• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

W32.Sillyfdc help

Plugged a usb stick into laptop and Norton said it had found Heur.Advml.C and classes it as medium risk. Today turned on the laptop and Norton removed W32.Sillyfdc and said to restart. After restarting two files had appeared on my desktop called .inf which I didn’t open. Having googled W32.Silly it seems it can spread to other computers via the network. I had another pc switched on at the time which beeped. To be on the safe side I have reset both to factory settings (one is windows 10 one is Windows 7) and also unplugged the router for now. We have umpteen pc’s in family house so a bit worried. Also I repair pc’s and have a load of those to test. Anyway - the factory reset is via the inbuilt recovery drive so is that enough? Or could the worm have got into the recovery partition? I have a feeling that the Heur thing may have carried a lot more with it than W32.Sillyfdc. Also read on a Synantec advice sheet the W32.Sillyfdc that it can compromise router and network. Is there anything I can use to virus scan the router and network? Which of course would mean turning it and a pc back on again so feeling a bit stuck. Both those two pc’s (netbooks) had nothing much on them so wiping the drives would be possible but need to know I have this contained before using my main pc chock full of important files. Thanks
Labels: Virus

Replies

Kudos0

Re: W32.Sillyfdc help

Just to add. Am using my iPhone to post on here on mobile network - assume that is ok. I would also like to install Norton on the second laptop I restored to factory settings and wondering if there is a way to do this without connecting to the internet.
Kudos0

Re: W32.Sillyfdc help

Hello Hazel. The first course of action would be getting all your devices CLEAN before reinstalling your Norton product again. I would firstly disable autorun on all your devices to deter further infections. You can download Rkill here and run on all your devices that are off the network and the ones having been factory restored before reconnecting them. Rkill will terminate all malicious processes it finds thus allowing you to run scans and remove any infections found on those computers. If Rkill doesn't find any malicious processes on a specific machine to terminate I would still install and run a full scan with Malwarebytes on each one to be safe. The Beeping Computer forums link on the Rkill URL will also get you some professional cleaning assistance if you should need to take that route.

I would factory reset your router to the out of the box settings it came with. You can also download the latest firmware for it from the vendors site. Norton cannot scan any router so replacing its firmware should clear any issues that may be present with it.

Answering your second post. You must have an active internet connection to install Norton on a device. The most secure way to reinstall is by logging into your Norton account and getting your product directly from there.

Cheers

.

"From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Home / Professional x 64 version 1903 / build 18362.239 / N360 Deluxe 22.17.3.50 / Norton Core v.282 on Android 2.00
Kudos0

Re: W32.Sillyfdc help

Thank you for the Rkill link - very helpful. Our house is chock full of gadgets - umpteen laptops, phones, Nintendo switch. I’ve left everything switched off except the one I suspect. But the Nintendo was permanently on so am concerned that could reinfect Windows machines via the network. That virus uses the network to get on hard drives as well as usb’s. The usb it arrived on only had a Linux distro on it! So it must be in the run partition. Anyway. Can’t get Norton to install properly on the suspect laptop. Installed malwarebytes via usb (immunised usb!) and that was clear including the Rootkit scan. Tried installing Bitdefender instead and can’t get that to update- so I think it will mean wiping the drive, clean install and losing the recovery partition. My concern and confusion is - even if only connecting to the internet with a clean pc to update router firmware, I could get reinfected. Norton should block it I guess. Norton initially found Heur.Advml.C and said it had contained it but next day it then found W32.Sillyfdc. I believe the first one installs lots of others (the Heur one). My own fault for using my usb in a second hand pc to fix it/update it. But as it only had Linux on thought it would be ok.
Kudos0

Re: W32.Sillyfdc help

I think it went into my iPhone as the phone beeped at the same time Norton found the Silly virus. I know it can’t actually affect the phone but the phone could transfer it when plugged into pc so will need reset that to factory settings.
Kudos1 Stats

Re: W32.Sillyfdc help

 Can’t get Norton to install properly on the suspect laptop.

You cannot install a security program on an infected computer. Even if you can install, the infection can affect the way the security software works by possibly disabling functions.

I would suggest you sign up at one of the free Malware Removal sites below. Do not try to do anything on your own as it could make things harder for the Malware Removal expert at that site to help you. Choose one and stay there until your system is clean.

http://www.bleepingcomputer.com/
http://www.geekstogo.com/forum/
http://www.cybertechhelp.com/forums/
http://forums.whatthetech.com/
http://qmalwareremoval.freeforums.net/

Things happen. Export/Backup your Norton Password Manager data.
Kudos0

Re: W32.Sillyfdc help

Thanks. I think it’s clean - after malwarebytes, Norton power eraser and Kaspersky rescue boot disc all showed clear. Still can’t install Norton security though - get a message about screen resolution and saying to click on the link below but it’s either not there or off screen. It’s a 10” atom netbook - not had this issue before on netbooks but noticed the installer seems new/updated. (Downloaded from my norton account). Assume there has been a recent upgrade. Is there any way to install the previous version?
Kudos1 Stats

Re: W32.Sillyfdc help

Panic over. Just to clarify - the two viruses/malware were caught by Norton on a pc running Norton that had no files on and I wiped the drive on the pc. My concern was that a nerbook was turned on at the same time as Norton removed this worm - just in case it had got onto the network before it was removed. But it seems not. The other netbook is clean and the usb stick binned. It got onto the usb stick from a second hand laptop I was installing Linux on which was clearly infected - scrapping it as it was spares and repairs anyway. Reset iPhone and router and checked my main pc and all fine. So looks like Norton dealt with it straight away. The other issue now is - it seems the new version of Norton won’t install on atom netbooks. Now I have it running fine on another 10” netbook but that’s Celeron and the previous version of Norton (set not to upgrade automatically) and it’s also Windows 10. The problems I’m having are installing on Windows 7 with an atom processor. Is this a new version issue?
Kudos0

Re: W32.Sillyfdc help

One question if an expert knows. Pc and router are clean and drive and mbr wiped. Router reset to factory setting and firmware upgraded - belt and braces. But - do I need to replace the ram stick? W32.Sillyfdc lives in ram. I am guessing it can’t live there and relaunch if drive and mbr have been erased - but not quite sure. Would be grateful for advice on that before I turn everything on again.
Kudos1 Stats

Re: W32.Sillyfdc help

RAM is volatile. ie It is cleared when the computer is turned off. There is no way for anything to remain.

Things happen. Export/Backup your Norton Password Manager data.
Kudos0

Re: W32.Sillyfdc help

Thank you.

This thread is closed from further comment. Please visit the forum to start a new thread.