It's funny you mentioned excel macros not being malware. Various scripting systems provided by excel has been a long standing malware vector.