Welcome to the Virus Encyclopedia of Panda Security.
|Effects: ||It infects Microsoft Word 97 documents and the NORMAL.DOT template and it displays messages on screen.
|Detection updated on:||Nov. 13, 2002|
Marker.AE is a macro virus that infects Word 97 documents and the global template (NORMAL.DOT file) used by this application. In order to do this, it uses the typical stealth techniques of macro viruses. These include disabling the macro antivirus protection (the warning will not be displayed when opening documents that contain macros).
Marker.AE displays a series of windows asking the user about the virus author’s birthday. If the user has a negative attitude towards it, a window will be displayed, which contains large green text. This window contains an animation that simulates confetti.
Marker.AE is easy to recognize, as it displays a series of messages on screen. If a document is opened or closed and the virus detects that the date on the system clock is July 23 or later, it displays the following dialog box:
If the user answers Yes to this question, Marker.AE displays a thank you message.
If the user’s answer is No and the active document or NORMAL.DOT template contains macros, Marker.AE creates and saves a file on the hard disk. This contains the virus’ macros and has the following characteristics:
- Filename: Are You suprised.DOC
- Properties data:
Title: Are You suprised ?
Key words: Birthday
Comments: Shankar's Birthday falls on 25th July. Don't Forget to wish him