Discussion in 'malware problems & news' started by FanJ, Apr 12, 2002.

Thread Status:
Not open for further replies.
  1. FanJ

    FanJ Guest

    Name: WM97/Marker-KS
    Type: Word 97 macro virus
    Date: 12 April 2002

    At the time of writing Sophos has received just one report of
    this virus from the wild.


    WM97/Marker-KS is a corrupt but viable variant of WM97/Marker-C.

    Whenever an infected document is closed, the virus attempts to
    FTP user information from Word to the Codebreakers site and
    appends this information to the bottom of the macro as comments.

    Read the analysis at
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.