Classification

Category: Malware

Type: Virus

Platform: X97M

Aliases: Manalo

Summary


X97M/Manalo is an Excel macro virus.

Removal


Automatic action

Based on the settings of your F-Secure security product, it will either automatically delete, quarantine or rename the detected program or file, or ask you for a desired action.

Knowledge Base

Find the latest advice in our Community Knowledge Base.

About the product

See the manual for your F-Secure product on the Help Center.

Contact Support

Chat with or call an expert for help.

Submit a sample

Submit a file or URL for further analysis.

Technical Details



Variant:Manalo.A

When an infected workbook is opened, X97M/Manalo.A checks if file "MANALO.XLS" exists in the Excel's startup directory. If the file does not exist, the virus creates a new workbook, infects it and saves it to there.

At October 3rd, 1999 and every day after that the virus activates its payload. At this time it shows a hidden sheet with some text and a flag.


Variant:Manalo.D

X97M/Manalo.D is a modified variant of X97M/Manalo.A. It creates a workbook, "C B I.XLS", to Excel's statup directory.

This variant activates its payload at September 27th, 1999 and every day after that when it attempts to show an hidden sheet.