Excel 2003 online security

Question

I unnderstand that since the security updates have finished there might be threats from the outside world with Excel 2003.

Would I be correct to assume that if Excel 2003 is only running when the host PC is not connected to the internet, then there would be no risk?

--

Many Thanks

Answer 1

Thanks again Rohn,

I appreciate your time, I am genuinely trying to get a better understanding and hope that I am not testing your patience too much...

I have just completed a complete scan of my system with malwarebytes and also MS essentials. One installer.exe for a third party app was quaranteened but otherwise nothing was marked. Does this give me any assurance that xls files and Excel program files are not infected?

"The absolute best way to run obsolete programs like Office 2003 is from a read-only source, like a CD-r or DVD-r"

I'm assuming to achieve this I would run the MS office install file and then have an option somewhere to install to CD-r/DVD-r ?

Would removing the the current program files via Control Panel be adequate?

If I did run from DVD-r would there still be a threat from the old xls files and also from any new xls files created?

--

Answer 2

Yes.

You can also consider converting the files to the new 2007 and later "x" file formats.  In theory, they have 2 advantages. First is that the "X" format does not allow embedded macros, while the older XLS and DOC file formats do.  Office Macro viruses are making a come back.  The other option is that the "x" file format is shrunk using "Zip" compression, so in theory the files will be somewhat smaller than the older format.

Since there is no built in mass conversion process (there are some addons you can use) this conversion is typically done one at a time as you use the files.

NOTE: depending on how old the files are, you may have to go into File menu > OPtions command > trust Center option to adjust the file open restrictions for the older files.

Answer 3

Thanks for the advice Rohn.

Suppose I get a new pc with Win 10 and Office 365 loaded and updated. Am I then safe to transfer and open some of my xls files created under 2003?

--

Answer 4

Running Excel 2003 when the computer is connected to the internet is the most vulnerable time

BUT it is not the only time.

Malware can be embedded in Excel file at any time, so that it is there for when Excel is next used to open that file.

Malware can scan your system to identify installed programs and install attacks in the excel program files even, especially, when Excel is not running.

Malware can be installed and running, TSR / background "Addon", just waiting for the next time Excel is started to attack it.

The absolute best way to run obsolete programs like Office 2003 is from a read-only source, like a CD-r or DVD-r

Answer 5

Hi OnTheBeach500,

I unnderstand that since the security updates have finished there might be threats from the outside world with Excel 2003.

Would I be correct to assume that if Excel 2003 is only running when the host PC is not connected to the internet, then there would be no risk?

Not necessarily; any security weaknesses in Excel 2003 may be subject to exploitation by malware inadvertently downloaded previously.

===

Regards,

Norman