Netskope Threat Labs

Laroux

ATP Sandbox Adv. HeuristicsAV

Laroux is a macro virus that infects Microsoft Excel spreadsheets and was one of the first Excel specific viruses when it appeared in 1995. It copies its macro payload into open workbooks and the startup template, so infections spread as users exchange files, and its simple design made it remarkably durable. Modern detections of the family usually indicate legacy documents rather than active campaigns, but it remains a textbook example of macro virus behavior.

First seen
January 2022
Last seen
October 2026
LAROUX
Alert Name
Document-Excel.Trojan.Laroux
Document-Excel.Virus.Laroux
Email-MSG.Virus.Laroux
Script-Macro.Virus.Laroux
Script-WScript.Trojan.Laroux
Script-WScript.Virus.Laroux
Win32.Virus.Laroux
X97M.Laroux.AR
X97M.Laroux.AT
X97M.Laroux.B