Threat Description

Manalo

Details

Aliases: Manalo
Category: Malware
Type: Virus
Platform: X97M

Summary



X97M/Manalo is an Excel macro virus.



Removal



Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.



Technical Details




Variant:Manalo.A

When an infected workbook is opened, X97M/Manalo.A checks if file "MANALO.XLS" exists in the Excel's startup directory. If the file does not exist, the virus creates a new workbook, infects it and saves it to there.

At October 3rd, 1999 and every day after that the virus activates its payload. At this time it shows a hidden sheet with some text and a flag.


Variant:Manalo.D

X97M/Manalo.D is a modified variant of X97M/Manalo.A. It creates a workbook, "C B I.XLS", to Excel's statup directory.

This variant activates its payload at September 27th, 1999 and every day after that when it attempts to show an hidden sheet.





Technical Details: Sami Rautiainen, F-Secure


SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Scan & clean your PC

F-Secure Online Scanner will scan and clean your PC in just a few minutes for free

Learn More