This worm may be downloaded from malicious sites.
Upon execution, this worm drops several files. It then creates a registry entry to enable its automatic execution at every system startup. This worm also modifies registry entries to hide files with both System and Read-only attributes.
This worm drops copies of itself in all physical and removable drives. It also drops an AUTORUN.INF file to automatically execute its dropped copies when the said drives are accessed.
This worm accesses Web sites to download a non-malicious text file. It also downloads an updated copy of itself from a certain URL.


More...