A new worm that arrives in email attachement and spreads on local networks by infecting files such as .doc, .xls, .exp, .ppt, .mdb, .dba, .pdf, .jpg, .psd, .ai, .dwg, .mp3, .mpg, .zip, .rar, .qxd, .rdf, .rep, .fmx, .fmb and .cpp was reported by Symantec and called it W32.Gudek.

This worm can inject the message “Locked by Mr. Guddu” on the said files. It will be hard for an ordinary users to remove the infection manually because it can disables Windows process such as Windows Registry, Folder Options, Group Policy Editor, Command and Task Manager.

It may also display the following message on the tray menu:

Warning!
You are infected by Unknown Virus! Contact with Mr. Guddu! Mail at
mr.guddu.bd@gmail.com