high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | May 2008 (4.29) |
| Protection available since | 29 March 2008 19:48:57 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing worms.
More Information
W32/SillyFDC-CD is a worm for the Windows platform.
When first run W32/SillyFDC-CD copies itself to <Windows>\kernelpr.dll and creates the following files:
<Windows>\myproc.dll (detected as W32/SillyFDC-CD)
<Windows>\security\services.exe (detected as W32/SillyFDC-CD)
<Windows>\setupconfig.dat (harmless data file, can be deleted)
The following registry entry is created to run W32/SillyFDC-CD on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
services
<Windows>\security\services.exe
Once running W32/SillyFDC-CD may also copy itself to removable drives, along with an autorun file, so the copy is executed when the drive is inserted into a computer.
|
