Welcome to the Virus Encyclopedia of Panda Security.
It writes romantic messages when the user accesses the Notepad, it switches off the screen every 5 seconds and opens the CD-ROM tray, among other actions. It spreads by infecting the files with an EXE extension of the different system drives.
|First detected on:||May 22, 2007|
|Detection updated on:||May 16, 2008|
|Yes, using TruPrevent Technologies
Ridnu.D is a worm that writes romantic messages when the user accesses the Notepad and displays the message MR COOLFACE ! if the user accesses the option Run of the Start menu.
Additionally, it switches off the screen every 5 seconds and opens the CD-ROM tray.
Ridnu.D spreads by infecting the files with an EXE extension when the user accesses any folder.
Ridnu.D is easy to recognize, as when it is run, it shows the following symptoms:
- If the user accesses the Notepad, it writes romantic messages that start with the text DEAR MY PRINCESS followed by one of the following messages, among others:
- I AM FALLING IN LOVE WITH YOU !
- I HAVE BEEN POISONED BY YOUR LOVE !
- I MISS YOU I AM STILL LOOKING FOR YOU !
- I WANNA TAKE YOU TO MY PALACE
- I WILL BE WAITING FOR YOU !
- I WILL TAKE YOU TO OUR UTOPIA
-PLEASE DO NOT FORGET OUR PAST !
-YOU WILL ALWAYS IN MY HEART !
- When Internet Explorer is run, it displays a website like the following:
In order to understand better some of the actions carried out by Ridnu.D, an explanatory video is at your disposal.>>