Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically

W97M/Marker.O

W97M/Marker.D is a macro virus operating in the Microsoft Word 97 environment. It uses the "class" method of infection – it attacks the module "ThisDocument" which is present as a standard in each Word document or template. It attacks the global template normal.dot and Word documents. It is derived from the virus W97M/Marker.A.
Unlike the W97M/Marker.A this variant uses for identification of an infected document the constant x15 with the value ":-D you are marked!". On July 23rd it changes text in the heading of the Word window to "Happy Birthday Shankar-25th July.The World may Forget but not me". After that it displays the following window:

Depending on the button on which the user clicks the virus displays more windows. If the user clicks the button "Yes" W97M/Marker.O displays the following notice:

Upon clicking the button "No" the following window is displayed:

Then the virus attacks the global template and the active document. It attacks documents when they are opened, created and closed.