W97M/Ethan.AK

Analysis

• Virus consists of one macro module within the class storage
  
• Virus hooks Word event handler which prevents the closing of infected documents