W32/SillyFDC-E

Category: Viruses and Spyware Protection available since:24 Nov 2006 00:00:00 (GMT)
Type: Win32 executable file virus Last Updated:22 Jan 2010 05:38:44 (GMT)
Prevalence: No Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

W32/SillyFDC-E is a worm for the Windows platform.

When run W32/SillyFDC-E copies itself to <System>\OfcpfwSv.exe

The following registry entries are set to run OfcpfwSv.exe on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
OfcpfwSv.exe
<System>\OfcpfwSv.exe

W32/SillyFDC-E attempts to periodically copy itself to removeable drives, including floppy drives and USB keys. The worm will attempt to create the hidden file Autorun.inf on the removeable drive and copy itself to the file \RECYCLER\RECYCLER\autorun.exe on the same drive . The file Autorun.inf is designed to start the worm once the removeable drive is connected to an uninfected computer.

W32/SillyFDC-E may create the file kas.exe. This file is detected as Troj/PcClien-WI.

download Try Sophos products for free
Download now