Selected viruses, spyware, and other threats: sorted alphabetically

W97M/Marker.D is a macro virus operating in the Microsoft Word 97 environment. It uses the "class" method of infection – it attacks the module "ThisDocument" which is present as a standard in each Word document or template. It attacks the global template normal.dot and Word documents. It is derived from the virus W97M/Marker.A.
Unlike the W97M/Marker.A this variant uses for identification of an infected document the constant x15 with the value ":-D you are marked!". On July 23rd it changes text in the heading of the Word window to "Happy Birthday Shankar-25th July.The World may Forget but not me". After that it displays the following window:

Depending on the button on which the user clicks the virus displays more windows. If the user clicks the button "Yes" W97M/Marker.O displays the following notice:

Upon clicking the button "No" the following window is displayed:

Then the virus attacks the global template and the active document. It attacks documents when they are opened, created and closed.

© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.