This worm may be dropped by other malware.It may arrive via network shares and removable drives.It may be downloaded unknowingly by a user when visiting malicious Web sites.
It drops copies of itself.
It registers itself as a system service to ensure its automatic execution at every system startup. It does this by creating a registry key and entry.
It drops copies of itself in specific drives using a certain file name. It drops an AUTORUN.INF file to automatically execute dropped copies when the drives are accessed.


More...