Computing.Net > Forums > Security and Virus > Virus Found W97M/Ethan!

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Virus Found W97M/Ethan!

Reply to Message Icon

Name: Kevin
Date: December 3, 2003 at 06:40:00 Pacific
OS: Windows XP
CPU/Ram: 256
Comment:

OK AVG has found 5 cases of this virus embedded in Microsoft word documents which were transferred from another machine on the network for printing to my machine.

The good thing is, it has FOUND them as viruses the SILLY thing is AVG Anti-Virus 7.0 doesn't have a clue whether to quarantine them in the virus vault instead simply ignores them and lets them roam. I searched through all the options even tried to delete them from AVG menu, it refuses to delete. In the end I deleted all 5 manually after browsing to the folder. Should I correct anything else in addition, as the Symantec website says "This MS Word 97 macro virus inserts its viral code to the beginning of "ThisDocument" VBA module. "ThisDocument" is a default module in MS Word 97 template that is not listed in Tools-Macro macro list".

I thought Anti-virus software were supposed to quarantine them immediately after viruses are detected, LOL @ AVG.

The W97M/Ethan virus link: -
http://www.symantec.com/avcenter/venc/data/w97m.ethan.a.html

Also says: "While infecting a document or global template, this macro virus uses a temporary text file "C:\ETHAN.___" The virus marks this temporary text file as hidden-system file".

Argh! can't find that one either. Any suggestions guys?

Thanks in advance.



Sponsored Link
Ads by Google

Response Number 1
Name: iceblue
Date: December 3, 2003 at 14:23:22 Pacific
Reply:

AV Online scans: > quick and simple process

RAV
http://clk.about.com/?zi=1/XJ&sdn=antivirus&zu=http%3A%2F%2Fwww.ravantivirus.com%2Fscan%2F

House Call
http://housecall.trendmicro.com/housecall/start_corp.asp

Panda Active Scan
http://www.pandasoftware.com/activescan/

A multiple layered approach is often helpful.
Some viruses disable parts of AV software.


0
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Virus Found W97M/Ethan!

Virus found on NYB www.computing.net/answers/security/virus-found-on-nyb/6608.html

Virus found Proxy, help me. www.computing.net/answers/security/virus-found-proxy-help-me/21175.html

viruses found but can't remove them www.computing.net/answers/security/viruses-found-but-cant-remove-them/2495.html