Classification

Category :

Malware

Type :

-

Aliases :

SillyC, SillyC, SillyCR, SillyE, SillyCE, SillyER, SillyCER, SillyOR

Summary

Viruses in the Silly family are not necessarily related at all. Silly is a groupname for all relatively small viruses which do nothing but replicate and which do not contain anything particular that can be used to name them.

Removal

Based on the settings of your F-Secure security product, it will either move the file to the quarantine where it cannot spread or cause harm, or remove it.

A False Positive is when a file is incorrectly detected as harmful, usually because its code or behavior resembles known harmful programs. A False Positive will usually be fixed in a subsequent database update without any action needed on your part. If you wish, you may also:

  • Check for the latest database updates

    First check if your F-Secure security program is using the latest updates, then try scanning the file again.

  • Submit a sample

    After checking, if you still believe the file is incorrectly detected, you can submit a sample of it for re-analysis.

    Note: If the file was moved to quarantine, you need to collect the file from quarantine before you can submit it.

  • Exclude a file from further scanning

    If you are certain that the file is safe and want to continue using it, you can exclude it from further scanning by the F-Secure security product.

    Note: You need administrative rights to change the settings.

Technical Details

Such viruses are grouped in the following families:

SillyC
 - Non-resident viruses, which infect only COM files SillyE
 - Non-resident viruses, which infect only EXE files SillyCE
- Non-resident viruses, which infect both types of files SillyCR
- Resident viruses, which infect only COM files SillyER
- Resident viruses, which infect only EXE files SillyCER - Resident viruses, which infect both types of files SillyOR
- Resident viruses, which overwrite the host files

The variants in each family are named by their infective length.

it might be a good idea to search all files for infection, as some members of SillyOR family will corrupt data files by overwriting them with their own code. F-Secure anti-virus products are able to locate these corrupted data files so you can replace them with good copies.

Variant:SillyC.373

Size:373

Other:Resident, COM-files

This virus infects COM files and EXE files with COM extension. It doesn't check the host file size before infection so it can corrupt large COM files. It marks infected files by adding 100 years to the file date and setting the second fields to 62.

The virus has no texts or activation routine.

This virus was reported to be in the wild in Hungary in January 1996.