1. Skip to navigation
  2. Skip to content
  3. Skip to secondary-content




Dude

Summary

WM/Dude is a simple Word macro virus with a destructive payload.

Additional Details

When an infected document is opened the virus copies itself to the global template. Then it infects every document opened or saved with "File/Save As" menu.

At April 4th the virus activates its payload when a document is opened. It then attempts to format the "C:" drive and displays a message box with the following text:

        Its cool DuDe's Birthday!!

The virus also hooks two menu selections. "File/Print" inserts an additional "z" character to the current position of the cursor before printing and "Tools/Macros/Macro" does not do anything.

[Analysis: Sami Rautiainen, F-Secure]