Aliases: X97M/DownldExe.A (Command) X97M.DownLoader.3 (Dr.Web) VBA/TrojanDownloader.Agent.DZ (ESET) W97M/Agent.KXRS!tr.dldr (Fortinet) TROJ_XLSDROP.WJ (Trend Micro)
Windows Defender detects and removes this threat.
This threat is a malicious macro that can download and run files on your PC. It runs when you open an infected Microsoft Office file.
We have seen it embedded in a Microsoft Excel spreadsheet or Word file that is attached to a spam email.
Use the following free Microsoft software to detect and remove this threat:
You should also run a full scan. A full scan might find hidden malware.
Prevent malware infections from spam emails
- For enterprise users:
- Follow the appropriate Exchange Online Protection instructions to suit your business needs.
- Learn about how Office 365 can help you block spam using machine learning. See First look at Advanced Threat Protection: new tools to stop unknown malware & phishing attacks for details.
- Be aware of the dangers in opening suspicious emails. Don't open email attachments or links from untrusted sources.
- The Microsoft SmartScreen filter can also help detect spam. It’s built-in and enabled by default in Microsoft email programs.
- Submit spam and non-spam messages to Microsoft for analysis.
Get more help
If you’re using Windows XP, see our Windows XP end of support page.