W32/SillyFDC-D

Category: Viruses and Spyware Protection available since:07 Nov 2006 00:00:00 (GMT)
Type: Win32 worm Last Updated:07 Nov 2006 00:00:00 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

W32/SillyFDC-D is a worm for the Windows platform.

When run W32/SillyFDC-D copies itself to <System>\BrO-AcT.exe and <System>\<Computer Name>\svchost.exe.

The following registry entries are set to run W32/SillyFDC-D on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
BrO_AcT
<System>\BrO-AcT.exe

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
svchost
<System>\<Computer Name>\svchost.exe

W32/SillyFDC-D attempts to periodically copy itself to removeable drives, including floppy drives and USB keys. The worm will attempt to create a hidden, system file Autorun.inf on the removeable drive and copy itself to the same location as the filename "BrO_AcT.exe" and "My SeXy.exe". The file Autorun.inf is designed to start the worm once the removeable drive is connected to a uninfected computer. The file Autorun.inf can be safely deleted.

download Try Sophos products for free
Download now