Threat description



WM/Alien is a Word macro virus.

When an infected document is opened, the virus infects the global template. After that it infects all documents that are either opened or closed. It removes the "Tools/Customize..." and "Tools/Macro..." menu selections as well.


Automatic action

Depending on the settings of your F-Secure security product, it will either automatically delete, quarantine or rename the suspect file, or ask you for a desired action.

More scanning & removal options

More information on the scanning and removal options available in your F-Secure product can be found in the Help Center.

You may also refer to the Knowledge Base on the F-Secure Community site for more information.

Contact Support

F-Secure customers can request support online via the Request support or the Chat forms on our Home - Global site.

Technical Details

At random times while the virus infects the global template or the active document, it displays a random message boxes. These message boxes have the following title:


and the message text is one of the following:

Another Year of Survival ...

 It's Sunday & I intend to relax !

 Now You See Me - Now You Don't !

 Never Open Others Files !

 Never Trust An Alien !

 Don't Believe All Tips !

 Always Back Up Your Data.

 Don't Believe The Hype !

 Three Cheers For The Alien. Hip Hip Hooray !

 I'll Be Back !

 Hi Beautiful !

 You Facinate Me.

 Look No Further ...

 The 'Alien' Virus Has Arrived !

 The Alien Lives ...

 Longer File Names Should Be Used.

It also sometimes attempts to hide the Windows Program Manager or Word, exit from Windows completely or close the active document.

Submit a Sample

Suspect a file or URL was wrongly detected? Send it to our Labs for further analysis

Submit a Sample

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

More Info