<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Remove Trojan Horse,Virus Removers,spyware search and destroy &#187; Macro</title>
	<atom:link href="http://www.ffbx.net/antivirus/macro/feed" rel="self" type="application/rss+xml" />
	<link>http://www.ffbx.net</link>
	<description>System Safety trojan horse removal,pc virus removers, Free Virus Removal, Malware Removal, spyware search and destroy, and virus website!</description>
	<lastBuildDate>Thu, 09 Sep 2010 14:48:18 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>XM.ZePast.A</title>
		<link>http://www.ffbx.net/virus-en/xmzepasta.html</link>
		<comments>http://www.ffbx.net/virus-en/xmzepasta.html#comments</comments>
		<pubDate>Fri, 01 Feb 2008 11:27:44 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Virus]]></category>
		<category><![CDATA[Macro]]></category>

		<guid isPermaLink="false">http://www.ffbx.net/virus-en/xmzepasta.html</guid>
		<description><![CDATA[Name XM.ZePast.A Type Macro Affected Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP Risk Level 1: Very Low Discovered July 8, 2002 Update February 13, 2007 12:49:00 PM Length Virus Info XM.ZePast.A is a simple Microsoft Excel 95 macro virus that will only replicate if Excel is installed in the C:\Msoffice\Excel [...]]]></description>
			<content:encoded><![CDATA[<table>
<tr>
<td><strong>Name</strong></td>
<td>XM.ZePast.A</td>
</tr>
<tr>
<td>Type</td>
<td><a href="http://www.ffbx.net/antivirus/macro" class="st_tag internal_tag" rel="tag" title="Posts tagged with Macro">Macro</a></td>
</tr>
<tr>
<td>Affected</td>
<td>Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP</td>
</tr>
<tr>
<td><strong>Risk</strong></td>
<td>Level 1: Very Low</td>
</tr>
<tr>
<td>Discovered</td>
<td>July 8, 2002</td>
</tr>
<tr>
<td>Update</td>
<td>February 13, 2007 12:49:00 PM</td>
</tr>
<tr>
<td>Length</td>
<td></td>
</tr>
<tr>
<td><a href="http://www.ffbx.net/antivirus/virus" class="st_tag internal_tag" rel="tag" title="Posts tagged with Virus">Virus</a> Info</td>
<td>XM.ZePast.A is a simple Microsoft Excel 95 <a href="http://www.ffbx.net/antivirus/macro" class="st_tag internal_tag" rel="tag" title="Posts tagged with Macro">macro</a> <a href="http://www.ffbx.net/antivirus/virus" class="st_tag internal_tag" rel="tag" title="Posts tagged with Virus">virus</a> that will only replicate if Excel is installed in the C:\Msoffice\Excel folder.</td>
</tr>
<tr>
<td>Threat Assessment</td>
<td>
<h4>Wild</h4>
<ul>
<li>
<strong>Wild Level: </strong>Low</li>
<li>
<strong>Number of Infections: </strong>0 &#8211; 49</li>
<li>
<strong>Number of Sites: </strong>0 &#8211; 2</li>
<li>
<strong>Geographical Distribution: </strong>Low</li>
<li>
<strong>Threat Containment: </strong>Easy</li>
<li>
<strong>Removal: </strong>Easy</li>
</ul>
<h4>Damage</h4>
<ul>
<li>
<strong>Damage Level: </strong>Low</li>
</ul>
<h4>Distribution</h4>
<ul>
<li>
<strong>Distribution Level: </strong>Low</li>
</ul>
<div>
<strong>Writeup By: </strong>Atli Gudmundsson</div>
</div>
</td>
</tr>
<tr>
<td>Details</td>
<td><a href="http://www.symantec.com/business/security_response/writeup.jsp?docid=2002-070809-2637-99"  target="_blank">>XM.ZePast.A</a></td>
</tr>
</table>
 <span class="post2pdf_span" style="border: 1px solid gray; width: 160px; text-align: left; "><a href="http://www.ffbx.net/wp-content/plugins/post2pdf/generate.php?post=๙" rel="nofollow"><img src="http://www.ffbx.net/wp-content/plugins/post2pdf/icon/pdf.png" width="16px" height="16px" />convert this post to pdf.</a></span>
	Tags: <a href="http://www.ffbx.net/antivirus/macro" title="Macro" rel="tag">Macro</a>, <a href="http://www.ffbx.net/antivirus/virus" title="Virus" rel="tag">Virus</a><br />

	<h4>Related Virus</h4>
	<ul class="st-related-posts">
	<li><a href="http://www.ffbx.net/virus-en/adwarefavbarcash.html" title="Adware.FavBarCash (December 6, 2007)">Adware.FavBarCash</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/whsvred.html" title="WHS.Vred (January 22, 2008)">WHS.Vred</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/w32beagledamm.html" title="W32.Beagle.DA@mm (December 16, 2007)">W32.Beagle.DA@mm</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/w97mtwopeye.html" title="W97M.Twopey.E (January 22, 2008)">W97M.Twopey.E</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/bloodhoundexploit132.html" title="Bloodhound.Exploit.132 (December 9, 2007)">Bloodhound.Exploit.132</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/w32gaobotbia.html" title="W32.Gaobot.BIA (December 24, 2007)">W32.Gaobot.BIA</a> (0)</li>
</ul>

]]></content:encoded>
			<wfw:commentRss>http://www.ffbx.net/virus-en/xmzepasta.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>XM.VNN</title>
		<link>http://www.ffbx.net/virus-en/xmvnn.html</link>
		<comments>http://www.ffbx.net/virus-en/xmvnn.html#comments</comments>
		<pubDate>Fri, 01 Feb 2008 11:26:04 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Virus]]></category>
		<category><![CDATA[Macro]]></category>

		<guid isPermaLink="false">http://www.ffbx.net/virus-en/xmvnn.html</guid>
		<description><![CDATA[Name XM.VNN Type Macro Affected Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP Risk Level 1: Very Low Discovered September 27, 2003 Update February 13, 2007 12:42:46 PM Length Virus Info XM.VNN is a simple Excel v4.0 macro virus. Threat Assessment Wild Wild Level: Low Number of Infections: [...]]]></description>
			<content:encoded><![CDATA[<table>
<tr>
<td><strong>Name</strong></td>
<td>XM.VNN</td>
</tr>
<tr>
<td>Type</td>
<td><a href="http://www.ffbx.net/antivirus/macro" class="st_tag internal_tag" rel="tag" title="Posts tagged with Macro">Macro</a></td>
</tr>
<tr>
<td>Affected</td>
<td>Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP</td>
</tr>
<tr>
<td><strong>Risk</strong></td>
<td>Level 1: Very Low</td>
</tr>
<tr>
<td>Discovered</td>
<td>September 27, 2003</td>
</tr>
<tr>
<td>Update</td>
<td>February 13, 2007 12:42:46 PM</td>
</tr>
<tr>
<td>Length</td>
<td></td>
</tr>
<tr>
<td><a href="http://www.ffbx.net/antivirus/virus" class="st_tag internal_tag" rel="tag" title="Posts tagged with Virus">Virus</a> Info</td>
<td>XM.VNN is a simple Excel v4.0 <a href="http://www.ffbx.net/antivirus/macro" class="st_tag internal_tag" rel="tag" title="Posts tagged with Macro">macro</a> <a href="http://www.ffbx.net/antivirus/virus" class="st_tag internal_tag" rel="tag" title="Posts tagged with Virus">virus</a>.</td>
</tr>
<tr>
<td>Threat Assessment</td>
<td>
<h4>Wild</h4>
<ul>
<li>
<strong>Wild Level: </strong>Low</li>
<li>
<strong>Number of Infections: </strong>0 &#8211; 49</li>
<li>
<strong>Number of Sites: </strong>0 &#8211; 2</li>
<li>
<strong>Geographical Distribution: </strong>Low</li>
<li>
<strong>Threat Containment: </strong>Easy</li>
<li>
<strong>Removal: </strong>Easy</li>
</ul>
<h4>Damage</h4>
<ul>
<li>
<strong>Damage Level: </strong>Low</li>
</ul>
<h4>Distribution</h4>
<ul>
<li>
<strong>Distribution Level: </strong>Low</li>
</ul>
<div>
<strong>Writeup By: </strong>Robert X Wang</div>
</div>
</td>
</tr>
<tr>
<td>Details</td>
<td><a href="http://www.symantec.com/business/security_response/writeup.jsp?docid=2003-092917-4036-99"  target="_blank">>XM.VNN</a></td>
</tr>
</table>
 <span class="post2pdf_span" style="border: 1px solid gray; width: 160px; text-align: left; "><a href="http://www.ffbx.net/wp-content/plugins/post2pdf/generate.php?post=๘" rel="nofollow"><img src="http://www.ffbx.net/wp-content/plugins/post2pdf/icon/pdf.png" width="16px" height="16px" />convert this post to pdf.</a></span>
	Tags: <a href="http://www.ffbx.net/antivirus/macro" title="Macro" rel="tag">Macro</a>, <a href="http://www.ffbx.net/antivirus/virus" title="Virus" rel="tag">Virus</a><br />

	<h4>Related Virus</h4>
	<ul class="st-related-posts">
	<li><a href="http://www.ffbx.net/virus-en/matrix-virus-hoax.html" title="Matrix Virus Hoax (December 10, 2007)">Matrix Virus Hoax</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/spywarekeylogger.html" title="Spyware.Keylogger (December 11, 2007)">Spyware.Keylogger</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/downloadertraus.html" title="Downloader.Traus (December 9, 2007)">Downloader.Traus</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/trojandustbunny.html" title="Trojan.Dustbunny (December 12, 2007)">Trojan.Dustbunny</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/spywarehomekeylogger.html" title="Spyware.HomeKeyLogger (December 11, 2007)">Spyware.HomeKeyLogger</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/backdoorantilam20.html" title="Backdoor.AntiLam.20 (December 6, 2007)">Backdoor.AntiLam.20</a> (0)</li>
</ul>

]]></content:encoded>
			<wfw:commentRss>http://www.ffbx.net/virus-en/xmvnn.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>XM.Sofa</title>
		<link>http://www.ffbx.net/virus-en/xmsofa.html</link>
		<comments>http://www.ffbx.net/virus-en/xmsofa.html#comments</comments>
		<pubDate>Fri, 01 Feb 2008 11:24:24 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Virus]]></category>
		<category><![CDATA[Macro]]></category>

		<guid isPermaLink="false">http://www.ffbx.net/virus-en/xmsofa.html</guid>
		<description><![CDATA[Name XM.Sofa Type Macro Affected Risk Level 1: Very Low Discovered Update February 13, 2007 12:11:15 PM Length Virus Info The XM.Sofa virus is the first member of the second family of Excel macro viruses. First discovered by SARC in early December of 1996 (west coast USA), XM.Sofa, like other Excel macro viruses, is written [...]]]></description>
			<content:encoded><![CDATA[<table>
<tr>
<td><strong>Name</strong></td>
<td>XM.Sofa</td>
</tr>
<tr>
<td>Type</td>
<td><a href="http://www.ffbx.net/antivirus/macro" class="st_tag internal_tag" rel="tag" title="Posts tagged with Macro">Macro</a></td>
</tr>
<tr>
<td>Affected</td>
<td></td>
</tr>
<tr>
<td><strong>Risk</strong></td>
<td>Level 1: Very Low</td>
</tr>
<tr>
<td>Discovered</td>
<td></td>
</tr>
<tr>
<td>Update</td>
<td>February 13, 2007 12:11:15 PM</td>
</tr>
<tr>
<td>Length</td>
<td></td>
</tr>
<tr>
<td><a href="http://www.ffbx.net/antivirus/virus" class="st_tag internal_tag" rel="tag" title="Posts tagged with Virus">Virus</a> Info</td>
<td>The XM.Sofa <a href="http://www.ffbx.net/antivirus/virus" class="st_tag internal_tag" rel="tag" title="Posts tagged with Virus">virus</a> is the first member of the second family of Excel <a href="http://www.ffbx.net/antivirus/macro" class="st_tag internal_tag" rel="tag" title="Posts tagged with Macro">macro</a> viruses. First discovered by SARC in early December of 1996 (west coast USA), XM.Sofa, like other Excel <a href="http://www.ffbx.net/antivirus/macro" class="st_tag internal_tag" rel="tag" title="Posts tagged with Macro">macro</a> viruses, is written in MS Visual Basic and it spreads by copying its own viral macros to other MS Excel spreadsheet hosts. Unlike XM.Laroux (the first known, viable Excel <a href="http://www.ffbx.net/antivirus/macro" class="st_tag internal_tag" rel="tag" title="Posts tagged with Macro">macro</a> <a href="http://www.ffbx.net/antivirus/virus" class="st_tag internal_tag" rel="tag" title="Posts tagged with Virus">virus</a>) which infects by creating a file called PERSONAL.XLS in the default startup directory, XM.Sofa spreads by way of a file called BOOK.XLT placed in the alternate startup directory.</td>
</tr>
<tr>
<td>Threat Assessment</td>
<td>
<h4>Wild</h4>
<ul>
<li>
<strong>Wild Level: </strong>Low</li>
<li>
<strong>Number of Infections: </strong>0 &#8211; 49</li>
<li>
<strong>Number of Sites: </strong>0 &#8211; 2</li>
<li>
<strong>Geographical Distribution: </strong>Low</li>
<li>
<strong>Threat Containment: </strong>Easy</li>
<li>
<strong>Removal: </strong>Easy</li>
</ul>
<h4>Damage</h4>
<ul>
<li>
<strong>Damage Level: </strong>Low</li>
</ul>
<h4>Distribution</h4>
<ul>
<li>
<strong>Distribution Level: </strong>Low</li>
</ul>
</div>
</td>
</tr>
<tr>
<td>Details</td>
<td><a href="http://www.symantec.com/business/security_response/writeup.jsp?docid=2000-121913-5803-99"  target="_blank">>XM.Sofa</a></td>
</tr>
</table>
 <span class="post2pdf_span" style="border: 1px solid gray; width: 160px; text-align: left; "><a href="http://www.ffbx.net/wp-content/plugins/post2pdf/generate.php?post=๗" rel="nofollow"><img src="http://www.ffbx.net/wp-content/plugins/post2pdf/icon/pdf.png" width="16px" height="16px" />convert this post to pdf.</a></span>
	Tags: <a href="http://www.ffbx.net/antivirus/macro" title="Macro" rel="tag">Macro</a>, <a href="http://www.ffbx.net/antivirus/virus" title="Virus" rel="tag">Virus</a><br />

	<h4>Related Virus</h4>
	<ul class="st-related-posts">
	<li><a href="http://www.ffbx.net/virus-en/trakia1070.html" title="Trakia.1070 (December 11, 2007)">Trakia.1070</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/w32estrella.html" title="W32.Estrella (December 23, 2007)">W32.Estrella</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/w32randin.html" title="W32.Randin (January 16, 2008)">W32.Randin</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/w32beagledxmm.html" title="W32.Beagle.DX@mm (December 16, 2007)">W32.Beagle.DX@mm</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/ircwhackedworm.html" title="IRC.Whacked.Worm (December 10, 2007)">IRC.Whacked.Worm</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/backdoorircyoink.html" title="Backdoor.IRC.Yoink (December 8, 2007)">Backdoor.IRC.Yoink</a> (0)</li>
</ul>

]]></content:encoded>
			<wfw:commentRss>http://www.ffbx.net/virus-en/xmsofa.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>XM.Robocop.B</title>
		<link>http://www.ffbx.net/virus-en/xmrobocopb.html</link>
		<comments>http://www.ffbx.net/virus-en/xmrobocopb.html#comments</comments>
		<pubDate>Fri, 01 Feb 2008 11:22:44 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Virus]]></category>
		<category><![CDATA[Macro]]></category>

		<guid isPermaLink="false">http://www.ffbx.net/virus-en/xmrobocopb.html</guid>
		<description><![CDATA[Name XM.Robocop.B Type Macro Affected Risk Level 1: Very Low Discovered September 9, 1999 Update February 13, 2007 12:48:57 PM Length Virus Info XM.Robocop.B is an Excel macro virus. This virus copies itself into a workbook and save itself as &#34;Personal.xls&#34; in the XLStart folder. On October 25, the virus may display the following message: [...]]]></description>
			<content:encoded><![CDATA[<table>
<tr>
<td><strong>Name</strong></td>
<td>XM.Robocop.B</td>
</tr>
<tr>
<td>Type</td>
<td><a href="http://www.ffbx.net/antivirus/macro" class="st_tag internal_tag" rel="tag" title="Posts tagged with Macro">Macro</a></td>
</tr>
<tr>
<td>Affected</td>
<td></td>
</tr>
<tr>
<td><strong>Risk</strong></td>
<td>Level 1: Very Low</td>
</tr>
<tr>
<td>Discovered</td>
<td>September 9, 1999</td>
</tr>
<tr>
<td>Update</td>
<td>February 13, 2007 12:48:57 PM</td>
</tr>
<tr>
<td>Length</td>
<td></td>
</tr>
<tr>
<td><a href="http://www.ffbx.net/antivirus/virus" class="st_tag internal_tag" rel="tag" title="Posts tagged with Virus">Virus</a> Info</td>
<td>XM.Robocop.B is an Excel <a href="http://www.ffbx.net/antivirus/macro" class="st_tag internal_tag" rel="tag" title="Posts tagged with Macro">macro</a> <a href="http://www.ffbx.net/antivirus/virus" class="st_tag internal_tag" rel="tag" title="Posts tagged with Virus">virus</a>. This <a href="http://www.ffbx.net/antivirus/virus" class="st_tag internal_tag" rel="tag" title="Posts tagged with Virus">virus</a> copies itself into a workbook and save itself as &quot;Personal.xls&quot; in the XLStart folder.</p>
<p>On October 25, the <a href="http://www.ffbx.net/antivirus/virus" class="st_tag internal_tag" rel="tag" title="Posts tagged with Virus">virus</a> may display the following message:</p>
<p><tt>&quot;Selamat Ulang Tahun Deddy Ratnanto!&quot;</tt></p>
<p>The <a href="http://www.ffbx.net/antivirus/virus" class="st_tag internal_tag" rel="tag" title="Posts tagged with Virus">virus</a> may display the following message during infection:</p>
<p><tt>&quot;(c)DRAT2000 Dual <a href="http://www.ffbx.net/antivirus/macro" class="st_tag internal_tag" rel="tag" title="Posts tagged with Macro">Macro</a> <a href="http://www.ffbx.net/antivirus/virus" class="st_tag internal_tag" rel="tag" title="Posts tagged with Virus">Virus</a> ver. 05b2 - by DRAT&quot;</tt></p>
<p>This <a href="http://www.ffbx.net/antivirus/virus" class="st_tag internal_tag" rel="tag" title="Posts tagged with Virus">virus</a> does not contain a damaging payload.</td>
</tr>
<tr>
<td>Threat Assessment</td>
<td>
<h4>Wild</h4>
<ul>
<li>
<strong>Wild Level: </strong>Low</li>
<li>
<strong>Number of Infections: </strong>0 &#8211; 49</li>
<li>
<strong>Number of Sites: </strong>0 &#8211; 2</li>
<li>
<strong>Geographical Distribution: </strong>Low</li>
<li>
<strong>Threat Containment: </strong>Easy</li>
<li>
<strong>Removal: </strong>Easy</li>
</ul>
<h4>Damage</h4>
<ul>
<li>
<strong>Damage Level: </strong>Low</li>
</ul>
<h4>Distribution</h4>
<ul>
<li>
<strong>Distribution Level: </strong>Low</li>
</ul>
<div>
<strong>Writeup By: </strong>Patrick Nolan</div>
</div>
</td>
</tr>
<tr>
<td>Details</td>
<td><a href="http://www.symantec.com/business/security_response/writeup.jsp?docid=2001-083118-3605-99"  target="_blank">>XM.Robocop.B</a></td>
</tr>
</table>
 <span class="post2pdf_span" style="border: 1px solid gray; width: 160px; text-align: left; "><a href="http://www.ffbx.net/wp-content/plugins/post2pdf/generate.php?post=๖" rel="nofollow"><img src="http://www.ffbx.net/wp-content/plugins/post2pdf/icon/pdf.png" width="16px" height="16px" />convert this post to pdf.</a></span>
	Tags: <a href="http://www.ffbx.net/antivirus/macro" title="Macro" rel="tag">Macro</a>, <a href="http://www.ffbx.net/antivirus/virus" title="Virus" rel="tag">Virus</a><br />

	<h4>Related Virus</h4>
	<ul class="st-related-posts">
	<li><a href="http://www.ffbx.net/virus-en/virusray.html" title="VirusRay (December 15, 2007)">VirusRay</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/w32wotronworm.html" title="W32.Wotron.Worm (January 22, 2008)">W32.Wotron.Worm</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/backdoorftp_anab.html" title="Backdoor.FTP_Ana.B (December 8, 2007)">Backdoor.FTP_Ana.B</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/w97mciancmm.html" title="W97M.Cian.C@mm (January 22, 2008)">W97M.Cian.C@mm</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/x97mfress.html" title="X97M.Fress (February 1, 2008)">X97M.Fress</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/w32brainprotect.html" title="W32.BrainProtect (December 16, 2007)">W32.BrainProtect</a> (0)</li>
</ul>

]]></content:encoded>
			<wfw:commentRss>http://www.ffbx.net/virus-en/xmrobocopb.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>XM.Register</title>
		<link>http://www.ffbx.net/virus-en/xmregister.html</link>
		<comments>http://www.ffbx.net/virus-en/xmregister.html#comments</comments>
		<pubDate>Fri, 01 Feb 2008 11:21:04 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Virus]]></category>
		<category><![CDATA[Macro]]></category>

		<guid isPermaLink="false">http://www.ffbx.net/virus-en/xmregister.html</guid>
		<description><![CDATA[Name XM.Register Type Macro Affected Risk Level 1: Very Low Discovered August 30, 2000 Update February 13, 2007 12:46:50 PM Length Virus Info XM.Register is designed to work with the French version of Microsoft Excel. It is difficult to replicate it in other versions of Excel. There currently two known variants of XM.Register. XM.Register makes [...]]]></description>
			<content:encoded><![CDATA[<table>
<tr>
<td><strong>Name</strong></td>
<td>XM.Register</td>
</tr>
<tr>
<td>Type</td>
<td><a href="http://www.ffbx.net/antivirus/macro" class="st_tag internal_tag" rel="tag" title="Posts tagged with Macro">Macro</a></td>
</tr>
<tr>
<td>Affected</td>
<td></td>
</tr>
<tr>
<td><strong>Risk</strong></td>
<td>Level 1: Very Low</td>
</tr>
<tr>
<td>Discovered</td>
<td>August 30, 2000</td>
</tr>
<tr>
<td>Update</td>
<td>February 13, 2007 12:46:50 PM</td>
</tr>
<tr>
<td>Length</td>
<td></td>
</tr>
<tr>
<td><a href="http://www.ffbx.net/antivirus/virus" class="st_tag internal_tag" rel="tag" title="Posts tagged with Virus">Virus</a> Info</td>
<td>XM.Register is designed to work with the French version of Microsoft Excel. It is difficult to replicate it in other versions of Excel. There currently two known variants of XM.Register. </p>
<p>XM.Register makes the following changes: </p>
<p>ยท	Replaces author name with a random string of 15 characters. <br />
ยท	Saves files in the C:\Windows\Temp\ directory only as random file names of eight characters. <br />
ยท	Disables the Unhide&#8230; option on the Window menu. <br />
ยท	Inserts the file C:\MSOffice\Excel\XLOuvrir\Normal.xls to ensure that XM.Register runs on every Excel session. <br />
ยท	Every 30 seconds, XM.Register searches for infected active workbooks. If it finds an uninfected workbook, it attempts to infect it. </td>
</tr>
<tr>
<td>Threat Assessment</td>
<td>
<h4>Wild</h4>
<ul>
<li>
<strong>Wild Level: </strong>Low</li>
<li>
<strong>Number of Infections: </strong>0 &#8211; 49</li>
<li>
<strong>Number of Sites: </strong>0 &#8211; 2</li>
<li>
<strong>Geographical Distribution: </strong>Low</li>
<li>
<strong>Threat Containment: </strong>Easy</li>
<li>
<strong>Removal: </strong>Easy</li>
</ul>
<h4>Damage</h4>
<ul>
<li>
<strong>Damage Level: </strong>Low</li>
</ul>
<h4>Distribution</h4>
<ul>
<li>
<strong>Distribution Level: </strong>Low</li>
</ul>
<div>
<strong>Writeup By: </strong>Andre Post</div>
</div>
</td>
</tr>
<tr>
<td>Details</td>
<td><a href="http://www.symantec.com/business/security_response/writeup.jsp?docid=2000-121913-5249-99"  target="_blank">>XM.Register</a></td>
</tr>
</table>
 <span class="post2pdf_span" style="border: 1px solid gray; width: 160px; text-align: left; "><a href="http://www.ffbx.net/wp-content/plugins/post2pdf/generate.php?post=๕" rel="nofollow"><img src="http://www.ffbx.net/wp-content/plugins/post2pdf/icon/pdf.png" width="16px" height="16px" />convert this post to pdf.</a></span>
	Tags: <a href="http://www.ffbx.net/antivirus/macro" title="Macro" rel="tag">Macro</a>, <a href="http://www.ffbx.net/antivirus/virus" title="Virus" rel="tag">Virus</a><br />

	<h4>Related Virus</h4>
	<ul class="st-related-posts">
	<li><a href="http://www.ffbx.net/virus-en/spycrush.html" title="SpyCrush (December 11, 2007)">SpyCrush</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/adwarendotnet.html" title="Adware.NDotNet (December 6, 2007)">Adware.NDotNet</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/downloaderbbx.html" title="Downloader.BBX (December 9, 2007)">Downloader.BBX</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/w32beaglefnmm.html" title="W32.Beagle.FN@mm (December 16, 2007)">W32.Beagle.FN@mm</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/w32hllwcarpetc.html" title="W32.HLLW.Carpet.C (December 28, 2007)">W32.HLLW.Carpet.C</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/symbosdoomboota.html" title="SymbOS.Doomboot.A (December 11, 2007)">SymbOS.Doomboot.A</a> (0)</li>
</ul>

]]></content:encoded>
			<wfw:commentRss>http://www.ffbx.net/virus-en/xmregister.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>XM.Momac.A</title>
		<link>http://www.ffbx.net/virus-en/xmmomaca.html</link>
		<comments>http://www.ffbx.net/virus-en/xmmomaca.html#comments</comments>
		<pubDate>Fri, 01 Feb 2008 11:19:24 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Virus]]></category>
		<category><![CDATA[Macro]]></category>

		<guid isPermaLink="false">http://www.ffbx.net/virus-en/xmmomaca.html</guid>
		<description><![CDATA[Name XM.Momac.A Type Macro Affected Risk Level 1: Very Low Discovered February 13, 2002 Update February 13, 2007 12:29:17 PM Length Virus Info This is a very simple Excel macro virus that spreads from an infected workbook to all currently open workbooks. Threat Assessment Wild Wild Level: Low Number of Infections: 0 &#8211; 49 Number [...]]]></description>
			<content:encoded><![CDATA[<table>
<tr>
<td><strong>Name</strong></td>
<td>XM.Momac.A</td>
</tr>
<tr>
<td>Type</td>
<td><a href="http://www.ffbx.net/antivirus/macro" class="st_tag internal_tag" rel="tag" title="Posts tagged with Macro">Macro</a></td>
</tr>
<tr>
<td>Affected</td>
<td></td>
</tr>
<tr>
<td><strong>Risk</strong></td>
<td>Level 1: Very Low</td>
</tr>
<tr>
<td>Discovered</td>
<td>February 13, 2002</td>
</tr>
<tr>
<td>Update</td>
<td>February 13, 2007 12:29:17 PM</td>
</tr>
<tr>
<td>Length</td>
<td></td>
</tr>
<tr>
<td><a href="http://www.ffbx.net/antivirus/virus" class="st_tag internal_tag" rel="tag" title="Posts tagged with Virus">Virus</a> Info</td>
<td>This is a very simple Excel <a href="http://www.ffbx.net/antivirus/macro" class="st_tag internal_tag" rel="tag" title="Posts tagged with Macro">macro</a> <a href="http://www.ffbx.net/antivirus/virus" class="st_tag internal_tag" rel="tag" title="Posts tagged with Virus">virus</a> that spreads from an infected workbook to all currently open workbooks.</td>
</tr>
<tr>
<td>Threat Assessment</td>
<td>
<h4>Wild</h4>
<ul>
<li>
<strong>Wild Level: </strong>Low</li>
<li>
<strong>Number of Infections: </strong>0 &#8211; 49</li>
<li>
<strong>Number of Sites: </strong>0 &#8211; 2</li>
<li>
<strong>Geographical Distribution: </strong>Low</li>
<li>
<strong>Threat Containment: </strong>Easy</li>
<li>
<strong>Removal: </strong>Easy</li>
</ul>
<h4>Damage</h4>
<ul>
<li>
<strong>Damage Level: </strong>Low</li>
</ul>
<h4>Distribution</h4>
<ul>
<li>
<strong>Distribution Level: </strong>Low</li>
</ul>
<div>
<strong>Writeup By: </strong>Atli Gudmundsson</div>
</div>
</td>
</tr>
<tr>
<td>Details</td>
<td><a href="http://www.symantec.com/business/security_response/writeup.jsp?docid=2002-021319-3509-99"  target="_blank">>XM.Momac.A</a></td>
</tr>
</table>
 <span class="post2pdf_span" style="border: 1px solid gray; width: 160px; text-align: left; "><a href="http://www.ffbx.net/wp-content/plugins/post2pdf/generate.php?post=๔" rel="nofollow"><img src="http://www.ffbx.net/wp-content/plugins/post2pdf/icon/pdf.png" width="16px" height="16px" />convert this post to pdf.</a></span>
	Tags: <a href="http://www.ffbx.net/antivirus/macro" title="Macro" rel="tag">Macro</a>, <a href="http://www.ffbx.net/antivirus/virus" title="Virus" rel="tag">Virus</a><br />

	<h4>Related Virus</h4>
	<ul class="st-related-posts">
	<li><a href="http://www.ffbx.net/virus-en/backdoornodelm.html" title="Backdoor.Nodelm (December 8, 2007)">Backdoor.Nodelm</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/infostealerbancosw.html" title="Infostealer.Bancos.W (December 10, 2007)">Infostealer.Bancos.W</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/w32housaxirc.html" title="W32.Housax.Irc (January 4, 2008)">W32.Housax.Irc</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/vbssuconelo.html" title="VBS.Suconelo (December 15, 2007)">VBS.Suconelo</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/jsblinkam.html" title="JS.Blink.A@m (December 10, 2007)">JS.Blink.A@m</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/winxdefender.html" title="WinXDefender (January 22, 2008)">WinXDefender</a> (0)</li>
</ul>

]]></content:encoded>
			<wfw:commentRss>http://www.ffbx.net/virus-en/xmmomaca.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>XM.Laroux.UB</title>
		<link>http://www.ffbx.net/virus-en/xmlarouxub.html</link>
		<comments>http://www.ffbx.net/virus-en/xmlarouxub.html#comments</comments>
		<pubDate>Fri, 01 Feb 2008 11:17:43 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Virus]]></category>
		<category><![CDATA[Macro]]></category>

		<guid isPermaLink="false">http://www.ffbx.net/virus-en/xmlarouxub.html</guid>
		<description><![CDATA[Name XM.Laroux.UB Type Macro Affected Risk Level 1: Very Low Discovered June 22, 2002 Update February 13, 2007 12:32:45 PM Length Virus Info XM.Laroux.UB is a macro virus which spreads using Microsoft Excel. It infects under Excel 95, 97, 2000 and XP. This virus does nothing more than replicate. Threat Assessment Wild Wild Level: Low [...]]]></description>
			<content:encoded><![CDATA[<table>
<tr>
<td><strong>Name</strong></td>
<td>XM.Laroux.UB</td>
</tr>
<tr>
<td>Type</td>
<td><a href="http://www.ffbx.net/antivirus/macro" class="st_tag internal_tag" rel="tag" title="Posts tagged with Macro">Macro</a></td>
</tr>
<tr>
<td>Affected</td>
<td></td>
</tr>
<tr>
<td><strong>Risk</strong></td>
<td>Level 1: Very Low</td>
</tr>
<tr>
<td>Discovered</td>
<td>June 22, 2002</td>
</tr>
<tr>
<td>Update</td>
<td>February 13, 2007 12:32:45 PM</td>
</tr>
<tr>
<td>Length</td>
<td></td>
</tr>
<tr>
<td><a href="http://www.ffbx.net/antivirus/virus" class="st_tag internal_tag" rel="tag" title="Posts tagged with Virus">Virus</a> Info</td>
<td>XM.Laroux.UB is a <a href="http://www.ffbx.net/antivirus/macro" class="st_tag internal_tag" rel="tag" title="Posts tagged with Macro">macro</a> <a href="http://www.ffbx.net/antivirus/virus" class="st_tag internal_tag" rel="tag" title="Posts tagged with Virus">virus</a> which spreads using Microsoft Excel. It infects under Excel 95, 97, 2000 and XP.  This <a href="http://www.ffbx.net/antivirus/virus" class="st_tag internal_tag" rel="tag" title="Posts tagged with Virus">virus</a> does nothing more than replicate.</td>
</tr>
<tr>
<td>Threat Assessment</td>
<td>
<h4>Wild</h4>
<ul>
<li>
<strong>Wild Level: </strong>Low</li>
<li>
<strong>Number of Infections: </strong>0 &#8211; 49</li>
<li>
<strong>Number of Sites: </strong>0 &#8211; 2</li>
<li>
<strong>Geographical Distribution: </strong>Low</li>
<li>
<strong>Threat Containment: </strong>Easy</li>
<li>
<strong>Removal: </strong>Easy</li>
</ul>
<h4>Damage</h4>
<ul>
<li>
<strong>Damage Level: </strong>Low</li>
</ul>
<h4>Distribution</h4>
<ul>
<li>
<strong>Distribution Level: </strong>Low</li>
</ul>
<div>
<strong>Writeup By: </strong>Maryl Magee</div>
</div>
</td>
</tr>
<tr>
<td>Details</td>
<td><a href="http://www.symantec.com/business/security_response/writeup.jsp?docid=2002-062414-0353-99"  target="_blank">>XM.Laroux.UB</a></td>
</tr>
</table>
 <span class="post2pdf_span" style="border: 1px solid gray; width: 160px; text-align: left; "><a href="http://www.ffbx.net/wp-content/plugins/post2pdf/generate.php?post=๓" rel="nofollow"><img src="http://www.ffbx.net/wp-content/plugins/post2pdf/icon/pdf.png" width="16px" height="16px" />convert this post to pdf.</a></span>
	Tags: <a href="http://www.ffbx.net/antivirus/macro" title="Macro" rel="tag">Macro</a>, <a href="http://www.ffbx.net/antivirus/virus" title="Virus" rel="tag">Virus</a><br />

	<h4>Related Virus</h4>
	<ul class="st-related-posts">
	<li><a href="http://www.ffbx.net/virus-en/vbspasson.html" title="VBS.PassOn (December 15, 2007)">VBS.PassOn</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/w32sachya.html" title="W32.Sachy.A (January 16, 2008)">W32.Sachy.A</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/winscktrojan.html" title="Winsck.Trojan (January 22, 2008)">Winsck.Trojan</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/spywaresa_pcspyb.html" title="Spyware.Sa_PCSpy.b (December 11, 2007)">Spyware.Sa_PCSpy.b</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/trojanzlobb.html" title="Trojan.Zlob.B (December 12, 2007)">Trojan.Zlob.B</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/packedsecurityriskon.html" title="Packed.SecurityRiskOn (December 10, 2007)">Packed.SecurityRiskOn</a> (0)</li>
</ul>

]]></content:encoded>
			<wfw:commentRss>http://www.ffbx.net/virus-en/xmlarouxub.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>XM.Laroux.ST</title>
		<link>http://www.ffbx.net/virus-en/xmlarouxst.html</link>
		<comments>http://www.ffbx.net/virus-en/xmlarouxst.html#comments</comments>
		<pubDate>Fri, 01 Feb 2008 11:16:04 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Virus]]></category>
		<category><![CDATA[Macro]]></category>

		<guid isPermaLink="false">http://www.ffbx.net/virus-en/xmlarouxst.html</guid>
		<description><![CDATA[Name XM.Laroux.ST Type Virus, Macro Affected Risk Level 1: Very Low Discovered August 8, 2002 Update February 13, 2007 12:10:46 PM Length Virus Info This Microsoft Excel macro virus is a variant of XM.Laroux. It creates the file Personal.xls in the Excel Startup folder. It then uses this file to infect Excel spreadsheets. Threat Assessment [...]]]></description>
			<content:encoded><![CDATA[<table>
<tr>
<td><strong>Name</strong></td>
<td>XM.Laroux.ST</td>
</tr>
<tr>
<td>Type</td>
<td><a href="http://www.ffbx.net/antivirus/virus" class="st_tag internal_tag" rel="tag" title="Posts tagged with Virus">Virus</a>, <a href="http://www.ffbx.net/antivirus/macro" class="st_tag internal_tag" rel="tag" title="Posts tagged with Macro">Macro</a></td>
</tr>
<tr>
<td>Affected</td>
<td></td>
</tr>
<tr>
<td><strong>Risk</strong></td>
<td>Level 1: Very Low</td>
</tr>
<tr>
<td>Discovered</td>
<td>August 8, 2002</td>
</tr>
<tr>
<td>Update</td>
<td>February 13, 2007 12:10:46 PM</td>
</tr>
<tr>
<td>Length</td>
<td></td>
</tr>
<tr>
<td><a href="http://www.ffbx.net/antivirus/virus" class="st_tag internal_tag" rel="tag" title="Posts tagged with Virus">Virus</a> Info</td>
<td>
<p>This Microsoft Excel <a href="http://www.ffbx.net/antivirus/macro" class="st_tag internal_tag" rel="tag" title="Posts tagged with Macro">macro</a> <a href="http://www.ffbx.net/antivirus/virus" class="st_tag internal_tag" rel="tag" title="Posts tagged with Virus">virus</a> is a variant of <font color="#0000FF">XM.Laroux</font>. It creates the file Personal.xls in the Excel Startup folder. It then uses this file to infect Excel spreadsheets.</p>
</td>
</tr>
<tr>
<td>Threat Assessment</td>
<td>
<h4>Wild</h4>
<ul>
<li>
<strong>Wild Level: </strong>Low</li>
<li>
<strong>Number of Infections: </strong>0 &#8211; 49</li>
<li>
<strong>Number of Sites: </strong>0 &#8211; 2</li>
<li>
<strong>Geographical Distribution: </strong>Low</li>
<li>
<strong>Threat Containment: </strong>Easy</li>
<li>
<strong>Removal: </strong>Easy</li>
</ul>
<h4>Damage</h4>
<ul>
<li>
<strong>Damage Level: </strong>Low</li>
</ul>
<h4>Distribution</h4>
<ul>
<li>
<strong>Distribution Level: </strong>Low</li>
</ul>
<div>
<strong>Writeup By: </strong>Gor Nazaryan</div>
</div>
</td>
</tr>
<tr>
<td>Details</td>
<td><a href="http://www.symantec.com/business/security_response/writeup.jsp?docid=2002-080819-1102-99"  target="_blank">>XM.Laroux.ST</a></td>
</tr>
</table>
 <span class="post2pdf_span" style="border: 1px solid gray; width: 160px; text-align: left; "><a href="http://www.ffbx.net/wp-content/plugins/post2pdf/generate.php?post=๒" rel="nofollow"><img src="http://www.ffbx.net/wp-content/plugins/post2pdf/icon/pdf.png" width="16px" height="16px" />convert this post to pdf.</a></span>
	Tags: <a href="http://www.ffbx.net/antivirus/macro" title="Macro" rel="tag">Macro</a>, <a href="http://www.ffbx.net/antivirus/virus" title="Virus" rel="tag">Virus</a><br />

	<h4>Related Virus</h4>
	<ul class="st-related-posts">
	<li><a href="http://www.ffbx.net/virus-en/trojanmercurycasa.html" title="Trojan.Mercurycas.A (December 12, 2007)">Trojan.Mercurycas.A</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/vacsinatp-05a.html" title="Vacsina.TP-05.A (December 12, 2007)">Vacsina.TP-05.A</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/adwareseekseekb.html" title="Adware.SeekSeek.B (December 6, 2007)">Adware.SeekSeek.B</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/titanshield.html" title="TitanShield (December 11, 2007)">TitanShield</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/backdoorgraybirdm.html" title="Backdoor.Graybird.M (December 8, 2007)">Backdoor.Graybird.M</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/securemypcpcscanner.html" title="SecureMyPcPCScanner (December 10, 2007)">SecureMyPcPCScanner</a> (0)</li>
</ul>

]]></content:encoded>
			<wfw:commentRss>http://www.ffbx.net/virus-en/xmlarouxst.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>XM.Laroux.HJ</title>
		<link>http://www.ffbx.net/virus-en/xmlarouxhj.html</link>
		<comments>http://www.ffbx.net/virus-en/xmlarouxhj.html#comments</comments>
		<pubDate>Fri, 01 Feb 2008 11:14:24 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Virus]]></category>
		<category><![CDATA[Macro]]></category>

		<guid isPermaLink="false">http://www.ffbx.net/virus-en/xmlarouxhj.html</guid>
		<description><![CDATA[Name XM.Laroux.HJ Type Virus, Macro Affected Risk Level 1: Very Low Discovered January 21, 1999 Update February 13, 2007 12:37:41 PM Length Virus Info This Microsoft Excel macro virus is a variant of XM.Laroux. It creates the file Bayantel.xls in the Excel startup folder. It then will use this file to infect Excel spreadsheets. Threat [...]]]></description>
			<content:encoded><![CDATA[<table>
<tr>
<td><strong>Name</strong></td>
<td>XM.Laroux.HJ</td>
</tr>
<tr>
<td>Type</td>
<td><a href="http://www.ffbx.net/antivirus/virus" class="st_tag internal_tag" rel="tag" title="Posts tagged with Virus">Virus</a>, <a href="http://www.ffbx.net/antivirus/macro" class="st_tag internal_tag" rel="tag" title="Posts tagged with Macro">Macro</a></td>
</tr>
<tr>
<td>Affected</td>
<td></td>
</tr>
<tr>
<td><strong>Risk</strong></td>
<td>Level 1: Very Low</td>
</tr>
<tr>
<td>Discovered</td>
<td>January 21, 1999</td>
</tr>
<tr>
<td>Update</td>
<td>February 13, 2007 12:37:41 PM</td>
</tr>
<tr>
<td>Length</td>
<td></td>
</tr>
<tr>
<td><a href="http://www.ffbx.net/antivirus/virus" class="st_tag internal_tag" rel="tag" title="Posts tagged with Virus">Virus</a> Info</td>
<td>
<p>This Microsoft Excel <a href="http://www.ffbx.net/antivirus/macro" class="st_tag internal_tag" rel="tag" title="Posts tagged with Macro">macro</a> <a href="http://www.ffbx.net/antivirus/virus" class="st_tag internal_tag" rel="tag" title="Posts tagged with Virus">virus</a> is a variant of XM.Laroux. It creates the file Bayantel.xls in the Excel startup folder. It then will use this file to infect Excel spreadsheets.</td>
</tr>
<tr>
<td>Threat Assessment</td>
<td>
<h4>Wild</h4>
<ul>
<li>
<strong>Wild Level: </strong>Low</li>
<li>
<strong>Number of Infections: </strong>0 &#8211; 49</li>
<li>
<strong>Number of Sites: </strong>0 &#8211; 2</li>
<li>
<strong>Geographical Distribution: </strong>Low</li>
<li>
<strong>Threat Containment: </strong>Easy</li>
<li>
<strong>Removal: </strong>Easy</li>
</ul>
<h4>Damage</h4>
<ul>
<li>
<strong>Damage Level: </strong>Low</li>
</ul>
<h4>Distribution</h4>
<ul>
<li>
<strong>Distribution Level: </strong>Low</li>
</ul>
<div>
<strong>Writeup By: </strong>Gor Nazaryan</div>
</div>
</td>
</tr>
<tr>
<td>Details</td>
<td><a href="http://www.symantec.com/business/security_response/writeup.jsp?docid=2001-091414-0649-99"  target="_blank">>XM.Laroux.HJ</a></td>
</tr>
</table>
 <span class="post2pdf_span" style="border: 1px solid gray; width: 160px; text-align: left; "><a href="http://www.ffbx.net/wp-content/plugins/post2pdf/generate.php?post=๑" rel="nofollow"><img src="http://www.ffbx.net/wp-content/plugins/post2pdf/icon/pdf.png" width="16px" height="16px" />convert this post to pdf.</a></span>
	Tags: <a href="http://www.ffbx.net/antivirus/macro" title="Macro" rel="tag">Macro</a>, <a href="http://www.ffbx.net/antivirus/virus" title="Virus" rel="tag">Virus</a><br />

	<h4>Related Virus</h4>
	<ul class="st-related-posts">
	<li><a href="http://www.ffbx.net/virus-en/vbspaspecmm.html" title="VBS.Paspec@mm (December 15, 2007)">VBS.Paspec@mm</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/w32weakling.html" title="W32.Weakling (January 21, 2008)">W32.Weakling</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/spywarecmkeylogger.html" title="Spyware.CMKeyLogger (December 11, 2007)">Spyware.CMKeyLogger</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/adwarepopuppers.html" title="Adware.Popuppers (December 6, 2007)">Adware.Popuppers</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/jsffsniff.html" title="JS.Ffsniff (December 10, 2007)">JS.Ffsniff</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/trojanvundo-removal-tool.html" title="Trojan.Vundo Removal Tool (December 12, 2007)">Trojan.Vundo Removal Tool</a> (0)</li>
</ul>

]]></content:encoded>
			<wfw:commentRss>http://www.ffbx.net/virus-en/xmlarouxhj.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>XM.Laroux.BP</title>
		<link>http://www.ffbx.net/virus-en/xmlarouxbp.html</link>
		<comments>http://www.ffbx.net/virus-en/xmlarouxbp.html#comments</comments>
		<pubDate>Fri, 01 Feb 2008 11:12:44 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Virus]]></category>
		<category><![CDATA[Macro]]></category>

		<guid isPermaLink="false">http://www.ffbx.net/virus-en/xmlarouxbp.html</guid>
		<description><![CDATA[Name XM.Laroux.BP Type Macro Affected Macintosh, Windows 95, Windows 98 Risk Level 1: Very Low Discovered February 11, 1998 Update February 13, 2007 12:46:48 PM Length Virus Info This is a variant of XM.Laroux.A. Threat Assessment Wild Wild Level: Low Number of Infections: 0 &#8211; 49 Number of Sites: 0 &#8211; 2 Geographical Distribution: Low [...]]]></description>
			<content:encoded><![CDATA[<table>
<tr>
<td><strong>Name</strong></td>
<td>XM.Laroux.BP</td>
</tr>
<tr>
<td>Type</td>
<td><a href="http://www.ffbx.net/antivirus/macro" class="st_tag internal_tag" rel="tag" title="Posts tagged with Macro">Macro</a></td>
</tr>
<tr>
<td>Affected</td>
<td>Macintosh, Windows 95, Windows 98</td>
</tr>
<tr>
<td><strong>Risk</strong></td>
<td>Level 1: Very Low</td>
</tr>
<tr>
<td>Discovered</td>
<td>February 11, 1998</td>
</tr>
<tr>
<td>Update</td>
<td>February 13, 2007 12:46:48 PM</td>
</tr>
<tr>
<td>Length</td>
<td></td>
</tr>
<tr>
<td><a href="http://www.ffbx.net/antivirus/virus" class="st_tag internal_tag" rel="tag" title="Posts tagged with Virus">Virus</a> Info</td>
<td>This is a variant of XM.Laroux.A.</td>
</tr>
<tr>
<td>Threat Assessment</td>
<td>
<h4>Wild</h4>
<ul>
<li>
<strong>Wild Level: </strong>Low</li>
<li>
<strong>Number of Infections: </strong>0 &#8211; 49</li>
<li>
<strong>Number of Sites: </strong>0 &#8211; 2</li>
<li>
<strong>Geographical Distribution: </strong>Low</li>
<li>
<strong>Threat Containment: </strong>Easy</li>
<li>
<strong>Removal: </strong>Easy</li>
</ul>
<h4>Damage</h4>
<ul>
<li>
<strong>Damage Level: </strong>Low</li>
</ul>
<h4>Distribution</h4>
<ul>
<li>
<strong>Distribution Level: </strong>Low</li>
</ul>
</div>
</td>
</tr>
<tr>
<td>Details</td>
<td><a href="http://www.symantec.com/business/security_response/writeup.jsp?docid=2000-121812-1419-99"  target="_blank">>XM.Laroux.BP</a></td>
</tr>
</table>
 <span class="post2pdf_span" style="border: 1px solid gray; width: 160px; text-align: left; "><a href="http://www.ffbx.net/wp-content/plugins/post2pdf/generate.php?post=๐" rel="nofollow"><img src="http://www.ffbx.net/wp-content/plugins/post2pdf/icon/pdf.png" width="16px" height="16px" />convert this post to pdf.</a></span>
	Tags: <a href="http://www.ffbx.net/antivirus/macro" title="Macro" rel="tag">Macro</a>, <a href="http://www.ffbx.net/antivirus/virus" title="Virus" rel="tag">Virus</a><br />

	<h4>Related Virus</h4>
	<ul class="st-related-posts">
	<li><a href="http://www.ffbx.net/virus-en/norman-virus-hoax.html" title="Norman Virus Hoax (December 10, 2007)">Norman Virus Hoax</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/boot-437a.html" title="Boot-437.A (December 9, 2007)">Boot-437.A</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/vbsscafenemm.html" title="VBS.Scafene@mm (December 15, 2007)">VBS.Scafene@mm</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/w32cycle.html" title="W32.Cycle (December 16, 2007)">W32.Cycle</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/backdoornettrojan.html" title="Backdoor.NetTrojan (December 8, 2007)">Backdoor.NetTrojan</a> (0)</li>
	<li><a href="http://www.ffbx.net/virus-en/trojanmdropperv.html" title="Trojan.Mdropper.V (December 12, 2007)">Trojan.Mdropper.V</a> (0)</li>
</ul>

]]></content:encoded>
			<wfw:commentRss>http://www.ffbx.net/virus-en/xmlarouxbp.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
