Welcome to the Virus Encyclopedia of Panda Security.
|Alias:||Calígula, Spooky, HSFX|
It creates a log file with all the infections carried out in the infected computer. Then, it sends this file out via FTP.
|Detection updated on:||Nov. 13, 2002|
Marker.D is a macro virus that infects Word global template (NORMAL.DOT file) and all the documents generated with it. By doing so, it will infect all the documents that the user opens, closes, saves, etc.
In addition, Marker.D uses stealth techniques, such as disabling the dialog box that prompts the user to enable or disable the macros that the document contains. By doing so, Marker.D prevents the user from disabling the macros used by the virus to carry out its infections.
Marker.D is a polymorphic virus that creates a log file with all the infections carried out in the computer. Then, Marker.D sends this log file out via FTP to an external server.
Marker.D is difficult to recognize, as it does not display any messages or warnings that indicate it has reached the computer.
However, a clear indication that Marker.D has infected those documents containing macros, is that the warning messages that allow Word documents to be opened without enabling their macros, are disabled.