This Trojan may arrive bundled with malware packages as a malware component.It may arrive as a .DLL file that exports functions used by other malware.
It injects threads into normal processes.
It creates registry entries to enable its automatic execution at every system startup.It registers itself as a Browser Helper Object (BHO) to ensure its automatic execution every time Internet Explorer is run. It does this by creating registry keys/entries.
It creates registry key(s)/entry(ies) as part of its installation routine.


More...