This worm may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites.
It drops files and it creates a registry entry to enable its automatic execution at every system startup. It also modifies registry entries to hide files with both System and Read-only attributes.
This worm drops copies of itself in all physical drives and in all removable drives. It also drops copies of itself in specific drives.It drops an AUTORUN.INF file to automatically execute dropped copies when the drives are accessed.


More...