-----------------------------
Virus Name
Elfbowl

Date Added
12/7/99

Virus Characteristics
This is a forwarded email hoax that mentions a trojan payload for Christmas holiday however these details are unfounded in actual analysis of the file mentioned in the email message. Below is a copy of the email hoax message-

-------------------------------------
Subject: FW: VIRUS ALERT!!!!
I have just received this - better safe than sorry......
TO ALL
IF YOU HAVE RECEIVED ANY OF THESE GAMES=
FROGAPULT.EXE ELFBOWL.EXE
(FROG GAME) & (ELF BOWLING GAME)
PLEASE CAN YOU DELETE THEM COMPLETELY OUT OF YOUR SYSTEM AS THEY BOTH HAVE A DELAYED VIRUS ATTACHED TO THEM THAT WILL BE ACTIVATED ON CHRISTMAS DAY AND WILL WIPE OUT YOUR SYSTEM. LET EVERYONE KNOW OF THIS.
THANKS
-------------------------------------

Do not forward to others. AVERT has received copies of a file "ElfBowl" and checked the developer web site for details, here is a copy of the hoax confirmation web link: http://www.nstorm.com/virushoax.html

--------------------------------------------------------------------------------

Indications Of Infection
Not Available...

Method Of Infection
Not Available...

Removal Instructions
Ignore or delete this email and do not forward to others.

Virus Information
Discovery Date: 12/1/98
Type: Hoax
SubType: E-mail
Risk Assessment: low

Risk Justification
Not available

Variants
Unknown

Aliases
Elf Bowling, Elfbowl, Frogapult

Minimum Dat
Unknown

Minimum Engine
Unknown