Content
Elfbowl
- Type
- Hoax
- SubType
- Discovery Date
- 12/01/1998
- Length
- Minimum DAT
- N/A ( )
- Updated DAT
- N/A ( )
- Minimum Engine
- 5.1.00
- Description Added
- 12/07/1999
- Description Modified
- 12/07/1999 12:00 AM (PT)
Tab Navigation
Characteristics
This is a forwarded email hoax that mentions a trojan payload for Christmas holiday however these details are unfounded in actual analysis of the file mentioned in the email message. Below is a copy of the email hoax message-
-------------------------------------
Subject: FW: VIRUS ALERT!!!!
I have just received this - better safe than sorry......
TO ALL
IF YOU HAVE RECEIVED ANY OF THESE GAMES=
FROGAPULT.EXE ELFBOWL.EXE
(FROG GAME) & (ELF BOWLING GAME)
PLEASE CAN YOU DELETE THEM COMPLETELY OUT OF YOUR SYSTEM AS THEY BOTH HAVE A DELAYED VIRUS ATTACHED TO THEM THAT WILL BE ACTIVATED ON CHRISTMAS DAY AND WILL WIPE OUT YOUR SYSTEM. LET EVERYONE KNOW OF THIS.
THANKS
-------------------------------------
Do not forward to others. AVERT has received copies of a file "ElfBowl" and checked the developer web site for details, here is a copy of the hoax confirmation web link: http://www.nstorm.com/virushoax.html
Symptoms
Method of Infection
Removal
Ignore or delete this email and do not forward it to others.
Variants
Variants
N/A
All Information
Overview -
Aliases
- Bowl
- Elf Bowling
- Elfbowl
- Frogapult
Characteristics
Characteristics -
This is a forwarded email hoax that mentions a trojan payload for Christmas holiday however these details are unfounded in actual analysis of the file mentioned in the email message. Below is a copy of the email hoax message-
-------------------------------------
Subject: FW: VIRUS ALERT!!!!
I have just received this - better safe than sorry......
TO ALL
IF YOU HAVE RECEIVED ANY OF THESE GAMES=
FROGAPULT.EXE ELFBOWL.EXE
(FROG GAME) & (ELF BOWLING GAME)
PLEASE CAN YOU DELETE THEM COMPLETELY OUT OF YOUR SYSTEM AS THEY BOTH HAVE A DELAYED VIRUS ATTACHED TO THEM THAT WILL BE ACTIVATED ON CHRISTMAS DAY AND WILL WIPE OUT YOUR SYSTEM. LET EVERYONE KNOW OF THIS.
THANKS
-------------------------------------
Do not forward to others. AVERT has received copies of a file "ElfBowl" and checked the developer web site for details, here is a copy of the hoax confirmation web link: http://www.nstorm.com/virushoax.html
Symptoms
Symptoms -
Method of Infection
Method of Infection -
Removal -
Removal -
Ignore or delete this email and do not forward it to others.
Variants
Variants -
N/A
