X97M_LAROUX.DA
ALIASES:
Virus:X97M/Laroux.PA (Microsoft), X97M.Laroux.JO (Symantec), X97M/Laroux (McAfee), Virus.MSExcel.Laroux.ja (Kaspersky)
PLATFORM:
Windows 2000, Windows XP, Windows Server 2003
OVERALL RISK RATING:
DAMAGE POTENTIAL:
DISTRIBUTION POTENTIAL:
REPORTED INFECTION:
Threat Type: File infector
Destructiveness: No
Encrypted:
In the wild: Yes
TECHNICAL DETAILS
File Size:
Varies
Memory Resident:
Yes
Initial Samples Received Date:
29 Dec 2009
Arrival Details
This malware arrives via the following means:
- Opening Microsoft Excel workbook files infected with this malware
Installation
This file infector drops the following copies of itself into the affected system:
- %User Profile%\Application Data\Microsoft\Excel\XLSTART\StartUp.xls
(Note: %User Profile% is the current user's profile folder, which is usually C:\Windows\Profiles\{user name} on Windows 98 and ME, C:\WINNT\Profiles\{user name} on Windows NT, and C:\Documents and Settings\{user name} on Windows 2000, XP, and Server 2003.)
File Infection
This file infector infects the following file types:
- Microsoft Office Excel Workbook (*.xls)
