE Object Cleaner 1.1
=======================================================

(C) 1999 Network Associates, Inc.
AVERT, a Division of NAI Labs

mailto:virus_research_de@nai.com


SYSTEM REQUIREMENTS:

- Powerpoint 97 or 2000
- Word 97 or 2000
- Excel 97 or 2000


DESCRIPTION:

This Visual Basic Application is designed for use with Powerpoint 97
and 2000. It searches Powerpoint 97 presentations for either any
macros embedded into Excel 5/95/97 or Word 6/95/97 objects, or for X97M/Laroux
embedded into Excel 97 objects. Suspicous macros can be removed
automatically. Additionally, a scan report is created which provides
a detailed overview of what macros have been found (and removed).
If automatic removal is not desired, this report can be used to
remove suspicous macros manually.


INSTALLATION:

Unzip all files to a new directory.


USAGE:

Open RMVEMBED.PPT in Powerpoint. Start program by running the slide
show and clicking on the appropriate shape or selecting TOOLS |
MACROS | MACRO... and running the 'Start' macro.

We strongly recommend the following steps to make using this tool
as safe as possible:
- Use a separate machine which cannot be accessed by other user.
- Scan the machine with VirusScan 4.0.3, scan engine 4.0.25 and
  latest DAT files before and after usage of RMVEMBED.
- Scan the presentation RMVEMBED for viruses before you use it.
- Scan all presentations cleaned by RMVEMBED.


KNOWN ISSUES:

If explicit variable declaration is enabled in Word's and Excel's VBA
options an OPTION EXPLICIT statement will be added to each module
of cleaned embedded Word 97 and Excel 97 OLE objects. We recommend
disabling explicit variable declaration in order to avoid this issue.

A stack overflow error (error 6) was seen while scanning one of
the presenations included in our test set. The error was probaby
caused by the very complex (and maybe partially corrupted) structure
of said file. However, the error only occurred using Powerpoint 97.
If you get such an error message we recommend using Powerpoint 2000.
