Summary

Summary
Action
More Information
| Detected by | All Sophos products |
|---|---|
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action

Summary
Action
More Information
Please follow the instructions for disinfecting macro viruses.
More Information
WM97/Marker-A is a Word macro virus. The virus keeps a log of user addresses and machines names as comments at the bottom of the macro, which is updated on each new infection.
Many variants of WM97/Marker-A have a payload similar to WM97/Marker-C. As well as logging infections at the bottom of the macro, they FTP the user information to the Codebreakers hacking website.
Some variants of WM97/Marker-A do not FTP the information but instead have a payload similar to WM97/Ethan.
