W32/SillyFDC-BR is a worm for the Windows platform.
When run W32/SillyFDC-BR copies itself to <System>\amvo.exe and sets the following registry entry to run itself on startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
amva
<System>\amvo.exe
W32/SillyFDC-BR also registers itself as a service with the name "asdcvb", a description of "asdcvb" and a startup type of automatic. Registry entries are created under:
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ASDCVB\
W32/SillyFDC-BR creates the following files:
<System>\amvo0.dll - detected as Troj/Lineag-Gen
<System>\gnsmo.dll - detected as W32/SillyFDC-BR
W32/SillyFDC-BR spreads via removable shared drives by copying itself to <Root>\dosocom.com and creates the file <Root>\autorun.inf (also detected as W32/SillyFDC-BR) which is designed to run the worm when the drive is connected to an uninfected computer.