Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically

X97M/Laroux.A

X97M/Laroux.A is a macro virus attacking Excel workbooks (files with the extension XLS). The virus consists of the macros auto_open and check_files. The macro auto_open is activated at opening of an infected document. By that the virus is activated and takes over control by activation of each worksheet. The virus checks whether the file PERSONAL.XLS is present and finds out number of modules in the active workbook.
If the file PERSONAL.XLS is present and number of modules in the active workbook is 0 it is attacked.
In case that the active workbook is being infected and the file PERSONAL.XLS does not exist the virus creates it; then it copies the worksheet with name "laroux", which is not visible, into it.

© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.