Home Malware Programs Worms Net-Worm.SillyFDC!rem

Net-Worm.SillyFDC!rem

Posted: November 17, 2010

Net-Worm.SillyFDC!rem is a network-aware computer Worm which attempts to replicate across any existing network. Net-Worm.SillyFDC!rem poses a high security risk to PC safety and once a system is infected with Net-Worm.SillyFDC!rem it may experience data loss and other misbehavior, including a possible decrease in performance. Remove Net-Worm.SillyFDC!rem immediately using an updated malware remover.

Aliases

Worm.Win32.AutoRun.boii (Kaspersky Lab)
W32/Autorun.worm.aaav (McAfee)
W32/Nieps-B (Sophos)
Worm:Win32/Autorun.WT (Microsoft)
Virus.Win32.Agent (Ikarus)
Win-Trojan/Inrecycler.379256 (AhnLab)

File System Modifications

  • The following files were created in the system:
    # File Name
    1 c:\Program Files\Windows Alerter\WinAlert.exe
    2 c:\Program Files\Windows Common Files\Commgr.exe
    3 c:\RECYCLER\X-1-5-21-1960408961-725345543-839522115-1003\bnf0342
    4 c:\RECYCLER\X-1-5-21-1960408961-725345543-839522115-1003\info
    5 c:\RECYCLER\X-1-5-21-1960408961-725345543-839522115-1003\WinSysApp.exe
    6 c:\RECYCLER\X-1-5-21-1960408961-725345543-839522115-1003\wndsvc.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
Loading...