W32/SillyFD-R is a worm for the Windows platform.
When first run W32/SillyFD-R copies itself to:
<System>\autochl.exe
<System>\config\system.exe
<System>\dllcache\log.exe
<System>\lap.exe
<System>\sserver.exe
<Temp>\newdev.exe
<System>\config\system.sav
The following registry entry is changed to run sserver.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Shell
Explorer.exe <System>\sserver.exe