Q&A About Excel Macro/Laroux Macro Virus (154131)


The information in this article applies to:

  • Microsoft Excel 97 for Windows
  • Microsoft Excel for Windows 95
  • Microsoft Excel for Windows 5.0
  • Microsoft Excel 98 Macintosh Edition
This article was previously published under Q154131

SUMMARY

In July 1996, Microsoft learned of a nondestructive macro virus that affects Microsoft Excel. The following information is taken from the online Question and Answer document about the Microsoft Excel macro virus.

NOTE: To protect yourself, obtain the Microsoft Excel Virus Search Version 2.0 add-in. For more information, please see the following Microsoft World Wide Web site:

http://office.microsoft.com/downloads/9798/xlscan97.aspx

MORE INFORMATION

Q: What are macro viruses?

A: Macro viruses are a type of virus that use a program's own macro
   programming language to distribute themselves. Unlike previous
   viruses, macro viruses do not infect programs; they infect documents.

Q: What is Sofa?

A: This is a nonharmful, nondestructive macro virus that does not affect
   data in any way. Infected files display the application header
   "Microsofa Excel" instead of "Microsoft Excel."

Q: What is ExcelMacro/Laroux?

A: This is a nonharmful, nondestructive concept virus. It simply appends
   a macro sheet called "laroux" to workbooks. It does not affect data
   or anything else in the workbook. This is the first replicating macro
   virus ever discovered in Microsoft Excel.

Q: What is Laroux B?

A: Laroux B is a variation of the original virus that is the same in all
   respects, but can overwrite existing macros on the user's
   Personal.xls macro sheet.

REFERENCES

"ExcelMacro/Laroux Customer Q&A" document from Microsoft Excel Marketing.
Modification Type:MinorLast Reviewed:10/11/2006
Keywords:kbdownload kbinfo kbofficeupdate kbProgramming kbualink97 KB154131
©2004 Microsoft Corporation. All rights reserved.