Archived posting to the Leica Users Group, 2009/02/25

[Author Prev] [Author Next] [Thread Prev] [Thread Next] [Author Index] [Topic Index] [Home] [Search]

Subject: [Leica] W32 SillyWorm question
From: len-001 at verizon.net (Leonard Taupier)
Date: Wed Feb 25 15:23:22 2009
References: <3e7573d40902251427i10ccaa88rc69077ffcfd02998@mail.gmail.com> <1619BB95-641A-42D3-8A47-6E6D74CC946D@verizon.net> <36172e5a0902251502u7fe1dba5s5016e3004fe45d34@mail.gmail.com>

Geoff,

This is the mechanism:

There's no other information about which versions of Microsoft's  
operating systems are targeted by the infection so I guess all of  
them are affected since it attempts to add a new registry entry.
W32/SillyFDC-BK spreads via removable shared drives by copying itself  
to krage.exe and creating the file autorun.inf (detected as W32/Agent- 
FOW). The file autorun.inf is designed to run the worm when the  
removable drive is connected to an uninfected computer.

The mac does not have a registry and the .exe file will not run on a  
mac.

Len




On Feb 25, 2009, at 6:02 PM, Geoff Hopkinson wrote:

> Can the Mac be a host (a carrier) without being infected itself?  
> Without
> being expert at all, if it can read and transfer files, the virus  
> can be
> copied even if non-functional on the Mac?
> These are awkward to get rid of.
> 2009/2/26 Leonard Taupier <len-001@verizon.net>
>
>> Leo,
>>
>> The W32 SillyWorm only affects the Windows operating system. Your  
>> Mac is
>> not the culprit.
>>
>> Len
>>
>>
>> On Feb 25, 2009, at 5:27 PM, leo wesson wrote:
>>
>> So a client gave me a usb pen drive to copy a video file to and  
>> when she
>>> tried to load it, there was this  W32 SillyWorm on it.  I wasn't  
>>> the only
>>> one to use the pen drive today.  I 'm on a mac, is there any  
>>> chance that I
>>> was the source of this worm?  Is there any chance I got the worm  
>>> from the
>>> pen drive?  As a mac person should i be running any virus  
>>> checks?  I just
>>> always assume that the frequent updates from apple take care of all
>>> this...
>>>
>>> Leo Wesson
>>> Photographer/Videographer
>>> 817.733.9157
>>> www.leowessson.com
>>>
>>> _______________________________________________
>>> Leica Users Group.
>>> See http://leica-users.org/mailman/listinfo/lug for more information
>>>
>>
>>
>> _______________________________________________
>> Leica Users Group.
>> See http://leica-users.org/mailman/listinfo/lug for more information
>>
>
>
>
> -- 
> Cheers
> Geoff
> 'She looks like an angel moving too fast for its glory'
>
> _______________________________________________
> Leica Users Group.
> See http://leica-users.org/mailman/listinfo/lug for more information


In reply to: Message from leowesson at gmail.com (leo wesson) ([Leica] W32 SillyWorm question)
Message from len-001 at verizon.net (Leonard Taupier) ([Leica] W32 SillyWorm question)
Message from hopsternew at gmail.com (Geoff Hopkinson) ([Leica] W32 SillyWorm question)