WM97/Marker-KS

Discussion in 'malware problems & news' started by FanJ, Apr 12, 2002.

Thread Status:
Not open for further replies.
  1. FanJ

    FanJ Guest

    Name: WM97/Marker-KS
    Type: Word 97 macro virus
    Date: 12 April 2002

    At the time of writing Sophos has received just one report of
    this virus from the wild.

    Description:

    WM97/Marker-KS is a corrupt but viable variant of WM97/Marker-C.

    Whenever an infected document is closed, the virus attempts to
    FTP user information from Word to the Codebreakers site and
    appends this information to the bottom of the macro as comments.

    Read the analysis at
    http://www.sophos.com/virusinfo/analyses/wm97markerks.html
     
Thread Status:
Not open for further replies.