Feb 01

XM.Register

By admin
Add comments
Virus
 
8 views
Name XM.Register
Type
Affected
Risk Level 1: Very Low
Discovered August 30, 2000
Update February 13, 2007 12:46:50 PM
Length
Info XM.Register is designed to work with the French version of Microsoft Excel. It is difficult to replicate it in other versions of Excel. There currently two known variants of XM.Register.

XM.Register makes the following changes:

· Replaces author name with a random string of 15 characters.
· Saves files in the C:\Windows\Temp\ directory only as random file names of eight characters.
· Disables the Unhide… option on the Window menu.
· Inserts the file C:\MSOffice\Excel\XLOuvrir\Normal.xls to ensure that XM.Register runs on every Excel session.
· Every 30 seconds, XM.Register searches for infected active workbooks. If it finds an uninfected workbook, it attempts to infect it.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 – 49
  • Number of Sites: 0 – 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy

Damage

  • Damage Level: Low

Distribution

  • Distribution Level: Low
Writeup By: Andre Post
Details >XM.Register
convert this post to pdf. Tags: ,

Related Virus

"Free Scan XM.Register

Print This Virus article Print This Virus article

This entry was posted on Friday, February 1st, 2008 at 4:21 am and is filed under Virus. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

Leave a Comment

You must be logged in to post a comment.