This worm may be downloaded from remote sites by other malware. It may be dropped by other malware.
It drops copies of itself.
It modifies registry entries to enable its automatic execution at every system startup. It also modifies registry entries to hide files with both System and Read-only attributes. It deletes registry keys/entries.
It drops copies of itself in all physical drives and in all removable drives.


More...