Danger level 7
Type: Malware

Worm.SillyShareCopy.U

Worm.SillyShareCopy.U is regarded as a System Back Door infection, which fits well within the malware group category.

Worm.SillyShareCopy.U is associated with various aliases, namely:
- kbdsapi.dll
- lsass.exe
- smss.exe

These type .exe extensions usually indicate that the file is an executable file that contains the code for a program.

Be aware that this type of file may be infected, containing malicious code, which will only compromise the integrity of any system it has infiltrated.

In order to figure out whether Worm.SillyShareCopy.U and its affiliated .exe files are legitimate or malicious, there are a few signs one can look out for:

* First examine the description, the product or the company signing
* At initial activation illegitimate file opens a small window and immediately closes under the cursor. This process is called dummywin.exe and proves illegitimacy of the file.
* A file can get injected when cursor moves on the window and in this way activates the process.
* On a powerful PC the window will display and close instantly before you can even react.
* You can check information on the file online; this will reduce the risk of removing a legitimate program.

The Worm.SillyShareCopy.U file is related to spyware; therefore a computer system’s security and privacy may be at risk.

Accordingly, it is recommended to run a full system scan in order to detect any spyware threats, and test whether Worm.SillyShareCopy.U is a threat or not.

Should a computer system be showing signs of infection, in that it is noticeably slower and generally compromised, one should urgently check the PC in question and remove any malicious software including Worm.SillyShareCopy.U as soon as possible.

Download Spyware Removal Tool to Remove* Worm.SillyShareCopy.U
  • Quick & tested solution for Worm.SillyShareCopy.U removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Worm.SillyShareCopy.U

Files associated with Worm.SillyShareCopy.U infection:

mssql.exe
6519BF2E.EXE
ComboFix.exe
svcnost.exe
iesafemode.exe
THtbkNgfuioGT.exe
TEydAJxIvxCQie.exe
ncgtuhnuqiw.exe
dkP6xpyEsUmrx.exe
73A29E2E.EXE
kbdsapi.dll
lsass.exe
smss.exe

Worm.SillyShareCopy.U DLL's to remove:

kbdsapi.dll

Worm.SillyShareCopy.U processes to kill:

6519BF2E.EXE
73A29E2E.EXE
mssql.exe
ComboFix.exe
svcnost.exe
iesafemode.exe
THtbkNgfuioGT.exe
TEydAJxIvxCQie.exe
ncgtuhnuqiw.exe
dkP6xpyEsUmrx.exe
lsass.exe
smss.exe

Remove Worm.SillyShareCopy.U registry entries:

HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSNTCURRENTVERSIONWINLOGONUSERINIT userinit
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINLOGON\USERINIT\ userinit
RUNNING PROGRAMExplorer.EXE
RUNNING PROGRAMlsass.exe
RUNNING PROGRAM\Explorer.EXE
RUNNING PROGRAM\lsass.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.