|
W97M.Ethan Virus
Ethan is a Word macro virus that replicates in Word 97, infecting Word's NORMAL.DOT documents and template. Ethan also checks for W97M/Class virus infections, deleting that virus' class.sys file replication mechanism.
The virus replicates by generating a file named "c:\ethan.___". Randomly activated, the virus may change a document's properties on open, making the following changes:
- Document title changes to "Ethan Frome"
- Author changes to "EW/LN/CB".
- Company changes to "Foo Bar Industries, Inc."
Home
|
1061 East Indiantown Road · Suite 500
Jupiter · FL 33477
USA
|
|