A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z | Encyclopedia Home
Elf Bowling
Ethan
If you are unable to find a description for a particular virus, please contact me or post a message in the forum.
Type: Hoax
This is a hoax. Consult the Hoax Encyclopedia for information on this and other virus hoaxes.
Aliases: W97M.Ethan
Type: Macro virus
Systems Affected: Windows systems running Microsoft® Word
Payload: Modifies document properties to (title) "Ethan Frome", (author) "EW/LN/CB" and (company) "Foo Bar Industries Inc.".
ITW: Yes
Origin: Northern Europe
Description: Ethan is a common in-the-wild macro virus. Other than modifying the document properties as noted above, it looks for the presence of the Class macro virus. If discovered, it deletes the class.sys file this virus uses to replicate. Several variants of Ethan exist. F-Secure maintains full descriptions for most of these variants.
What to look for:
How to prevent it:
Aliases:
Type:
Systems Affected:
Payload:
ITW:
Origin:
Description:
What to look for:
How to prevent it:
Aliases:
Type:
Systems Affected:
Payload:
ITW:
Origin:
Description:
What to look for:
How to prevent it:
