Eng
  1. Skip to navigation
  2. Skip to content
  3. Skip to sidebar


Dude


Aliases:


Dude

Malware

W32

Summary

WM/Dude is a simple Word macro virus with a destructive payload.



Disinfection & Removal

Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.



Technical Details

When an infected document is opened the virus copies itself to the global template. Then it infects every document opened or saved with "File/Save As" menu.

At April 4th the virus activates its payload when a document is opened. It then attempts to format the "C:" drive and displays a message box with the following text:

Its cool DuDe's Birthday!!

The virus also hooks two menu selections. "File/Print" inserts an additional "z" character to the current position of the cursor before printing and "Tools/Macros/Macro" does not do anything.





Technical Details: Sami Rautiainen, F-Secure



Submit a sample




Wondering if a file or URL is malicious? Submit a sample to our Lab for analysis via the Sample Analysis System (SAS)

Give And Get Advice




Give advice. Get advice. Share the knowledge on our free discussion forum.

Scan and clean your PC




F-Secure Online Scanner will scan and clean your PC in just a few minutes for free