W32/SillyFDC-HZ (file analysis)

The W32/SillyFDC-HZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What W32/SillyFDC-HZ virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• Authenticode signature is invalid
• Behavioural detection: Injection (inter-process)
• CAPE detected the embedded pe malware family
• Attempts to disable Windows Auto Updates
• Anomalous binary characteristics
• Attempts to modify Explorer settings to prevent hidden files from being displayed
• Yara detections observed in process dumps, payloads or dropped files

How to determine W32/SillyFDC-HZ?

File Info:
name: D08E204BA7E9F95C6E08.mlw
path: /opt/CAPEv2/storage/binaries/73396d30ca59d5f0a3e38dd2fb3fd274890cfab74003dc12f88fc2c4698803db
crc32: 063E0F5E
md5: d08e204ba7e9f95c6e0808580d0c40e3
sha1: 8ba86bacb99b58d5ff270ace9ccf02e7e2565b70
sha256: 73396d30ca59d5f0a3e38dd2fb3fd274890cfab74003dc12f88fc2c4698803db
sha512: 5124cf3cc28f3a4d2be6709ebf4664ef3f9846e4ee75d1e24c745fdc2b5242622d992146307a277578f5089a5c37e0428b3bd954407fb296c1f18dcb20ec6ef2
ssdeep: 1536:q0xPseTIqXFixXVG4e2JLBJ3Ue05znybzPe9j5wo7JaSi:nseTI2FixFG4e1ybGVwQU
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T183D34F7F3F0600A5E4741578D2E3E7D22BE5784A5E17E1AAB72063681CEBE251C2CB53
sha3_384: a08af4613046e23bc0f4e3903dd0b10038d0479f07f940a2cb6953f0e456b98c964d55066c88f0d00ea32c3d1bfeb8f3
ep_bytes: 6898124000e8f0ffffff000000000000
timestamp: 2012-04-14 15:28:30

Version Info:
0: [No Data]

W32/SillyFDC-HZ also known as:

How to remove W32/SillyFDC-HZ?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.