Threat Description



Aliases: Dude
Category: Malware
Platform: W32


WM/Dude is a simple Word macro virus with a destructive payload.


Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.

Technical Details

When an infected document is opened the virus copies itself to the global template. Then it infects every document opened or saved with "File/Save As" menu.

At April 4th the virus activates its payload when a document is opened. It then attempts to format the "C:" drive and displays a message box with the following text:

Its cool DuDe's Birthday!!

The virus also hooks two menu selections. "File/Print" inserts an additional "z" character to the current position of the cursor before printing and "Tools/Macros/Macro" does not do anything.

Technical Details: Sami Rautiainen, F-Secure


Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Scan & clean your PC

F-Secure Online Scanner will scan and clean your PC in just a few minutes for free

Learn More