W32/SillyFDC-DM

Category: Viruses and Spyware Protection available since:16 Jul 2009 04:50:20 (GMT)
Type: Win32 worm Last Updated:16 Jul 2009 04:50:20 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

W32/SillyFDC-DM is a worm for the Windows platform.

When first run W32/SillyFDC-DM copies itself to:

<System32>\Mapiyasha.exe
C:\Recycled\Mapiyasha.exe

and creates
C:\Mapiyasha\autorun.inf
C:\autorun.inf
which are detected as Mal/AutoInf-A

The following registry entries are created to run Mapiyasha.exe on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Mapiyasha
<System32>\Mapiyasha.exe

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Mapiyasha
<System32>\Mapiyasha.exe

W32/SillyFDC-DM may periodically attempt to copy itself to removeable drives.The worm will attempt to create a hidden file Autorun.inf on the removeable drive and copy itself to the file Mapiyasha.exe. The file Autorun.inf is designed to start the worm when the removeable drive is connected to another computer, which is detected as Mal/AutoInf-A

download Try Sophos products for free
Download now