Eng
  1. Skip to navigation
  2. Skip to content
  3. Skip to sidebar


Clonar


Aliases:


Clonar

Malware
Virus
X97M

Summary

X97M/Clonar is a simple Excel 97 macro virus.



Disinfection & Removal

Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.



Technical Details


Variant:Clonar.A

When an infected workbook is opened, X97M/Clonar.A disables both "Tools/Macros/Macro" and "Tools/Macros/Visual Basic Editor" menus.

Then the virus creates an temporary file, "C:\Windows\Diablos.bas", and it uses this file to infect all open workbooks.

Every 30th day of each month the virus activates its payload. At this time X97M/Clonar.A changes the size of toolbar buttons to large.





Technical Details: Sami Rautiainen, F-Secure



Submit a sample




Wondering if a file or URL is malicious? Submit a sample to our Lab for analysis via the Sample Analysis System (SAS)

Give And Get Advice




Give advice. Get advice. Share the knowledge on our free discussion forum.

Scan and clean your PC




F-Secure Online Scanner will scan and clean your PC in just a few minutes for free