To get a one-glance comprehensive view of the behavior of this malware, refer to the Behavior Diagram shown below.

Malware Overview
This Trojan arrives as attachment to email messages spammed by another malware or a malicious user. It may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites.
It displays the following image upon execution:

It creates folders.
It creates a registry entry to enable its automatic execution at every system startup. It creates also registry key(s) as part of its installation routine. It modifies registry entry(ies) as part of its installation routine.
It drops files.


More...