Threat Description



Category: Malware
Platform: W32
Aliases: SillyC, SillyC, SillyCR, SillyE, SillyCE, SillyER, SillyCER, SillyOR


Viruses in the Silly family are not necessarily related at all. Silly is a groupname for all relatively small viruses which do nothing but replicate and which do not contain anything particular that can be used to name them.


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.

More scanning & removal options

More information on scanning or removal options is available in the documentation for your F-Secure security product on the Downloads section of our Home - Global site.

You may also refer to the Knowledge Base on the F-Secure Community site for more information.

Contact Support

For further assistance, F-Secure customers can request support online via the Request support or the Chat forms on our Home - Global site.

Technical Details

Such viruses are grouped in the following families:

SillyC   - Non-resident viruses, which infect only COM files SillyE   - Non-resident viruses, which infect only EXE files SillyCE  - Non-resident viruses, which infect both types of files SillyCR  - Resident viruses, which infect only COM files SillyER  - Resident viruses, which infect only EXE files SillyCER - Resident viruses, which infect both types of files SillyOR  - Resident viruses, which overwrite the host files  

The variants in each family are named by their infective length.

it might be a good idea to search all files for infection, as some members of SillyOR family will corrupt data files by overwriting them with their own code. F-Secure anti-virus products are able to locate these corrupted data files so you can replace them with good copies.



Other:Resident, COM-files

This virus infects COM files and EXE files with COM extension. It doesn't check the host file size before infection so it can corrupt large COM files. It marks infected files by adding 100 years to the file date and setting the second fields to 62.

The virus has no texts or activation routine.

This virus was reported to be in the wild in Hungary in January 1996.


Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More