Thread View: uk.comp.misc
2 messages
2 total messages
Started by Andy Mabbett
Sat, 06 May 2000 00:00
WM97/Marker-O macro virus removal
Author: Andy Mabbett
Date: Sat, 06 May 2000 00:00
Date: Sat, 06 May 2000 00:00
36 lines
2021 bytes
2021 bytes
A friend (yes, the same one as before!) has a few files infected with
the Marco virus "WM97/Marker-O".
The Sophos web site has this to say:
Name: WM97/Marker-O
Type: Word 97 macro virus
Resident: Yes, within Word environment.
Detection: Detected by Sophos Anti-Virus version 3.32 or later.
An update (IDE file) is available for earlier versions from the
Latest virus identities section.
This virus has been reported in the wild.
Note: An IDE was posted on 16 February 2000 to update the
definition already included in Sophos Anti-Virus. This updated
IDE is required to detect several occurrences where a WM97/Class
variant has interacted with WM97/Marker-O. These replicants
created will normally give Visual Basic errors.
Comments: Whenever a document is closed there is a 1 in 3 chance
of a File Summary box appearing on the screen with the author
name set to Ethan Frome.
Sophos detects, but does not remove it - how can it, and other Word
Macro Viruses, be purged?
--
Andy Mabbett
According to Microsoft, the world is spinning in the wrong direction:
http://support.microsoft.com/support/kb/articles/Q131/1/09.asp
Re: WM97/Marker-O macro virus removal
Author: David Lawson
Date: Sat, 06 May 2000 00:00
Date: Sat, 06 May 2000 00:00
9 lines
992 bytes
992 bytes
>Sophos detects, but does not remove it - how can it, and other Word >Macro Viruses, be purged? Norton Antivirus cleaned W97M.Marker.A from files I picked up in a New York business centre. -- David Lawson - London
Thread Navigation
This is a paginated view of messages in the thread with full content displayed inline.
Messages are displayed in chronological order, with the original post highlighted in green.
Use pagination controls to navigate through all messages in large threads.
Back to All Threads