We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Virus:W97M/Ethan.H
Detected by Microsoft Defender Antivirus
Aliases: W97M/Ethan.a (CA) Virus.MSWord.Ethan (Kaspersky) W97M/Ethan.a (McAfee) W97M.Ethan.DX (Symantec) W97M_ETHAN.A (Trend Micro)
Summary
W97M/Ethan.H is a macro virus that infects Word documents and templates. The virus resides in the module ThisDocument in the function Document_Close.