This worm may be dropped by other malware. It may arrive via network shares. It may be downloaded unknowingly by a user when visiting malicious Web sites.
This worm drops a copy of itself. This worm creates the following registry entry to enable its automatic execution at every system startup.
This worm creates an IRC script that automatically sends a message to all users who join the IRC server that it connects to.
This worm opens random TCP ports to connect to an Internet Relay Chat (IRC) server and joins an IRC channel. Once connected, it acts as a backdoor that allows a remote malicious user to issue commands locally on an affected machine.


More...