Threat Description

Dude

Details

Aliases:Dude
Category: Malware
Type:
Platform: W32

Summary



WM/Dude is a simple Word macro virus with a destructive payload.



Removal


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.

More

You may wish to refer to the Support Community for further assistance. You also may also refer to General Removal Instructions for a general guide on alternative disinfection actions.



Technical Details



When an infected document is opened the virus copies itself to the global template. Then it infects every document opened or saved with "File/Save As" menu.

At April 4th the virus activates its payload when a document is opened. It then attempts to format the "C:" drive and displays a message box with the following text:

Its cool DuDe's Birthday!!

The virus also hooks two menu selections. "File/Print" inserts an additional "z" character to the current position of the cursor before printing and "Tools/Macros/Macro" does not do anything.





Technical Details: Sami Rautiainen, F-Secure


SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Scan & clean your PC

F-Secure Online Scanner will scan and clean your PC in just a few minutes for free

Learn More