W32/SillyFDC-X is a worm for the windows platform.
When run W32/SillyFDC-X copies itself to
<System>\LSACS.exe
and creates the following files:
<System>\Spiservice.dll
<System>\Winservice.dll
<System>\lsas.exe
The following registry entry is created to run lsacs.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
CLSRSS
<System>\LSACS.EXE
W32/SillyFDC-X attempts to periodically copy itself to removeable drives, including floppy drives and USB keys. The worm will attempt to create a hidden file Autorun.inf on the removeable drive and copy itself to <Recycler>\LSACS.exe. The file Autorun.inf is designed to start the worm once the removeable drive is connected to a uninfected computer.