WM97/Marker-KS

Name: WM97/Marker-KS
Type: Word 97 macro virus
Date: 12 April 2002

At the time of writing Sophos has received just one report of
this virus from the wild.

Description:

WM97/Marker-KS is a corrupt but viable variant of WM97/Marker-C.

Whenever an infected document is closed, the virus attempts to
FTP user information from Word to the Codebreakers site and
appends this information to the bottom of the macro as comments.

Read the analysis at
http://www.sophos.com/virusinfo/analyses/wm97markerks.html