Shankar's Virus

Shankar's Virus
Technical name W97M/Marker.o
Aliases The terror of the internet [1]
Classification Polymorphic
Type Computer virus
Isolation June 1999
Author(s) Unknown
Port(s) used Windows 97
Written in English

Shankar's Virus (also known as W97M.Marker.o) is a polymorphic computer virus that infects Microsoft Word documents and templates. It was discovered on June 3, 1999.

Creation

The virus may have originated as a program initially intended to be used in conjunction with Microsoft Word 1997.[2] Some sources attribute the name Sam Rogers to be the identity of a programmer who may have created the virus or contributed to its creation. One source contests that Shankar's Virus has existed since internet immemorial and cites the on/off code in the eighth sub-line of the viruses main code evidence that Sam Rogers or some other individual simply awoke it from dormancy. The polymorphic nature of its code caused some programmers to believe that the virus cycles between long period of activity and inactivity, during numerous iterations of this cycle it steadily absorbed more data from modern systems becoming much harder to delete over time. Potentially the virus can wield a limitless amount of capability within a system due to it having a unique code even for a polymorphic virus.[3] An internet meme emerged in 2014 with Shankar's Virus as the subject matter [4]

Effects

The virus hooks the Word event handler to close documents in order to run its code.

This virus infects documents and templates when a document is opened. It makes the following modifications to the infected documents:[5]

Title: Are You surprised ?
Subject: Birthday 
Author: LdSK
Category: You Are Infected
Keywords: Birthday
Comments: Shankar's Birthday falls on 25th July. Don't Forget to wish him

Also, when opening or closing a Word document, a dialogue box pops up displaying the string text "Did you wish Shankar on his birthday?"

Shankar's virus is also able to effect a computer's time, being able to speed up or reverse time to restore itself (in a way similar to the system restore function) or create a copy of itself to remain inactive until a future time if it should be removed via an antivirus program. It is noted though that these actions visibly weaken its functions as Microsoft Word may stop malfunctioning after the virus manipulates the computer's time.

Should the Shankar's virus be activated on a mobile device or tablet (i.e. Microsoft Word on a mobile phone app) the resulting code of its adaptation could have unrivaled destructive effects. It is unknown if Shankar's virus has any effect on mediums such as Google docs or documents on Social Media.

See also

References

  1. ↑ http://www.symantec.com/security_response/writeup.jsp?docid=2001-090512-1554-99
  2. ↑ http://www.broward.k12.fl.us/erp/ITSupport/docs/software/MICROSOFT%20OFFICE/2Shankar%20Removal%20Instructions.pdf
  3. ↑ http://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?name=Virus%3aW97M%2fMarker.DG
  4. ↑ http://memegenerator.net/ShankarS-Virus
  5. ↑ Images showing the effects of the virus

External links


This article is issued from Wikipedia - version of the Wednesday, December 16, 2015. The text is available under the Creative Commons Attribution/Share Alike but additional terms may apply for the media files.