Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for disinfecting macro viruses.
More Information
XM97/Laroux-A is a simple macro virus, similar to the first Word macro viruses. The virus contains two macros - auto_open and check_files.
The auto_open macro is run when an infected Excel file is opened and merely instructs Excel to call the check_files macro every time a new worksheet is activated.
When this happens the virus creates a file in the XLSTART folder called PERSONAL.XLS, into which the virus copies its viral macros. PERSONAL.XLS is automatically opened every time Excel is run, much like Word's NORMAL.DOT template. From then on, the virus infects every workbook used. XM97/Laroux-A is a simple macro virus, similar to the first Word macro viruses. The virus contains two macros - auto_open and check_files.
The auto_open macro is run when an infected Excel file is opened and merely instructs Excel to call the check_files macro every time a new worksheet is activated.
When this happens the virus creates a file in the XLSTART folder called PERSONAL.XLS, into which the virus copies its viral macros. PERSONAL.XLS is automatically opened every time Excel is run, much like Word's NORMAL.DOT template. From then on, the virus infects every workbook used.
|
