WM/Dude is a simple Word macro virus with a destructive payload.
Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.
Detailed instructions for F-Secure security products are available in the documentation found in the Downloads section of our Home - Global site.
You may also refer to the Knowledge Base on the F-Secure Community site for further assistance.
When an infected document is opened the virus copies itself to the global template. Then it infects every document opened or saved with "File/Save As" menu.
At April 4th the virus activates its payload when a document is opened. It then attempts to format the "C:" drive and displays a message box with the following text:
Its cool DuDe's Birthday!!
The virus also hooks two menu selections. "File/Print" inserts an additional "z" character to the current position of the cursor before printing and "Tools/Macros/Macro" does not do anything.
Technical Details:Sami Rautiainen, F-Secure