XM97/Laroux-A

Category: Viruses and Spyware Protection available since:21 Jan 1998 00:00:00 (GMT)
Type: Excel 97 macro virus Last Updated:21 Jan 1998 00:00:00 (GMT)
Prevalence: No Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

XM97/Laroux-A is a simple macro virus, similar to the first Word macro viruses. The virus contains two macros - auto_open and check_files.

The auto_open macro is run when an infected Excel file is opened and merely instructs Excel to call the check_files macro every time a new worksheet is activated.

When this happens the virus creates a file in the XLSTART folder called PERSONAL.XLS, into which the virus copies its viral macros. PERSONAL.XLS is automatically opened every time Excel is run, much like Word's NORMAL.DOT template. From then on, the virus infects every workbook used. XM97/Laroux-A is a simple macro virus, similar to the first Word macro viruses. The virus contains two macros - auto_open and check_files.

The auto_open macro is run when an infected Excel file is opened and merely instructs Excel to call the check_files macro every time a new worksheet is activated.

When this happens the virus creates a file in the XLSTART folder called PERSONAL.XLS, into which the virus copies its viral macros. PERSONAL.XLS is automatically opened every time Excel is run, much like Word's NORMAL.DOT template. From then on, the virus infects every workbook used.

download Try Sophos products for free
Download now