1. /
  2. Security Response/
  3. W32.SillyFDC

W32.SillyFDC

Risk Level 1: Very Low

Discovered:
February 27, 2007
Updated:
September 22, 2014 2:39:17 PM
Type:
Worm
Systems Affected:
Windows 2000, Windows 7, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP
W32.SillyFDC is a generic detection for worms that spread by copying themselves to removable drives. Certain variants may also copy themselves to mapped drives, while others may download files or perform other malicious activities.

AutoRun is a feature of Windows that allows a drive to be configured so that a particular executable may be run whenever the drive is accessed or connected to another computer. Worms detected as W32.SillyFDC typically use the AutoRun feature to spread.

The term AutoPlay is used to refer to functionality present in Windows XP and later that includes the AutoRun feature. On insertion of media, AutoPlay may prompt the user to select an action that should be taken. Depending on system configuration, these actions may include AutoRun tasks.

Users should note that AutoRun is disabled by default for non-optical removable drives in recent versions of Windows and on systems with certain updates applied.

Symantec strongly recommends that users take steps to control the use of the AutoRun feature and prevent the execution of programs referenced in autorun.inf files. For more information, please see the following document:

How to prevent a virus from spreading using the 'AutoRun' feature.

If a Symantec antivirus product displays a detection alert for this threat, it means the computer is already protected and the Symantec product will effectively remove this threat from the computer.

Antivirus Protection Dates

  • Initial Rapid Release version January 8, 2004
  • Latest Rapid Release version October 20, 2014 revision 025
  • Initial Daily Certified version January 8, 2004
  • Latest Daily Certified version September 11, 2014 revision 035
  • Initial Weekly Certified release date July 12, 2006
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy

Damage

  • Damage Level: Medium
  • Degrades Performance: Copying itself to various locations may degrade performance.

Distribution

  • Distribution Level: Low
  • Target of Infection: Removable and mapped drives.
Writeup By: Henry Bell

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report
Symantec DeepSight Screensaver