Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically

W97M/Marker.Q

W97M/Marker.Q is a macro virus operating in the Microsoft Word 97 environment. It uses the "class" method of infection – it attacks the module "ThisDocument" which is present as a standard in each Word document or template. It attacks the global template normal.dot and Word documents. It is derived from the virus W97M/Marker.A
Unlike the W97M/Marker.A this variant uses for identification of an infected document the constant ID with the value "xyzzy". In a similar way as the virus W97M/Ethan.A does, it changes headline in the document properties to “Ethan Frome“, the document author to “EW/LN/CB“ and key words to “Ethan“. The window with the document properties then looks as follows:

After that the virus attacks the global template and the active document. It attacks documents while closing files.

© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.