x
48h OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
SPECIAL OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
HALLOWEEN OFFER
take advantage of our
terrific discounts
BUY NOW AND GET A 50% OFF
x
CHRISTMAS OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 40% OFF
x
SPECIAL OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 50% OFF
x
BLACKFRIDAY OFFER
Buy the best antivirus
at the best price
TODAY ONLY UP TO 70% OFF
x
CYBERMONDAY OFFER
Buy the best antivirus
at the best price
(Only for homeusers)
TODAY ONLY UP TO 70% OFF
Active Scan. Scan your PC free
Panda Protection

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

Encyclopedia GetVirusCard True 0

W97M/Marker.{O,AK}

 
Threat LevelModerate threatDamageHighDistributionNot widespread
Common name:W97M/Marker.{O,AK}
Technical name:W97M/Marker.{O,AK}
Threat level:Low
Alias:W97M/Marker.O
Type:Virus
Effects:  

It carries out damaging actions on the affected computer.

It infects Word's global template and documents.

Affected platforms:

Windows 2003/XP/2000/NT/ME/98/95

Detection updated on:Feb. 2, 2007
StatisticsNo
Family:MARKER

Brief Description 

    

Marker.{O,AK} infects Word documents (files with a DOC extension) and Word's global template (file NORMAL.DOT).

The virus displays several windows asking the user about the its author's birthday.

Marker.{O,AK} contains three macros that are enabled when a new document is either opened, closed or created.

Visible Symptoms 

    

Marker.{O,AK} is difficult ot recognize, as it foed not display any messages or warnings that indicate it has reached the computer.

However, when a document is closed and the system date matches July 23 or later, Marker.{O,AK}, displays the dialog box below:



If users answer affirmatively, W97M/Marker.{O,AK} displays another dialog as can be seen below:



If the answer is NO the virus displays a disapproval message and it changes the properties of infected documents as follows:

  • File name: Are You suprised.DOC

  • Properties tab:

    Title: Are You suprised ?
    Subject: Birthday
    Author: LSK
    Keywords: Birthday
    Comments: Shankar's Birthday falls on 25th July. Don't Forget to wish him


If users create a new document and W97M/Marker.{O,AK} detects that the system date stamp is July 23 or later, it changes the font type and color. In addition, it creates an animation. Then it writes a sentence on the screen as can be seen below: