WM97/Marker-KG

Discussion in 'malware problems & news' started by FanJ, Apr 24, 2002.

Thread Status:
Not open for further replies.
  1. FanJ

    FanJ Guest

    Name: WM97/Marker-KG
    Type: Office 97 macro virus
    Date: 24 April 2002

    At the time of writing Sophos has received just one report of
    this virus from the wild.

    Description:

    WM97/Marker-KG is a corrupted but viable variant of
    WM97/Marker-C.

    Whenever a document is closed, the virus attempts to FTP user
    information from Word to the Codebreakers site and appends this
    information to the bottom of the macro as comments.


    Read the analysis at
    http://www.sophos.com/virusinfo/analyses/wm97markerkg.html
     
Thread Status:
Not open for further replies.