x
48h OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
SPECIAL OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
HALLOWEEN OFFER
take advantage of our
terrific discounts
BUY NOW AND GET A 50% OFF
x
CHRISTMAS OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 40% OFF
x
SPECIAL OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 50% OFF
x
BLACKFRIDAY OFFER
Buy the best antivirus
at the best price
TODAY ONLY UP TO 70% OFF
x
CYBERMONDAY OFFER
Buy the best antivirus
at the best price
(Only for homeusers)
TODAY ONLY UP TO 70% OFF
Active Scan. Scan your PC free
Panda Protection

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

Encyclopedia GetVirusCard True 0

Marker.AE

 
Threat LevelModerate threatDamageHighDistributionNot widespread
Common name:Marker.AE
Technical name:W97M/Marker.AE
Threat level:Low
Type:Virus
Effects:  It infects Microsoft Word 97 documents and the NORMAL.DOT template and it displays messages on screen.

Affected platforms:

Windows 2003/XP/2000/NT/ME/98/95

Detection updated on:Nov. 13, 2002
StatisticsNo
Family:VALENTIN

Brief Description 

    

Marker.AE is a macro virus that infects Word 97 documents and the global template (NORMAL.DOT file) used by this application. In order to do this, it uses the typical stealth techniques of macro viruses. These include disabling the macro antivirus protection (the warning will not be displayed when opening documents that contain macros).

Marker.AE displays a series of windows asking the user about the virus author’s birthday. If the user has a negative attitude towards it, a window will be displayed, which contains large green text. This window contains an animation that simulates confetti.

Visible Symptoms 

    

Marker.AE is easy to recognize, as it displays a series of messages on screen. If a document is opened or closed and the virus detects that the date on the system clock is July 23 or later, it displays the following dialog box:

If the user answers Yes to this question, Marker.AE displays a thank you message.

If the user’s answer is No and the active document or NORMAL.DOT template contains macros, Marker.AE creates and saves a file on the hard disk. This contains the virus’ macros and has the following characteristics:

  • Filename: Are You suprised.DOC
  • Properties data:

Title: Are You suprised ?
Subject: Birthday
Author: LSK
Key words: Birthday
Comments:
Shankar's Birthday falls on 25th July. Don't Forget to wish him