Welcome to the Virus Encyclopedia of Panda Security.
|Effects: ||It keeps a log of every action it carries out and sends it to an external server. |
|Detection updated on:||July 12, 2001|
Marker.EL is a macro, polymorphic virus that keeps a log of every action it carries out and sends it via FTP to an external server whose address is 209.201.883.110.
Marker.EL also has the typical effects of macro viruses:
- It infects Word 97 documents and global template (NORMAL.DOT file).
- It disables Word 97 macro antivirus protection. This will prevent users from disabling macros before opening a document.
Marker.EL reaches computers in an infected Word 97 document (a file with a DOC extension), using the typical means of virus transmission. Then, it infects the Word template (NORMAL.DOT file) and spreads to all the Word documents generated with it.
The warning messages are not displayed with which Word 97 asks for confirmation to enable or disable macros included in documents before they are opened.