WM97/Marker-KG

Name: WM97/Marker-KG
Type: Office 97 macro virus
Date: 24 April 2002

At the time of writing Sophos has received just one report of
this virus from the wild.

Description:

WM97/Marker-KG is a corrupted but viable variant of
WM97/Marker-C.

Whenever a document is closed, the virus attempts to FTP user
information from Word to the Codebreakers site and appends this
information to the bottom of the macro as comments.


Read the analysis at
http://www.sophos.com/virusinfo/analyses/wm97markerkg.html