Classification

Category: Malware

Type: -

Aliases: Alien

Summary


WM/Alien is a Word macro virus.

When an infected document is opened, the virus infects the global template. After that it infects all documents that are either opened or closed. It removes the "Tools/Customize..." and "Tools/Macro..." menu selections as well.

Removal


Automatic action

Based on the settings of your F-Secure security product, it will either automatically delete, quarantine or rename the detected program or file, or ask you for a desired action.

Knowledge Base

Find the latest advice in our Community Knowledge Base.

About the product

See the manual for your F-Secure product on the Help Center.

Contact Support

Chat with or call an expert for help.

Submit a sample

Submit a file or URL for further analysis.

Technical Details


At random times while the virus infects the global template or the active document, it displays a random message boxes. These message boxes have the following title:

Alien

and the message text is one of the following:

Another Year of Survival ...



 It's Sunday & I intend to relax !



 Now You See Me - Now You Don't !



 Never Open Others Files !



 Never Trust An Alien !



 Don't Believe All Tips !



 Always Back Up Your Data.



 Don't Believe The Hype !



 Three Cheers For The Alien. Hip Hip Hooray !



 I'll Be Back !



 Hi Beautiful !



 You Facinate Me.



 Look No Further ...



 The 'Alien' Virus Has Arrived !



 The Alien Lives ...



 Longer File Names Should Be Used.

It also sometimes attempts to hide the Windows Program Manager or Word, exit from Windows completely or close the active document.