Auto-Protect detected security risk W32.SillyFDC

Norton Security | Norton Internet Security
21

One more thing to report before rebooting the Toshiba Satellite M-200 on Windows Vista Business to Out-Of-Box condition this afternoon.

xxxxxxxx

I have installed Visual Studio  2005 way back in October before this {  W32.SillyFDC Virus }  surfaced in early December.

 

I wrote a Windows-Type Visual Basic Program back on November 20, and I haven’t written another Visual Studio program on this machine since.

 

Yesterday morning, I wrote another Windows-type Visual Basic Program and everything went fine.

 

In the afternoon, I clicked on the Visual Studio 2005 Logo in { programs } and something simply automatically ran. It is a program named { wordicon.exe } .

 

I tried to exit Visual Studio and this Visual Studio window came up :

Window #1 --- ‘C:\Windows\Installer\{91120000-0014-0000-0000-0000000FF1CE}\wordicon.sln’ was not written successfully . Check that the location is available, the file is writeable and there is enough room.

 

I clicked { O.K. } and this Window came up :

Window #2 --- { Save File As } window for { wordicon.sln } , File Type is { UTF-8 Solution File  ( *.sln ).

There are 2 buttons here , { Save } and { Cancel } .

I clicked on { Cancel } and the { Window #1 } above came up. Kept on toggling between the 2 windows and simply cannot get-out-of Visual Studio properly.

 

I simply shut-down and re-started the computer, but the { Window #1 } showed up before shutting down.

xxxxxxxx

I started Visual Studio again today and checked-out the { wordicon logo } on the start-up screen, with the other 2 icons being the programs I wrote on Nov 20 and yesterday, respectively.

 

Same thing happened and I couldn’t get-out-of Visual Studio, toggling again between the 2 windows.

 

I shut-down the machine,  { window #1 } came up again, but this time a blinking [ floppy-disk icon ] appeared for a brief second or two, on lower-right-hand-corner on the task-bar, indicating that something is being written onto the Hard-Disk Drive.

xxxxxxxx

I checked , with Windows Explorer, the { C:\Windows\Installer } directory, the {91120000-0014-0000-0000-0000000FF1CE} subdirectory is there and the file { Wordicon.exe } is in this sub-directory.

 

But why am I running this file when I clicked on the Visual Studio Icon. I simply don’t know.

A possibility here is that that Desktop.ini file for Visual Studio has been tampered with.

xxxxxxxx

Now signing-off on this issue, unless I get problems on reboot to out-of-box condition.

  

22

I dont have any USB devices connected.

 

//Apollo70

23

Norton doesn't do very well with this, my laptop was infected with it though a scan  did remove it. My one came from a memory card that Norton failed to block though latter I found the owner of the cards antivirus, Avast,  blocked it on her PC (just thought it would be nice to see her photos and tried it on my laptop!). When I asked here about this I was told Norton should detect and block it, well it didn't until installed on the laptop then a scan did detect and remove it. Something not working right if a free program can block a threat but Norton miss it!

Message Edited by john7 on 07-22-2009 09:50 AM
Message Edited by john7 on 07-22-2009 09:51 AM
24

Thank you John7,
Avast free edition removed it NIS 2009 didn't solved it that rely poorly.
It's something wrong when NIS 2009 cant solved this problem.
Why should I pay for a virus program when a free one is better ;-(
When I spoke whit Symantec support they offer me
to removed it for a charge $99,99 ;-)

http://www.symantec.com/norton/support/premium_services/premium_virus.jsp

 

//Apollo70

25

Hi, Apollo70,

 

Sorry to see you're having Issues with your Norton Product.

 

I would suggest you read the Summary and follow the Removal Instructions (below).  Please do let us know how you get on!

 

You can Download and Install Malwarebytes' Anti-Malware free edition and/or SUPERAntiSpyware Free Edition.  The non-paid Versions of the Products do not have an Real-Time Protection, so they are oksy to have installed on your system along-side your Norton Product.

 

 

Removal Instructions for W32.SillyFDC: http://www.symantec.com/security_response/writeup.jsp?docid=2006-071111-0646-99&tabid=3.

 

Malwarebytes' Anti-Malware for Windows: http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?tag=contentBody;mostPopTwoColWrap.

 

SUPERAntiSpyware Free Edition for WIndows: http://download.cnet.com/SuperAntiSpyware-Free-Edition/3000-8022_4-10523889.html?tag=mncol.

 

26

Thanks for the help but Avast solved the problem ;-)

 

27
Apollo70 wrote:

Thanks for the help but Avast solved the problem ;-)

 

 

Hi, Apollo70,

 

I realised that Avast Solved you Issue; the reason I gave you these instructions was so, if this ever happens again, you could follow these instructions. 

 

Good to see your Issue Solved. Please could you Mark the Post that Solved you Issue so that the reast of us know that your Issue is Solved, and, for those of us that have the same Issue you had, to easily find the Solution.  Many Thanks!

 

You know where we are if you're in trouble again!  ;)

 

28

The norton's history is not showing anything

Delete System Restore Points and empty all temp folders

Have no Autorun.ini on c:

The varning dont contain any suggestion like remove......

When I run a scan nothing virus or worm found.

Pls help me I want reinstall my os.

Vista Ultimate 64 NIS 2009

 

 

//Apollo70

norton.jpg

 

[edit: Resized image.]

Message Edited by Tony_Weiss on 07-22-2009 03:37 PM